Pen testing avionics under ED-203a

This document outlines aviation cybersecurity certification frameworks (ED-202A/DO-326A, ED-203A/DO-356A, ED-204A/DO-355), explaining their scope and roles in certifying and maintaining avionics security. It describes how systems and interfaces are scoped, how attack paths and risks are assessed using scoring for preparation, opportunity, and execution, and how Security Assurance Levels (SAL 0–3) indicate confidence in protection, distinguishing them from safety-focused DALs.