ENISA Study 2016 "Securing smart airports"

Category: Technical
Published on Friday, 24 February 2017
Dear colleagues,
 
The 2016 ENISA Study "Securing smart airports" study is out.
As you can see in the Acknowledgements, IFATSEA VP Mr. Theodoros Kiritsis and me, we have contributed in this study.
 

In response to new emerging threats, ENISA’s report provides a guide for airport decision makers to implement available good practices to date, in order to secure passengers and operations. This study also identifies gaps such as disparity of cyber security practices and lack of awareness and skills. The study aims to support airport decision makers and information security professionals in their security efforts and risk management.

Eight recommendations for enhancing the security and resilience of smart airports in Europe are presented in the report, tailored specifically towards decision makers, airport operators and industry. Key recommendations include:

  • Prioritising cyber security for safety 
  • Establishing a clear airport cyber security posture and allocating cybersecurity experts and resources
  • Constant revision of cyber security policies and practices based on good practices monitoring     
  • Implementing  network-based, holistic risk and threat management policies and processes for cyber security

Prof. Udo Helmbrecht, Executive Director of ENISA, said: "Integrating IoT on the existing airport infrastructure brings new security challenges. To ensure safety, operators need to incorporate cybersecurity in all stages of the security life cycle."

Smart airports are those airports making use of integrated Internet of Things (IoT) components to bring added-value services. By integrating smart components, airports are exposed to a larger attack surface and new attack vectors. As such, airports need to guarantee everyday higher levels of cyber security due to the potential impact that cyber-attacks and disruptions can have on the safety of passengers and operators. Increasing awareness on cyber security risks and improving the security and resilience of the entire lifecycle of airport operations is now a priority.

ENISA’s future work in the field, aims in enhancing the security and resilience of air transport in Europe together with all relevant key stakeholders and agencies. In the context of the NIS Directive, ENISA will assist Member States and the European Commission by providing expertise and advice, as well as developing and facilitating the exchange of good practices, with the ultimate goal to enable higher level of security for Europe’s air transport infrastructure.


Take some time to read this work.

 

Best regards

Costas Christoforou

IFATSEA Director Europe

+This email address is being protected from spambots. You need JavaScript enabled to view it.

 

ATM manual

Category: Technical
Published on Monday, 29 February 2016

Dear colleagues,

 

we are proudly to present you the final version of the manual " ATM Automation" CAP1377. The outcome of this manual is the product of a very intensive work from colleagues from Eurocontrol, IFATCA, NATS, the University of Hertfordshire, LGW and LHR airports and of course our Federation. 

 

Please spent some time to go through this manual and if you find it useful then apply it at your country.

 

My thanks to IFATSEA team that help me in this task, Theodore Kiritsis, Carlos Viegas, Kostas Simaiakis and Marinos Kardaris

 

 

Best regards

 Costas Christoforou

linkIdn

Category: Technical
Published on Thursday, 29 October 2015

Please note on linkidn IFATSEA has a group discussion on Assessment of technical proficiency

please visit : https://www.linkedin.com/groups/124567/124567-5997706873669713921

SWIM

Category: Technical
Published on Thursday, 29 October 2015

SWIM, the System Wide Information Management, the intranet of the future Air Traffic Management System, is one of the main topics followed up by IFATSEA.

This Intranet needs to have interoperability globally connecting different major ongoing ATM projects like NextGen (US), SESAR (EU), CARATS (Japan) and others.

Needles to say Cyber Security is a hot issue in the creation of SWIM.  

On 8-9 June 2016, Roma, Italy, SJU will hold a SESAR SWIM Global Demonstration, please find more info on

http://www.sesarju.eu/newsroom/events/sesar-swim-global-demonstration

System Wide Information Management (SWIM), the intranet of the future Air Traffic Management System. - See more at: http://www.sesarju.eu/news-press/news/swim-more-acronym-1184#sthash.IkWydC0h.dpuf
System Wide Information Management (SWIM), the intranet of the future Air Traffic Management System. - See more at: http://www.sesarju.eu/news-press/news/swim-more-acronym-1184#sthash.IkWydC0h.dpuf

Cyber Security

Category: Technical
Published on Tuesday, 27 October 2015

The ICAO Threat and Risk Working Group is addressing cyber security issues as part of the overall threat and risk assessment for aviation. The task is to identify credible threat scenarios and consequent risks to aviation in the fields of cyber threats and CNS (communications, navigation, surveillance).

Eurocontrol - Cyber-security

IFATSEA Director Europe Costas Christoforou and SJU liaison officer Carlos Viegas provided valuable input on the ICB regulatory response on the Cyber security  in the Technical SubGroup.

SJU have performed a detailed study on the roadmap of ATM cyber security: please consult

Study details R&D roadmap for ATM cyber security
Study details R&D roadmap for ATM cyber security
Study details R&D roadmap for ATM cyber security

http://www.sesarju.eu/newsroom/all-news/study-details-rd-roadmap-atm-cyber-security

Below links to articles published in EASA Newsletter ‘On Air’, issue 14:

  • Cybersecurity in aviation (editorial)

https://www.easa.europa.eu/newsroom-and-events/news/air-issue-14-cybersecurity-aviation-editorial

  •  Interview: Freddy Dezeure, Head of CERT-EU, explains the cooperation with EASA

 https://www.easa.europa.eu/newsroom-and-events/news/freddy-dezeure-head-cert-eu-explains-cooperation-easa

  •  Implementation of a European Centre for Cyber Security in Aviation (ECCSA)

 https://www.easa.europa.eu/newsroom-and-events/news/implementation-european-centre-cyber-security-aviationeccsa

The ICAO summit prescribes cyber security approach, this call was made at the inaugural Cyber Summit convened by the International Civil Aviation Organization (ICAO) in Dubai. Read article