Aviation Cybersecurity- 1 :Aviation System Breakdown
Image courtesy of the European Union Agency for Network and Information Security

Aviation Cybersecurity- 1 :Aviation System Breakdown

This article provides a breakdown of aviation systems into three primary domains: Ground Side, Air Side, and Airlines. This categorization aids in understanding the specific challenges and vulnerabilities associated with each domain, laying the foundation for targeted security initiatives.

How can we look to aviation from cybersecurity perspective?

The aviation systems can be divided into three main categories

  • Ground side
  • Air side and
  • Airlines

1. Ground side:

Ground Side pertains to all systems and operations associated with airports but located outside the immediate vicinity of runways, taxiways, and aprons.

Components:

  • Airport Terminal Systems: Reservation systems, check-in counters, baggage claim systems, retail operations, etc.
  • Infrastructure: Building management systems, HVAC, utilities, lighting systems, etc.
  • Communication Systems: Telecommunications, public address systems, internet connectivity, and other network components.

2. Air Side :

Air side This includes areas of an airport directly related to aircraft operations, namely runways, taxiways, and aprons.

Components:

  • Air Traffic Control Systems: Radar systems, navigation aids, communication interfaces.
  • Ground Vehicles: Digitally-equipped vehicles used for fueling, baggage handling, maintenance, etc.
  • Security Systems: Surveillance setups, access control systems, etc.

3. Airlines

Pertains directly to the operations of airlines, both airborne and terrestrial.

Components:

  • Aircraft Systems: On-board computers, avionics, communication infrastructures, inflight entertainment modules.
  • Operational Systems: Maintenance logs, crew scheduling systems, flight planning tools.
  • Customer Systems: Loyalty schemes, reservation systems, mobile apps.Who are the major


International Civil Aviation Organization (ICAO)

1. Type: A specialized agency of the United Nations.

2. Established: In 1944, following the Chicago Convention.

3. Purpose:

  • Develop international Standards and Recommended Practices (SARPs) which its member states use to ensure their local civil aviation operations and regulations conform to global norms.
  • Enhance civil aviation safety, security, efficiency, and environmental protection globally.

4. Membership: 193 Member States (countries).

5. Main Activities:

  • Setting global standards for aviation safety, security, efficiency, capacity, and environmental protection.
  • Auditing civil aviation oversight capabilities through the Universal Safety Oversight Audit Programme (USOAP).
  • Offering assistance for aviation sector development via strategic partnerships.

Civil Air Navigation Services Organization (CANSO)

1. Type: International non-profit organization representing providers of air traffic control.

2. Established: In 1996.

3. Purpose:

  • Provide a voice for air traffic management (ATM) worldwide.
  • Improve air traffic management performance and interoperability.

4. Membership: Over 90 air traffic service providers and more than 85 industry partners and stakeholders.

5. Main Activities:

  • Advocacy on significant ATM issues.
  • Providing platforms for ATM professionals to exchange information and best practices.
  • Representing its members' views at the global level, especially in forums like ICAO.

International Air Transport Association (IATA)

1. Type: Trade association representing the world's airlines.

2. Established: In 1945.

3. Purpose:

  • Represent, lead, and serve the airline industry.
  • Promote safe, regular, and economical air transport for the benefit of the global public.

4. Membership: Represents 290 airlines or 82% of total air traffic.

5. Main Activities:

  • Setting commercial standards for airlines.
  • Training and professional development initiatives.
  • Safety and security improvement initiatives, such as the IATA Operational Safety Audit (IOSA).
  • Advocacy on behalf of member airlines on issues like taxes, fees, and consumer regulations.

Comparison:

  • Mandate: ICAO focuses on regulatory and oversight functions for civil aviation at the international level. CANSO centers on air traffic management and its advancement. IATA represents airline interests and strives to facilitate their operations.
  • Membership: ICAO's members are countries, CANSO's members are air traffic service providers and related stakeholders, and IATA's members are airlines.
  • Influence: While all three have significant influence in the aviation sector, ICAO's influence is primarily regulatory, CANSO's is operational concerning air traffic, and IATA's is commercial and operational concerning airlines.

Thanks for sharing.Awaiting the second part eagerly.

Like
Reply
Ahmed Abdullatif.

Cyber Security Leader, GICSP, ISA62443 Cyber Security Expert, NSE7-OT, CCIE# 51504, PMP#1294234,

1y
Esam Abdelmawla Abdullah

Security Consulting Manager: OT / IIOT /IT Security Architect - Enterprise Security Architect-GICSP -GRID- IEC 62443 | SABSA | Digital Transformation

1y

Good Article, thanks for sharing Bro. Mohamed Atta

To view or add a comment, sign in

More articles by Mohamed Atta

  • A blueprint for OT SOC - Part 2

    A blueprint for OT SOC - Part 2

    In this series of articles, i will present the OT SOC blueprint by answering these questions: Why do wee need an OT…

    5 Comments
  • A blueprint for OT SOC - Part 1

    A blueprint for OT SOC - Part 1

    Why do we need an OT SOC? The term 5 Ws and H refers to the six basic questions to ask when gathering information or…

    11 Comments
  • Aviation Cybersecuity-2 Smart Airport Assets and Threats

    Aviation Cybersecuity-2 Smart Airport Assets and Threats

    This part 2 of the series of article dedicated to aviation cybersecurity. In the previous article we divided the…

    7 Comments

Insights from the community

Others also viewed

Explore topics