The Defence of Civilian Air Traffic Systems from Cyber Threats

Abstract:

The use of ICT in civil aviation has increased exponentially in the last years. Digitalisation and the technological tools and systems often connected to the internet constitute serious risks for aviation cyber security. The Government Accountability Office (GAO) has recently stated that air traffic management and control (ATM/ATC) vulnerabilities could be used to undermine national security.

Against this backdrop, several related questions arise: what technologies do air traffic management and control systems rely on? Are these systems vulnerable? Which actors could pose a threat to these systems? Do they have the technological skills to conduct attacks that could compromise them? The low technical skills of the non-state actors analysed in this research, the cyber security countermeasures adopted by ENAV and the preventive activities conducted by Italian authorities make the risk for Italian ATM/ATC systems low. However, it is necessary to keep a high level of attention and awareness on possible future developments of the cyber threat.