CYBERSECURITY AND SAFETY IN MODERN AVIATION SYSTEMS: RISK ANALYSIS AND PREVENTION APPROACHES

Abstract

            The aviation industry in the digital age relies on real-time data networks, from satellite navigation systems to ground-based operational analytics platforms, which enhance operational efficiency and resilience. However, cyber vulnerabilities are rapidly expanding, rendering traditional defense measures inadequate. The digital aviation industry, relying on real-time data, is increasingly vulnerable to cyber threats. The key idea is to use the NIST CSF 2.0 as a "grand plan" for how organizations should identify critical assets, prevent, monitor, respond, and recover from cyber incidents.
            This academic article synthesizes a comprehensive picture of cyber risks across the entire aviation supply chain, from aircraft, air traffic management systems, airports, and the software supply chain. It also aligns defense approaches from key international standards, drawing on the International Aviation Framework for Aviation, with existing international standards, including ICAO A41-19, NIST SP 800-82 Rev. 2, and EASA Easy Access Rules 2024. The article also discusses jurisdictional responsibilities, regulatory consistency, cross-border oversight, and talent shortages. The report is from the International Information System Security Certification Consortium, Inc., a nonprofit professional association specializing in cybersecurity founded in the United States in 1989. "Building a Safer Cyber ​​World" ISC2 identified a global cybersecurity gap of over 5 million jobs. Finally, it proposed a short-, medium-, and long-term roadmap to enhance cyber resilience and emphasized policy principles for all parties as auditable requirements in Europe. The FAA ASISP helped promote security-by-design, following the Aircraft Systems Information Security (ASISP) guidelines, a cybersecurity framework for aircraft systems from the Federal Aviation Administration (FAA) of the United States. These guidelines promote the secure and confidential reporting and exchange of cyber threat information related to civil aviation systems.