12 septembre 2018 | International, C4ISR

Cyberattack risk poses biggest threat to airports, aviation

A senior official from Tampa International Airport (TPA) told US lawmakers the risk of cyberattack “without question represents the preeminent and persistent threat” to global aviation.

The comments came during a Sept. 6 joint hearing of the House Homeland Security Committee's Cybersecurity and Transportation Security subcommittees, held to examine cyber threats to aviation.

“In today's modern and technologically advanced airports, there are virtually no areas or functions that do not rely at some level on a digital network,” TPA EVP-IT and general counsel Michael Stephens said. “The operational importance of these systems ... makes airports immensely appealing targets and potentially vulnerable to malicious cyber threats, such as criminal organizations and state sponsored actors.”

In his testimony, Stephens said US airports have reached a point “where voluntary compliance is no longer adequate,” and asked lawmakers to consider mandating the adoption of “uniform minimum cyber security standards and frameworks.”

He also said the “human factor remains the most highly exploited vector” for breaching cyber defenses, and threat awareness and information security training programs for airport, airlines and aviation industry employees are “perhaps one of the most effective and cost-efficient ways of increasing airports' and airlines' cybersecurity readiness.”

Lawmakers also heard from Christopher Porter, chief intelligence strategist at cybersecurity group FireEye, Inc., who testified that state-backed hackers are “routinely” targeting the US aviation industry through cyberespionage to steal industrial secrets from manufacturers, researchers and operators of military and civilian aircraft.

Porter called cyberespionage the “most common cyber threat facing the aviation industry,” and said that hackers sponsored by China, Russia and more recently Iran have all “targeted the US or its close allies for theft of aviation secrets.” All three countries also routinely target ticketing and traveler data, shipping schedules and even partner industries like railways or hotels as part of their counterintelligence efforts, Porter added.

However, Porter reminded lawmakers that, because cyber-espionage is routine, “it should not be viewed as destabilizing.”

“When cyberespionage operators get a foothold on a system, they can often use that access for stealing information or to launch a disabling or destructive attack using the same technology,” Porter said. “But they rarely choose to do so, and in the US, there are significant redundancies in place to ensure safety. A crashed IT system does not mean a crashed plane, and it's important for the public to keep that in mind.”

http://atwonline.com/security/cyberattack-risk-poses-biggest-threat-airports-aviation

Sur le même sujet

  • US Space Force to begin sharing technical space data with UK

    19 août 2020 | International, Aérospatial

    US Space Force to begin sharing technical space data with UK

    Nathan Strout WASHINGTON - The U.S. Space Force will begin sharing valuable space situational awareness data with the United Kingdom as part of Operation Olympic Defender, the service announced Aug. 14. Under a recently signed agreement, the Space Force will share it's Standardized Astrodynamics Algorithm Library with the U.K.‘s Ministry of Defense. SAAL is a collection of the Space Force's understanding of orbital physics and algorithms that helps the service predict the trajectories of objects on orbit. “Aggressive actions in space must be deterred through a multinational, coordinated effort, allowing for the defense and protection or our collective capabilities,” said Maj. Gen. DeAnna Burt, USSF director of Operations and Communications, in a statement. “Sharing the SAAL with our coalition partners enables greater cooperation and coordination between the U.S. and our Allies.” The agreement comes as part of Operation Olympic Defender, an American-led coalition of space-faring allies working together to deter hostile actions in space, strengthen deterrence against hostile actors and address the growing issue of orbital debris. Operation Olympic Defender was officially taken over by U.S. Space Command in May and is located at the Combined Space Operations Center at Vandenberg Air Force Base, California. The U.K. was the first nation to join Operation Olympic Defender and is the first to receive access to the SAAL. Under the new arrangement, that nation's Space operations Center will now be better able to collaborate with the Space Force, sharing algorithms and data to better predict orbital trajectories. The Space Force is looking to share the SAAL with more partners within Operation Olympic Defender. According to the announcement, the Secretary of the Air Force's International Affairs Office, SPACECOM and the Space Force have recognized a new framework that will allow other coalition partners to begin receiving SAAL. SPACECOM has signed a number of space data sharing agreements with other countries in recent months. https://www.c4isrnet.com/battlefield-tech/space/2020/08/18/space-force-to-begin-sharing-technical-space-data-with-uk/

  • Thales announces order for new Syracuse IV SATCOM stations to equip French Army Serval Armoured Vehicles

    15 juillet 2024 | International, Aérospatial

    Thales announces order for new Syracuse IV SATCOM stations to equip French Army Serval Armoured Vehicles

    Developed for the French defence procurement agency (DGA), the first version of the SYRACUSE IV ground segment entered service at the end of 2023

  • Space Force to hold annual Tactically Responsive Space demos

    22 mai 2024 | International, Aérospatial

    Space Force to hold annual Tactically Responsive Space demos

    The Space Force aims to have an operational capability by 2026, but will maintain an annual demonstration cadence, according to Lt. Gen. Phillip Garrant.

Toutes les nouvelles