From security to cybersecurity in air transport

How can we reap the benefits of digitalisation?

As aviation embraces new technologies and becomes ever more interconnected and open, it faces the same challenges as other industries engaged in the digital transformation. Open, interconnected systems boost performance in air transport, make our air defences stronger and offer new services for passengers — but they also expose operators to an increasingly broad array of ever more sophisticated cyberthreats.

With over 1 million computer-based attacks reported every day around the world, how can we help the world of aerospace to fully embrace the digital revolution while keeping it safe from cyberattacks and the very real damage they can cause?

The technologies used in the aviation sector are undergoing a far-reaching digital transformation. Instead of closed systems communicating one-on-one, today we have an ecosystem that is completely interconnected and increasingly open to the outside world, sharing vast amounts of data in real time. Providing security on board aircraft and for airports, airbases and other infrastructure is no longer enough. Today, each and every system, communication and data point needs to be protected at all times.

Going forward, digitalisation will only deliver real benefits in the aerospace sector if we build cybersecurity into every aspect of the ecosystem. This relies on two complementary approaches:

• End-to-end security. To ensure a system is properly protected, it is vital to have a clear understanding of how it interacts with all the other systems, and how it handles operational and technical issues that are specific to the aerospace business. This kind of approach calls for an overarching vision — a vision that Thales has developed over many years through a hands-on involvement with all the stakeholders in the sector.
• Cybersecurity by design and throughout the system lifecycle. Like any well thought-out security process, cybersecurity must be built into the design of each system and the measures in place need to evolve throughout the system lifecycle to keep pace with a constantly changing threat environment. Thales's value proposition spans the entire lifecycle of critical information systems and cybersecurity, from auditing and consulting to design, development, renovation, integration, supervision, security operation and maintenance, upgrades and support.

Cybersecurity is not an end in itself. It can seem like a constraint, but it actually creates value for users by letting them benefit from the latest technology and services. It brings transformational products and services within reach of operators, and protects the interests of governments and citizens without compromising system security or the safety of passengers and flight crews. Protecting interconnected systems and infrastructure against cyberattacks is not an obstacle to progress. On the contrary, it delivers measurable results such as optimised air traffic management relying on smooth, uninterrupted flows of flight data between control centres and airports. Thanks to cybersecurity, airport operations are now safer, faster, more efficient and less costly.

Passengers are enjoying the benefits too, with more interactive in-flight entertainment systems, richer content and secure internet connectivity to enhance the travel experience. Last but not least, with Europe’s General Data Protection Regulation due to come into force next year — not to mention France’s 2014–19 defence spending plan, which requires critical infrastructure providers to implement specific cybersecurity measures to protect their systems against attack — compliance with new requirements is not just a necessity. Our continued peace of mind and the right to enjoy our airspace depend on it!
 

[[asset:video:240988 {"mode":"small","align":"center"}]]