An Electronic Flight Bag (EFB) is the electronic display system — usually a tablet or installed cockpit screen — that replaced the pilot’s 15–18 kg paper flight bag of charts, manuals and performance data. It is also something few guides treat it as: a distributed, connected, security-relevant computing system stretching from state surveying offices to a glowing screen at 38,000 feet. This 8-part series covers the whole machine — hardware, software, data, regulation, attack surface, defenses, and operational safety — at engineering depth, with original diagrams throughout.
When you replace paper with software, data integrity becomes a flight-safety property. Security and safety converge on the EFB. That is the thesis of this series, and by Part 8 every chapter will have contributed a piece of its proof.
The Series
| # | Part | What you’ll be able to explain afterwards | Read |
|---|---|---|---|
| 1 | What Is an Electronic Flight Bag? The Complete 2026 Guide | The system concept, the economics (38 lbs of paper per pilot), the ecosystem map the whole series uses | ~11 min |
| 2 | EFB Hardware: Class 1, 2, 3 and Portable vs Installed | Why the class model died, what replaced it, and the AID — the gateway between certified avionics and everything else | ~12 min |
| 3 | EFB Software: Type A, Type B and Type C Applications | How one question — “what happens when it’s wrong?” — sorts every EFB app, and the seven Type B families that run the cockpit | ~11 min |
| 4 | How EFB Data Reaches the Cockpit: Charts, Updates & Connectivity | The full AIRAC pipeline — origination, ARINC 424, distribution, activation — and the integrity question at its heart | ~11 min |
| 5 | EFB Regulations & Certification: FAA, EASA & ICAO | Who actually approves an EFB, the 8-step approval process, and why Part-IS makes EFB security law in Europe from 2025–26 | ~10 min |
| 6 | EFB Cybersecurity: Attack Surface, Real Threats & Published Research | Six mapped attack vectors, chart-data poisoning, and the USENIX ’26 hardware implant attack on real 737 avionics | ~12 min |
| 7 | Securing the EFB: DO-326A, Hardening and Defense-in-Depth | The five defense layers, the DO-326A family, signed chart data — and a 20-control checklist you can audit against | ~12 min |
| 8 | EFB Safety & Human Factors: Battery Fires, Failure Policy and the Future | Thermal runaway, the common-mode trap behind “redundant” tablets, human factors, and the 2030 EFB | ~13 min |
Who this is for
- Security engineers & researchers — an aviation-domain deep dive with real published attack research (Parts 4, 6, 7)
- Pilots & flight ops — what’s actually under the glass you use every day (Parts 1–5, 8)
- Avionics & EFB program staff — standards-precise references for approval and audit work (Parts 2, 3, 5, 7)
- Students — a complete, cited path from “what is an EFB” to attack trees and DO-326A
Get the full series as one PDF
All 8 parts, the 20-control security checklist, and every diagram in printable form.
All 8 parts are now published. A compiled PDF edition (all 8 parts + checklist + diagrams) will be added here.
Series FAQ
What is an EFB in simple terms?
An Electronic Flight Bag is the electronic system — tablet or installed screen, its applications, data feed and mounting — that replaces the pilot’s paper charts, manuals and performance documents on the flight deck.
Is this series beginner-friendly?
Yes — Part 1 assumes nothing. The series then climbs deliberately: Parts 2–5 build the technical foundation, Parts 6–7 are full-depth security, Part 8 covers operational safety. Every part links back to what it builds on.
Why does a cybersecurity site cover aviation?
Because the EFB is where the two fields physically meet: a connected, programmable, ground-managed endpoint whose data integrity is a flight-safety property. The attack and defense techniques will feel familiar to any security practitioner.
Are the diagrams free to use?
Yes — all original series diagrams are CC BY-SA (credited to hmmnm.com), including the attack-surface map and the 20-control checklist.
Current as of September 2026 · standards verified against the latest revisions.
Educational reference only — always follow your operator’s approved EFB program and your NAA’s current guidance.
Author: hmmnm.com editorial team · hmmnm.com