Abstract:The integration of Information and Communication Technology (ICT) tools into mechanical devices in routine use within the aviation industry has heightened cyber-security concerns. The extent of the inherent vulnerabilities in the software tools that drive these systems escalates as the level of integration increases. Moreover, these concerns are becoming even more acute as the migration within the industry in the deployment of electronic-enabled aircraft and smart airports gathers pace. A review of cyber-security attacks and attack surfaces within the aviation sector over the last 20 years provides a mapping of the trends and insights that are of value in informing on future frameworks to protect the evolution of a key industry. The goal is to identify common threat actors, their motivations, attacks types and map the vulnerabilities within aviation infrastructures most commonly subject to persistent attack campaigns. The analyses will enable an improved understanding of both the current and potential future cyber-security protection provisions for the sector. Evidence is provided that the main threats to the industry arise from Advance Persistent Threat (APT) groups that operate, in collaboration with a particular state actor, to steal intellectual property and intelligence in order to advance their domestic aerospace capabilities as well as monitor, infiltrate and subvert other sovereign nations’ capabilities. A segment of the aviation industry commonly attacked is the Information Technology (IT) infrastructure, the most prominent type of attack being malicious hacking with intent to gain unauthorised access. The analysis of the range of attack surfaces and the existing threat dynamics has been used as a foundation to predict future cyber-attack trends. The insights arising from the review will support the future definition and implementation of proactive measures that protect critical infrastructures against cyber-incidents that damage the confidence of customers in a key service-oriented industry.

Applying Industrial Engineering to Aviation Security

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Risk assessment techniques for civil aviation security

Industrial Safety Management Using Innovative and Proactive Strategies

Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends

Selected Problems of Security Control in Civil Aviation Based on Own Empirical Research

Integrated Application of Industrial Engineering Methods Including Lean, Six Sigma, and Theory of Constraints

Trace Detection in Aviation Security and Its Envisioned Future

Research on Information Security Protection System of Industrial Control System

Aviation Safety Risk Analysis and Flight Technology Assessment Issues

Toward an Epidemiology of Safety and Security Risks: An Organizational Vulnerability Assessment in International Airports

Research on Integrated Avionics System Safety Methodology

Some New Techniques and Methods for Homeland Security

Agent-based modelling and analysis of security and efficiency in airport terminals

Assessment of Aviation Security Risk Management for Airline Turnaround Processes

Security for Industrial Communication Systems

Information systems as a tool for supporting the management of aircraft flight safety

Insights for Critical Alarm-Based Warning Systems from a Risk Analysis of Commercial Aviation Passenger Screening

Analysis framework of network security situational awareness and comparison of implementation methods

Methodological Aspects for Controlling the Processes that Secure the Reliability of Aviation Engineering

A new inter-disciplinary relationship: introducing self-organized criticality to failures in aviation security