Trends to minimize threats in aviation IT and security

March 10, 2020

Strategies in favor of securitization of data require a higher level of ingenuity every day as the demand of sharing data and therefore connectivity and system integration as per the aviation industry requirements is increasing. Consequently the number of cyberattack threats is growing continuously.

Data analytics and modelling tools for big data, including artificial intelligence tools, are a reality and a market that is evolving and improving aviation-processes – from advances in air traffic management, to higher efficiency in airport processes, to improvements for the passenger experience. Likewise information security engineering is evolving and new strategies are being researched in order to avoid potential breaches in such a complex interconnected industry.

This current race we are in, in an industry that demands further interoperability every day, is also a risk. If this growth is not controlled and properly secured, it becomes an opportunity for a cyberattack to succeed. This threat could become a catastrophic event and even lead to a complete shut-down of an airport or a catastrophic accident. Systems and data in an enterprise could be compromised by a hacker entity. The hackers may even press enormous amounts of money from airports to handback control of the systems. 

Other initiatives to support and ease the growth of interoperability in the industry are in place as the System-Wide Information Management (SWIM). A technology program addressed by the International Civil Aviation Organization (ICAO) and developed in the framework of SESAR (Single European Sky ATM Research), aimed to set common standards for data exchange. Several ATM and airport sources provide a flexible and scalable architecture that will ensure consistent information for improved planning and operation.

Investments in improving and securing the company's IT landscape are as essential as having relevant measures in place, which prevent the company from losing the overall system control due to a cyberattack. This does not only refer to operations, but also to sensitive data and third party information which could imply a threat to our trustable parties. Identifying cyberattacks as early as possible and mitigating the risks are key success factors of a secure and trustable performance of the systems within an enterprise.

Besides the engineering strategies and tools, a cyber security department has an additional decisive task: promoting a conscious cyber security culture across the company. Awareness and training are essential to minimize risks and keep all employees up to date on possible threats.