Avionics News April 2023 - 46

THREE QUICK
STEPS TO BETTER
CYBERSECURITY
Three ways companies
can immediately improve
their business aircraft
cybersecurity include:
* Applying hardware and
firmware updates.
*
Utilizing robust
network passwords
and updating them
regularly.
* Creating cybersecurity
SOPs and network user
profiles.
CYBER RESILIENCE
Continued from page 44
there, too.
The value of
connectivity partners
Service providers like Satcom
Direct, Viasat, Gogo, and Inmarsat
can serve as connectivity partners
for those companies wanting to go
beyond traditional antivirus protection
for their in-flight networks. One
avionics director for a large operator
based in the Midwest recommends
that at a minimum, operators should
consider whatever security package
add-on a connectivity service
provider offers. " Providers will
monitor networks to see if you're
being hacked and pull you offline if
there's a threat, " he said.
Connectivity partners offer advanced
network cybersecurity tools
for business aircraft like threat monitoring,
advanced encryption, AI, and
human intelligence to monitor traffic
going across the network, identify
bots and malware, and flag suspicious
activity. Each company can set its
threat levels for what's acceptable or
not with regard to intercepting suspicious
message and files.
Some service providers offer
VPN-related options that provide an
encrypted connection. VPNs offer
seamless connectivity that makes
users feel like they're working from
their office while they're on the plane
and lets them perform tasks securely
whether on the ground or in flight,
like printing a document to a wireless
printer located in their office.
Finally, connectivity partners also
can provide end-to-end solutions that
not only make a business aircraft's
in-flight network more secure, but
also integrate it into a company's
larger corporate network. All of these
services are not inexpensive, but
anyone who's ever been involved
in cyberattack knows there's a cost
46
avionics news * april 2023
" Once cyberattacks start
happening, they're very
sophisticated, " Huntoon said.
" Every company should ask their
connectivity partner, 'Tell me how
you protect my data, and show
me how you protect it. Come and
talk to my people. Be proactive in
protecting our airplanes just as much
as our devices at home or in the
office.' "
Adopting a security mindset
Ultimately, in order to be fully
cyber resilient, companies need
to be proactive about aircraft
cybersecurity, knowing what they
need to do and where, said the
Midwest-based avionics director. In
some cases, it might be flight and
ground crews who have to lead the
way on this effort and encourage
all employees involved with the
business aircraft to get into a security
mindset - whether they work in the
flight department or at company
headquarters.
" I've found corporate compliance
is often weak, with a 'don't ask,
don't tell mindset,' " Wheeler said.
" Many companies also create a 'zero
trust environment' and take that
approach. In other words, they say,
'Pretend you're at Starbucks and
don't do anything you wouldn't do at
a Starbucks.' But why? The aircraft is
an extension of your office - treat it
that way.
" If you put yourself in security
mindset, you can prep for that and
have those conversations to be ahead
of the curve, " he continued. " These
days, threat actors could compromise
passengers or the principals.
Learning how is relatively easy these
days - the internet is full of 'how
to' information. It's easier now, you
don't have to be a Ph.D. to do this
stuff, and that's what scares me. " q
Avionics News April 2023

Table of Contents for the Digital Edition of Avionics News April 2023
