Aviation safety 2.0: the new rules of cybersecurity in the aerospace sector

New rules are being introduced in the aerospace sector following a renewed commitment to an adequate cybersecurity capability at the federal level. As reported by the Washington Post, these new directives will place responsibilities on airport managers - including small businesses - and require careful monitoring and protection of flight data in traffic control centers and airport data centers nationwide. This renewed momentum towards new rules and a higher level of security will inevitably leave room for innovation and the acquisition of new technologies to counter the malevolent digital actors. But what tools will form this new foundation?

Integrate the chain

Cybersecurity in the aerospace industry isn't just about ensuring that planes take off. Indeed, it is in the pre-flight steps in the supply chain where the greatest expertise is needed. Effectively countering cybersecurity threats is about building a resilience at every link in this chain, and that can only be achieved with a keen interest every step of the way.

Aviation Week highlighted a huge surge in cybersecurity attacks against the supply chain, with levels reaching 600% of the norm in 2023 so far. This also extends to government acquisitions and the very high security world of federal aviation. The new rules mean more responsibility is placed on vendors along the chain to take responsibility for their section and ensure their defenses are up to date and use the latest technology.

A change of mentality

There is a precedent in federal aviation about changing cultures. As pointed out by The Register, one pilot turned CISO noted how embracing a “just” culture, where mistakes are accepted and reported, rather than ruthlessly punished, has helped make pilots better at their jobs and more capable. to report errors. Removing fear from the process and having an open yet secure cyber threat reporting system will ensure a culture shift that is more conducive to promoting security. This is critical – there must be a rigor in limiting cybersecurity challenges, but there must also be a permissiveness to make mistakes and learn from them.

Facing future challenges

Cybersecurity faces challenges every time technology takes a quantum leap, and it's about to happen again. As the government points out, electric aviation is on the way - at least for short-haul flights - and that brings additional flying risks. All modern aircraft depend on digital circuitry, but the more advanced the aircraft, the less contingency to revert to mechanical methods if those digital arrangements are compromised. As a result, there is a lot to catch up for manufacturers to meet the demands that electric aviation will present in its ultra-clean future.

In summary, the future of aviation cybersecurity is collaboration. Collaborating with partners, pilots, technologists and planners to meet the challenge is key. In such a high profile, high stakes industry, it is indisputable that no other approach will work as well.