Avionics News March 2022 - 32

CCX SCORES WITH AVIONICS TESTING & CYBERSECURITY
Continued from page 31
commercial and military aircraft. The portable, rugged,
wireless module can also connect to the internet for
software updates as test requirements and standards
change.
The list prices for these test modules range from
about $13,000 for the radio tester, about $20,000 for the
pulse tester and about $31,500 for the radio/pulse tester.
In January 2022, CCX signed an exclusive distribution
agreement with U.K.-based Evolution Measurement,
adding the company to its authorized partner network.
Evolution Measurement provides products, support and
consulting for a wide range of precise measurement
tasks including pitot-static equipment in aviation. " This
arrangement will give more maintainers across Europe
access to modern avionics testers not previously available,
and will streamline testing for them, " Bartlett said.
In a separate line of business, CCX is targeting
avionics cybersecurity. The company is providing
cybersecurity products and services at a time when
concern over penetration of networks aboard business
jets is rising. Like every other high-value enterprise
targeted by hackers, airplanes are not being overlooked
today. The company's cybersecurity products and
services are also in use on military aircraft.
Bartlett said there has been plenty of good work in the
industry improving connectivity, hardware, routers and
antenna systems. However, these electronics upgrades
seldom start with an eye on cybersecurity.
There is plenty of confusion in the avionics industry
and a bit of old-school resistance to the idea that
cybersecurity has to be addressed at some level,
according to Bartlett. Before co-founding CCX, he
had senior leadership roles at TrueNorth Avionics, as
director of product management and vice president of
business development. In addition, Bartlett had highlevel
roles in the electronics, automotive and green
energy sectors, in operations management and business
development.
CCX is not able to disclose who its customers are due
to privacy issues. The company installs its SystemX
Aviation on aircraft to protect the cabin and flight deck.
The system is able to monitor the aircraft's complete
communications network. " We are one of the few
companies that also monitor flight deck data busses, "
Bartlett said.
A lot of aviation organizations are now addressing
32 avionics news * march 2022
avionics cybersecurity, including the Federal Aviation
Administration; European Union Aviation Safety
Agency; International Civil Aviation Organization;
National Business Aviation Association; General
Aviation Manufacturers Association; and the Aircraft
Owners and Pilots Association. The FAA hosts an
annual cybersecurity awareness symposium also known
as Cyber Day. This meeting attracts government,
industry and academic participants.
A General Accounting Office report on aviation
cybersecurity published in October 2021 found
that while avionics systems could be vulnerable to
cyberattack, there had not been any reports of successful
intrusion on an aircraft's avionics system. But the threat
is out there.
The report GAO-21-86 in 2020 said aircraft networks
and systems share data with pilots, passengers,
maintenance crews, other aircraft and air traffic control
in ways previously unforeseen. These interconnections
could be at risk from a range of cyberattacks if not
protected, the report stated. Key vulnerabilities cited in
the report include:
1. Not applying modifications (patches) to
commercial software.
2. Insecure supply chains.
3. Malicious software uploads.
4. Outdated systems on legacy aircraft.
5. Flight data spoofing.
Increasing connectivity may even lead to safety of
flight risks in the future.
The FAA is not up to speed yet, according to the
GAO. The report stated the FAA has not assessed its
oversight program to prioritize avionics cybersecurity
risks, developed an avionics cybersecurity training
program, issued guidance for independent cybersecurity
testing or included periodic testing as part of its
monitoring program. There is plenty of work to be
done on these issues by the agency to guard against
cybersecurity risk, the GAO concluded.
Bartlett noted a lot of people in the industry don't
understand yet what it means to have cybersecurity. He
said the industry is learning about cybersecurity, but
some in aviation are expressing skepticism that it is
needed. Those with an old-school perspective are fine
with security as it has been done in the past. He noted
the issue of what is needed is not going away and the
learning curve will be similar to that experienced when
Continued on page 34
Avionics News March 2022

Table of Contents for the Digital Edition of Avionics News March 2022
