Assessing the impact of aviation security on cyber power

Conference item

We analyse the impact of new wireless technology threat models on cyber power, using the aviation context as an example. The ongoing move from traditional air traffic control systems such as radar and voice towards enhanced surveillance and communications systems using modern data networks causes a marked shift in the security of the aviation environment. Implemented through the European SESAR and the US American NextGen programmes, several new air traffic control and communication protocols are currently being rolled out that have been in the works for decades. Unfortunately, during their development the shifting wireless technology threat models were not taken into account. As technology related to digital avionics is getting more widely accessible, traditional electronic warfare threat models are fast becoming obsolete. This paper defines a novel and realistic threat model based on the up-to-date capabilities of different types of threat agents and their impact on a digitalised aviation communication system. After analysing how the changing technological environment affects the security of aviation technologies, current and future, we discuss the reasons preventing the aviation industry from quickly improving the security of its wireless protocols. Among these reasons, we identify the existing tradition of the industry, the prevalence of legacy hard-and software, major cost pressures, slow development cycles, and a narrow focus on safety (as opposed to security). Finally, we analyse how this major technological shift informs the future of cyber power and conflict in the aviation environment by looking at tangible effects for state actors.

Authors: Strohmeier, M; Schafer, M; Smith, M; Lenders, V; Martinovic, I

• Publication status: Published
• Peer review status: Peer reviewed
• Publisher: IEEE
• Host title: 2016 8th International Conference on Cyber Conflict (CyCon)
• Journal: Cyber Conflict (CyCon), 2016 8th International Conference on
• Pages: 223-241
• Publication date: 2016-08-04
• Acceptance date: 2016-04-11
• Event location: Tallinn
• DOI: 10.1109/CYCON.2016.7529437
• EISSN: 2325-5374
• ISSN: 2325-5366
• ISBN: 9789949954483
• Keywords: critical infrastructures; communication security; cyber power; aviation privacy; aviation security; wireless attacks