Intelligent CISO Issue 20 | Page 45

industry unlocked Chris Roberts, Chief Security Strategist, Attivo Networks systems – such as the Aircraft Communications Addressing and Reporting System (ACARS) – are gradually being interconnected to allow them to be controlled remotely via the Internet. As they do this air traffic operators are keenly aware that doing so increases the risk that outsiders could access onboard systems. How is the aviation sector rising to the challenge of combatting these threats? JOE CARSON: The aviation industry has always risen to the challenges since the www.intelligentciso.com | Issue 20 industry heavily relies on safety as its primary priority. When systems become more connected online, cybersecurity is no longer just an IT security issue – it then becomes a safety issue – and that is why aviation organisations treat cyberattacks as such a high priority. However sometimes shortcuts do occur such as using critical communication equipment onboard aircraft for payments and this increases the threats and risks. CHRIS ROBERTS: The introduction of increased Internet connectivity brings opportunities for elevated revenue streams and operation savings to the aviation sector. At the same time passengers and industry regulators will expect ever more robust cybersecurity measures to protect the information they exchange and access through aircraft in the sky. The answer to the rising challenges for providers of in-flight communication services – some of which are constrained by the architecture and physical limitations of their networks – is to build increased security layers around these more capable networks. Can you outline any use cases of how technology is being used to mitigate threats? JOE CARSON: One main area of technology being continuously improved is that of ADS-B (Automatic Dependent Surveillance – Broadcast) which is used for safety. However, in the past, since it was using radio frequency, it was not encrypted and could have been monitored or, worse, the data could be poisoned. However recent improvements have focused around securing and better protecting critical safety systems by decreasing risks such as spoofing, data poisoning and hacking. CHRIS ROBERTS: In-flight communication services, both for the entertainment of the general passenger and the efficiency of the business traveller, face steady growth in demand that is certain to increase as passengers insist 45