Gerrard Cowan

As cybersecurity in air traffic management (ATM)&nbsp;becomes more of a priority, companies and regulators are increasing their focus on technological solutions, notably&nbsp;potential applications of artificial intelligence (AI) and blockchain.

 


Cyber for ATM was a major focus of Cybertech Europe, a cybersecurity conference&nbsp;in Rome in late September. The conference heard from a number of senior figures in international ATM cybersecurity, including Patrick Mana, manager of the European Air Traffic Management Computer Emergency Response Team (EATM-CERT) and cybersecurity cell manager at Eurocontrol.

 


The cyber threats to aviation take numerous forms, said Mana. First, state-sponsored attacks pose a real and significant threat, he said. Second, aviation and ATM are&nbsp;targets of cyber crime, both directly (with criminals seeking to steal information or money) and indirectly (when the criminals attack systems without realizing they are part of an ATM solution). Third, he pointed to the threat from "hacktivists," actors who use their cyber activities to convey political or other types of messages. There have been examples of hacktivists accessing flight information screens to transmit messages, he said, which may not be connected to aviation.

 


The scale of the threat means it is no longer truly possible to be completely cyber-secure, Mana said. The real goal should be “cyber-resilience,” focusing both on defending against attacks and quickly reacting should such an attack succeed.

 


“We are assuming that things will happen,” he said. Taking this viewpoint could help ensure that attacks create less significant interruptions to services for shorter periods of time, he added.

 


<h2>Collaborative Effort</h2>

 


There is a particular requirement in&nbsp;aviation&nbsp;for various stakeholders to collaborate, given the ubiquitous nature of the threat, Mana said. Eurocontrol aims to work closely with authorities like the European Union Aviation Safety Agency (EASA), national agencies and industry. This collaboration will be particularly important in building cyber threat intelligence, Mana said.

 


Italy’s Leonardo is working to boost cybersecurity in ATM in several ways, said Giuliano d’Auria, from the chief technical office of the company’s electronics division's&nbsp;traffic-control systems business unit. He also emphasized the need for systems that bolster resilience over security, particularly given the evolving nature of the cyber threat. “We should be developing systems which are able to deal with the after-effects of an attack,” he said.

 


D’Auria stressed the need for “security by configuration” where cybersecurity solutions are “tailored for the ATM environment and specifically for the actual operational environment.” Industry must continually reassess the technologies available for cybersecurity in the ATM domain, he said, pointing in particular to the potential applications of AI and blockchain.

 


AI is particularly useful in navigating the vast amounts of data now available in ATM, D’Auria said. AI enables operators “to display the right information at the right time to the right person,” he said, while also allowing for early warning and predictive functions. Leonardo is applying this to the ATM domain through several projects, he said, including its Decision Support System, an architecture that uses the company’s security operations centers (SOCs), software tools and other capabilities to help users analyze and predict potential cyber threats.

 


Blockchain is especially relevant for cybersecurity in ATM, D’Auria said, as the development of secure ledgers of information produces “a new trust paradigm.” For example, he said Leonardo is working on “blockchain-enforced integrated access control” for use in ATM; this would require operators to register their presence, both physically (when entering a controlled environment, for instance) and virtually.

 


Additionally, Leonardo is developing a blockchain-based system for unmanned traffic management (UTM) that&nbsp;would require operators and drones to register on blockchain, enabling a web of “smart contracts” between registered devices. This could be used to grant a drone permission to enter a certain area of airspace, for example, or to assure operators that their data is being transmitted securely. This technology could also be applied to ATM more broadly, he added.

 


“Exchange of data is a key feature of ATM, and if we are able to certify this exchange of data, clearly we’re going a long way towards this journey for cybersecurity,” D’Auria said.

 


ATM is not unique in terms of the cyber challenges it faces, but deals with particularly large degrees of risk, said Amir Rapaport, the founder and organizer of Cybertech. Speaking with AIN, he noted that even a small attack on an airport could lead to thousands of flights being grounded and the loss of potentially millions of dollars. In this regard, aviation is similar to Fintech, he said.

 


“The uniqueness is the high risk, not specifically the complexity of the threats,” he warned.

News, issues, personnel, equipment and developments about air traffic management.

Cybersecurity High on ATC Agenda

ATC providers are applying AI and blockchain techniques in tackling cybersecurity risks.

2024 Corporate Aviation Leadership Summit

Kerry Lynch

New developments at airports including regulations and noise issues; legal disputes; openings, acquisitions and mergers.

News and issues relating to international air transport and cargo carriers, national airlines and regional airlines, including aircraft, engines, personnel, acquisitions, accidents, safety, security and training.

News and issues relating to business, corporate and private aviation, primarily regarding turbine-engine-powered airplanes and helicopters. Subjects include aircraft, engines, maintenance, operations, personnel, acquisitions, accidents, safety, security, and training.

KDCA and KEWR receive SMR-4 installations, while IDIQ AT&T covers coms

FAA Installs Surface Radars at Key Airports and Awards $74.3M to AT&T

Hanneke Weitering

Issues regarding financing of aircraft; aviation insurance; tax issues for aircraft operators; new companies and people in the aviation financing and insurance industries.

News about bills, laws, regulations and other governmental decisions affecting aviation and aerospace. Topics include FAA re-authorizations, taxes on fuel and aviation activities, environmental legislation, ICAO decisions, governmental mediation of labor conflicts and World Trade Organization disputes and decisions.

Milestone covers the software that talks to air traffic control

Merlin Clears a Certification Hurdle for AI in the Cockpit

Charlotte Bailey

News and issues relating to civil and military unmanned aircraft systems (UAS), unmanned aerial vehicles (UAVs) and remotely piloted aircraft systems (RPAS) of all kinds and sizes, including those used for intelligence, surveillance and reconnaissance (ISR), combat (unmanned combat air vehicles, or UCAVs), law enforcement, research and other applications. Of particular focus is the FAA's planned integration of UAS into the U.S. national airspace system.

Honeywell-led consortium to consider advanced air mobility integration

Verti-Go Initiative to Lead European Airspace Update

NASA controllers used existing tools to manage simulated autonomous traffic

Wisk Tests 1:3 Supervisor Ratio for Autonomous Flight

Amy Wilder

News and issues concerning general aviation, specifically airplanes and helicopters powered by piston and alternative engines (i.e., non-turbine powered aircraft). Subjects include aircraft, engines, personnel, acquisitions, accidents, safety, security and training.

More In ATC

FAA Installs Surface Radars at Key Airports and Awards $74.3M to AT&T

KDCA and KEWR receive SMR-4 installations, while IDIQ AT&T covers coms

Merlin Clears a Certification Hurdle for AI in the Cockpit

Milestone covers the software that talks to air traffic control

Verti-Go Initiative to Lead European Airspace Update

Honeywell-led consortium to consider advanced air mobility integration

Wisk Tests 1:3 Supervisor Ratio for Autonomous Flight

NASA controllers used existing tools to manage simulated autonomous traffic

Modern Skies Coalition Urges $20B More for ATC Upgrades

Funds would build on $12.5 billion approved last year

FAA Taps L3Harris To Modernize Surveillance Network

Contract covers more than 700 ground stations nationwide

FAA’s Wilbur To Improve Flight Delay Data Efficiencies

FAA completed an audit to strengthen NAS operations related to flight delays and cancellations

FAA Commissions First of New Indra Radars

The initial radar is installed in Putnam, Oklahoma

AIN Products

SUBSCRIPTIONS

RESOURCES

ABOUT AIN