Towards Cybersecurity Risk Assessment for Future ATM – First Steps

Cybersecurity risk assessment in air traffic management (ATM) is indispensable for maintaining and enhancing the safety and efficiency of air navigation services. It supports informed decision-making, helps in adapting to changing operational conditions, ensures compliance with safety regulations, and prepares the system for disturbances, thereby contributing to the overall integrity and reliability of the air traffic management system. However, there are practical challenges when risk analysts conduct such assessments, and there is a need for better support tools and materials. The European exploratory research project SEC-AIRSPACE is developing an improved cybersecurity risk assessment methodology for ATM. The novelty here is to improve existing approaches and provide an up-to-date taxonomy of primary and supporting assets that should be considered when developing new ATM solutions. This will make it easier for stakeholders to identify new assets and threats that arise with emerging technologies and services. The constructive research approach will make use of validation through two different use cases, where the first is related to the establishment of the future communications infrastructure and multilink and the second to virtual centers that provides ATM services independently of physical locations.