Smart Airport Cybersecurity: Threat Mitigation and Cyber Resilience Controls †

Airports are at the forefront of technological innovation, mainly due to the fact that the number of air travel passengers is exponentially increasing every year. As a result, airports enhance their infrastructure intelligence and evolve as smart facilities to support growth, by offering an enjoyable travel experience. New challenges are coming up, which aviation has to deal with and adapt to, such as the integration of Industrial IoT (Internet of Things) in airport facilities and the increased use of smart devices from travelers and employees. Cybersecurity is becoming a key enabler for safety, which is paramount in the aviation context. Smart airports strive to provide optimal services in a reliable and sustainable manner, by working around the domains of growth, efficiency, safety and security. This article researches: (a) the implementation rate of cybersecurity measures in commercial airports; (b) malicious threats that evolve due to IoT and smart devices installed; (c) risk scenario analysis for IoT malicious attacks with threat mitigation actions. With the aim to enhance operational practices and develop robust cybersecurity governance in smart airports, we present a systematic and comprehensive analysis of malicious attacks in smart airports, to facilitate airport community comprehend risks and proactively act, by implementing cybersecurity best practices and resilience measures.

[1]  Dimitris Gritzalis,et al.  Implementing Cyber-Security Measures in Airports to Improve Cyber-Resilience , 2018, 2018 Global Internet of Things Summit (GIoTS).

[2]  Naima Kaabouch,et al.  Analysis of vulnerabilities, attacks, countermeasures and overall risk of the Automatic Dependent Surveillance-Broadcast (ADS-B) system , 2017, Int. J. Crit. Infrastructure Prot..

[3]  Radha Poovendran,et al.  Future E-Enabled Aircraft Communications and Security: The Next 20 Years and Beyond , 2011, Proceedings of the IEEE.

[4]  Wayne Smith.  Cyber security in airports , 2015 .

[5]  Jennifer Ann Urban.  Not Your Granddaddy's Aviation Industry: The Need to Implement Cybersecurity Standards and Best Practices within the International Aviation Industry , 2016 .

[6]  Chris Riley,et al.  Aircraft systems cyber security , 2012, 2012 Integrated Communications, Navigation and Surveillance Conference.

[7]  George Suciu,et al.  Cyber-Attacks - The Impact Over Airports Security and Prevention Modalities , 2018, WorldCIST.

[8]  Towards secure convergence of Cloud and IoT 1 Cloud computing and the IoT ecosystem , 2018 .

[9]  Kishore Angrishi,et al.  Turning Internet of Things(IoT) into Internet of Vulnerabilities (IoV) : IoT Botnets , 2017, ArXiv.

[10]  Paul Hriljac,et al.  Guidebook on Best Practices for Airport Cybersecurity , 2015 .

[11]  Nabajyoti Barkakati,et al.  Air Traffic Control: FAA Needs a More Comprehensive Approach to Address Cybersecurity As Agency Transitions to NextGen , 2015 .

[12]  Pethuru Raj,et al.  The Internet of Things: Enabling Technologies, Platforms, and Use Cases , 2017 .

[13]  Ivan Martinovic,et al.  Assessing the impact of aviation security on cyber power , 2016, 2016 8th International Conference on Cyber Conflict (CyCon).

[14]  William T. Polk.  A Report to the President on Enhancing the Resilience of the Internet and Communications Ecosystem Against Botnets and Other Automated, Distributed Threats , 2018 .

[15]  Maha S. Tolba,et al.  Proposal Security Solutions to Protect Automation System from Denial of Service in Airports , 2015 .