Contributor - Europe

Cathy Buyck

Eurocontrol is calling on the industry to develop its defensive capability against cyber threats. The agency is urging&nbsp;all stakeholders to take a collaborative approach to building a federated, trusted cyber-resilience framework as the number of cyber-attacks on aviation rises. The intensity—the time and magnitude—of the breaches also has heightened. Reports of cyber-attacks on aviation have exceeded 30 in the first half of this year while most likely more occurred but went publicly unreported or even detected, the Brussels-based intergovernmental ATM organization noted in its “Think Paper” on cybersecurity in aviation. The data refers to cyber events on a global level and across the industry, not just ATM.

 


Though not always a threat to safety, the cyber-attacks sometimes disrupted the ability to deliver services. Belgian OEM <a href="https://www.ainonline.com/aviation-news/air-transport/2019-06-28/asco-sees-progress-restoring-production-after-cyber-attack">Asco Industries, for instance, had to halt production</a> at its sites in Belgium, Canada, the U.S., and Germany for several days and even weeks following a large-scale ransomware attack on June 7. On top of the serious business consequences, the attacks bear a financial cost, Eurocontrol pointed out. Estimates place the average cost of a cyberattack at $1 million, but some recent aviation cyber incidents cost much more; the UK’s data protection authority in July imposed a £183.4 million ($230 million) <a href="https://www.ainonline.com/aviation-news/air-transport/2019-07-08/british-airways-faces-record-ps183-million-fine-over-data-breach">fine on British Airways</a> over the theft of passenger data in 2018.

 


It identified three main categories of cyber threats on aviation: state-sponsored attacks; cyber-crime, which according to Eurocontrol is “an industry”; and “hacktivism,” a form of cyber-attack ostensibly motivated by environmental concerns that often target aviation for its perceived negative effect on climate change and its intense media exposure. “Those hacktivists are sharp and can rely on an extended network of skilled hackers. Their motivation is their strength,” Eurocontrol’s cyber-intelligence unit explained.

 


The number of aviation actors potentially affected by a cyber-attack will “inevitably increase,” Eurocontrol emphasized, because of the industry’s widespread introduction of digitalization thanks to new technologies and concepts using non-aviation specific means, such as Cloud, 5G, internet, satellite communications, and navigation. It said its comprehensive penetration tests and ethical hacking on many ATM systems revealed that most current ATM systems are vulnerable. “The challenge now lies in making aviation systems [and] services progressively more and more cyber-resilient while remaining safe and cost-effective,” Eurocontrol concluded.

 


It cautioned, however, against an isolationist approach, which it said could not work in aviation because stakeholders are connected to each other. “One-by-one we are an easy target. The goal is to build a federated trusted cyber resilience framework,” it stressed.

News and information about crew, passenger, aircraft and airport security issues.

Eurocontrol Cautions for Step-change in Cyber-attacks

More than 30 cyber-attacks on aviation have gone publicly reported in the first half of this year.

2024 Corporate Aviation Leadership Summit

Charles Alcock

News about significant aircraft accidents and information from accident reports.

News and information on safety procedures and concerns.

News and issues relating to international air transport and cargo carriers, national airlines and regional airlines, including aircraft, engines, personnel, acquisitions, accidents, safety, security and training.

News and issues relating to business, corporate and private aviation, primarily regarding turbine-engine-powered airplanes and helicopters. Subjects include aircraft, engines, maintenance, operations, personnel, acquisitions, accidents, safety, security, and training.

Security consultants are warning clients to increase vigilance

Aircraft Operators Face Rising Threats in Gulf and Russia

Jeremy Kariuki

A recount of the days following the 9/11 terror attacks

Thinking on the fly: Unprecedented times, leadership during 9/11

New developments at airports including regulations and noise issues; legal disputes; openings, acquisitions and mergers.

Russia widely believed to have gotten an explosives-carrying drone into the German airport

Leipzig Drone Threat Raises Security Risk in Europe

Charlotte Bailey

Essential news and analysis on the defense aerospace business. Your trusted source for new and ongoing programs and requirements in military aircraft (manned and unmanned), engines, avionics, weapons and associated systems, including ground-based air defense.

More In Security

Aircraft Operators Face Rising Threats in Gulf and Russia

Security consultants are warning clients to increase vigilance

Thinking on the fly: Unprecedented times, leadership during 9/11

A recount of the days following the 9/11 terror attacks

Leipzig Drone Threat Raises Security Risk in Europe

Russia widely believed to have gotten an explosives-carrying drone into the German airport

Canada Targets Increased Domestic Defense Production

Saab offers Gripen with future fighter choice still to be decided

Air Chiefs: Allied Integration Essential as Threats Intensify

Evolving threats demand deeper multinational cooperation

Boeing Offering Cyber Protection with SkyGuard Service

Digital twin technology eliminates the need for physical access to the aircraft

TSA Urges Operators To Prep Pax during FIFA Traffic Surge

GA has faced Real ID compliance challenges

Security Specialist Warns of Bizav Cyberattack Threats

Cyviation said small operators need more help to be protected

AIN Products

SUBSCRIPTIONS

RESOURCES

ABOUT AIN