A method for filtering network messages in an aviation network based on a current system context, comprising: receiving, by a processor of a computer system, a plurality of network messages transmitted within an aviation network; analyzing, by the processor, the plurality of network messages to determine network traffic information; determining, by the processor and based on the network traffic information, a current system context from among a plurality of system contexts, wherein each of the plurality of system contexts indicates a respective aggregate status of a plurality of avionic devices in the aviation network; selecting, by the processor and based on the current system context, a set of filtering rules from among a plurality of sets of filtering rules; applying, by the processor, the selected set of filtering rules to the plurality of network messages to determine a subset of the plurality of network messages that are acceptable for the current system context; and forwarding, by the processor, each network message of the subset to a destination of the network message, wherein analyzing the plurality of network messages to determine the network traffic information comprises: extracting, from the header of each network message, a network port for the network message; and determining, for each network port, a percentage of the network traffic over the period of time, and wherein determining, based on the network traffic information, the current system context comprises determining the current system context based on the percentage of the network traffic for each network port over the period of time. receiving, by a processor of a computer system, a plurality of network messages transmitted within an aviation network; analyzing, by the processor, the plurality of network messages to determine network traffic information; determining, by the processor and based on the network traffic information, a current system context from among a plurality of system contexts, wherein each of the plurality of system contexts indicates a respective aggregate status of a plurality of avionic devices in the aviation network; selecting, by the processor and based on the current system context, a set of filtering rules from among a plurality of sets of filtering rules; applying, by the processor, the selected set of filtering rules to the plurality of network messages to determine a subset of the plurality of network messages that are acceptable for the current system context; and forwarding, by the processor, each network message of the subset to a destination of the network message, wherein analyzing the plurality of network messages to determine the network traffic information comprises: extracting, from the header of each network message, a network port for the network message; and determining, for each network port, a percentage of the network traffic over the period of time, and wherein determining, based on the network traffic information, the current system context comprises determining the current system context based on the percentage of the network traffic for each network port over the period of time. extracting, from the header of each network message, a network port for the network message; and determining, for each network port, a percentage of the network traffic over the period of time, and wherein determining, based on the network traffic information, the current system context comprises determining the current system context based on the percentage of the network traffic for each network port over the period of time.