Cyber Threats in Civil Aviation

Introduction

Persistent cyber-attacks on private and public computer networks in the U.S. continue to increase annually; consequently, highlighting the cyber security vulnerabilities of critical infrastructures. The number of cyber incidents reported by federal agencies grew from 5,503 to 60,753 from 2006 to 2012 (U.S. GAO, 2015). Increased cyber-attacks and threats led to extensive efforts to improve and safeguard computer networks in the U.S. For example, the National Infrastructure Protection Plan (NIPP) was mandated to develop defensive measures to secure critical infrastructures in the U.S. (Murray & Grubesic, 2012). The NIPP promulgates strategies to prevent cyber threats from manifesting by synchronizing efforts between public and private organizations (Murray & Grubesic, 2012). The U.S. government plays a critical role in providing cyber security, which includes protecting critical infrastructures, increasing cyber security awareness (Murray & Grubesic, 2012), developing cyber-attack capabilities, and disseminating cyber threat information to private and public entities.

Cyber criminals exploit private and public computer networks to gain access to sensitive information regarding national security, economic interests (Roesener, Bottolfson, & Fernandez, 2014), military defense plans, military personnel data, and to corporate espionage. Private entities own eighty-five percent of critical infrastructures; therefore, requiring the U.S. government to work strategically and collaboratively with the industry to prevent catastrophic attacks on our prized infrastructures (Murray & Grubesic, 2012). Regarding the civil aviation infrastructure, the Federal Aviation Administration plays a fundamental role in developing strategies and initiating actions to safeguard civil aviation.

Without a doubt, civil aviation is a critical infrastructure that is vulnerable to cyber threats by hackers and malicious actors (Schober, Koblen, & Szabo, 2012). One aspect of civil aviation that lends itself to cyber threats is the interconnected nature of computer networks and communication systems. Researchers refer to this phenomenon as hyperconnectivity (Fredette et al., 2012; Schober, Koblen, & Szabo, 2012). Hyperconnectivity makes it increasingly difficult to safeguard communications and computer systems from cyber-attacks. Critical infrastructure is a system or network of systems that provides vital functions that if disrupted causes socio-economic, financial, political, military defense, or security instability (Tanbansky, 2011). Critical infrastructures are food, water, financial services, healthcare, emergency services, energy power systems, and transportation systems (Kessler & Ramsay, 2013) that provide unique capabilities or services to the populace. Civil Aviation is a subsidiary of the transportation infrastructure and is considered critical infrastructure because of its significance to international and transoceanic transportation, globalization, financial security, international trade, and business. A major cyber-attack on the civil aviation infrastructure will catastrophically weaken and cause international instability.