How can you improve cybersecurity for aviation systems?

Cyber is an emerging issue in Aviation Security. It has not yet been added to ICAO list of AUI. However, it is real that cyber can be an issue we must contend with because it is has proved to be a real threat. Therefore, a risk based approach should be considered. This should not be approach in a silo. Aviation authorities must engage the national ICT and national Cyber Security Authorities with a view to mapped out Aviation CNIs. National AVSEC policies must be aligned to the National Cyber Strategy and AVSEC components as byproduct.

It is important to be methodical when adopting a risk-based approach. Here is how I would proceed : 1. Identify critical assets and vulnerabilities: Inventory systems and categorize based on needs and operation importance. 2. Conduct vulnerability assessment. Implement a risk management framework: Assess likelihood and impact of threats, prioritize mitigation efforts based on risk scores. 3. Continuous monitoring and improvement: Monitor systems for suspicious activity, practice incident response, and regularly review risk assessments.

I am a huge proponent of convergence of physical security and cyber (including IOT) security in an AVSEC environment. This means having physical security risk assessments looking at cyber attack paths. This also includes having a comprehensive enterprise security program. In addition physical security practitioners need basic cyber security knowledge and cyber security specialists need to know how cyber programs interact with physical security systems. The key term to implementing a proper security program is convergence.

Sharing information about threats and how to fight them is key. Here is how I would proceed : 1. I would advocate for using a secure platform. 2. I would encourage Airlines, airports, air traffic control, and other stakeholders to work together to develop plans. 3. Governments, regional and international organizations should elaborate the proper legal framework and provide resources to keep aviation safe from cyberattacks.

Audits and inspections—and other surveillance activities could play a vital role in enhancing cybersecurity in civil aviation. We could define standardized diagnostic tests conducted on a regular basis—enabling civil aviation authorities and IT departments to identify vulnerabilities and weaknesses in systems and correct them swiftly.