Aviation Cybersecurity - Keeping the Wings On

Explore the critical cybersecurity challenges facing the aviation industry in this 52-minute conference talk from the RSA Conference. Delve into the expanding attack surface created by increased connectivity and digitization in aviation, and its implications for safety, security, and critical services. Learn about global efforts to tackle these challenges and discover potential cross-sector collaborations. Gain insights from aviation cybersecurity experts Peter Cooper and Nathalie Feyt as they discuss the industry's unique DNA, common misconceptions about aircraft hacking, and the need for a coherent global approach. Examine the balance between culture, compliance, and assurance, and understand the importance of dedicated aviation-specific certifications. Discover strategies for achieving cyber resilience, including safety segregation, layered security, and tailored cybersecurity solutions. Explore the shift towards lifecycle cybersecurity approaches, threat monitoring through ISACs, and continuous operational security management. Conclude with valuable lessons that can be shared between the aviation sector and other industries facing similar cybersecurity challenges.

Intro
Aviation now and future ... with digitisation
Connectivity
Complexity - Threat Surface in the aviation ecosystem
Aviation sector benefits from its DNA...
"You can't hack an aircraft!" ...?
Aviation cyber attacks
Resilience, critical systems and trust
Balancing culture, compliance and assurance
And dedicated aviation specific certifications-Right?
We need a coherent global approach
Supported by new Standards...for compliance...? ED-201 - Aeronautical Information System
What can we do to reach cyber resilience?
Preventing availability & integrity impacts ...
Safety segregation aims to prevent threat propagation
Layered security to enhance resilience
The actual challenge: Securing aviation data
Developing tailored cyber security solutions
Is Anti-virus a solution for Aircraft Systems?
Pave the way to cyber health monitoring
Shifting to a lifecycle cyber security approach Design Phase
Monitoring the threats and incidents: ISACS
And managing operational continuous security
Conclusions
What can other sectors learn from aviation?
What can the aviation sector learn/ do?