Cyber Risks In The Aviation Ecosystem: An Approach Through A Trust Framework

The evolution in the way data and information are stored, processed and exchanged using up to date technologies, open and off-the-shelf, brought efficiencies not possible before with the use of aviation dedicated traditional technologies. Systems and technologies not specifically developed for aviation purposes are now in widespread use by the aviation industry for aircraft operations and air traffic management. Digital connectivity for data exchange in support of decision-making processes are common across the whole industry. However, the use of these new technologies and processes brought also new challenges to the confidentiality, integrity and availability of data and information due to cyber vulnerabilities. This affects at the end the agreed levels of safety practiced by the aviation community and the continuity of operations with the associated socio-economic impacts that interruptions in air operations can bring to all members of the aviation community in particular and the society in general. This paper proposes a global approach to reduce the cyber-attack surface and increase the cyber resilience of the aviation ecosystem through specific process and procedures as the basis for an international aviation trust framework.