A method for generating filter rules comprising: capturing, by a processor of a computer system, one or more network packets corresponding to a functional network flow associated with a function in an aircraft, transmitted within a networked aviation system; parsing, by the processor, the one or more network packets in order to extract one or more network messages, comprising communications, corresponding to the function; examining, by the processor, each of the one or more network messages in order to identify a plurality of attributes, wherein each of the plurality of attributes correspond to header and data fields of the one or more network packets corresponding to the respective network message, and wherein the plurality of attributes of at least one of the one or more network messages include a flight phase attribute including an operational state of the aircraft; classifying, by a classification module executed on the processor, the functional network flow, comprising classifying the plurality of attributes including the flight phase attribute, to generate a classified functional network flow; generating, by the processor, a table corresponding to classified functional network flows including the classified functional network flow, wherein the table either includes one or more generated filter rules or contains information required by the processor for generating the filter rules which are then generated by the processor, wherein each filter rule is based on a classified functional network flow of the classified functional network flows, and wherein the filter rules are used to determine which of the communications corresponding to the classified functional network flow are authorized during a context of the networked aviation system, wherein the context of the networked aviation system is defined by at least a flight phase of the aircraft; and validating, by the processor, the one or more filter rules. capturing, by a processor of a computer system, one or more network packets corresponding to a functional network flow associated with a function in an aircraft, transmitted within a networked aviation system; parsing, by the processor, the one or more network packets in order to extract one or more network messages, comprising communications, corresponding to the function; examining, by the processor, each of the one or more network messages in order to identify a plurality of attributes, wherein each of the plurality of attributes correspond to header and data fields of the one or more network packets corresponding to the respective network message, and wherein the plurality of attributes of at least one of the one or more network messages include a flight phase attribute including an operational state of the aircraft; classifying, by a classification module executed on the processor, the functional network flow, comprising classifying the plurality of attributes including the flight phase attribute, to generate a classified functional network flow; generating, by the processor, a table corresponding to classified functional network flows including the classified functional network flow, wherein the table either includes one or more generated filter rules or contains information required by the processor for generating the filter rules which are then generated by the processor, wherein each filter rule is based on a classified functional network flow of the classified functional network flows, and wherein the filter rules are used to determine which of the communications corresponding to the classified functional network flow are authorized during a context of the networked aviation system, wherein the context of the networked aviation system is defined by at least a flight phase of the aircraft; and wherein the table either includes one or more generated filter rules or contains information required by the processor for generating the filter rules which are then generated by the processor, wherein each filter rule is based on a classified functional network flow of the classified functional network flows, and wherein the filter rules are used to determine which of the communications corresponding to the classified functional network flow are authorized during a context of the networked aviation system, wherein the context of the networked aviation system is defined by at least a flight phase of the aircraft; and validating, by the processor, the one or more filter rules.