# Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends
## 3 Documented Cyber-Attacks in Aviation Industry (2001-2021)  
The ever-increasing reliance in data-driven processes to increase the efficiency of businesses practices and the quality of life for citizens brings attendant risks and challenges in providing effective cyber-security protection [22]. It is clear that the integration of technologies has also increased the safety and efficiency of air transport systems. However,higher levels of human migration and hyperconnectivity gate a cascading impact as a cyber-incident in one airport translates into a transnational problem with social and economic consequences [1]. It is therefore incumbent on the industry to be proactive in providing robust mitigation for any class of emergent attack. In this context, Table 2 present reviews of documented cyber-threats and attacks in civil aviation industry over the last 20 years (2001-2021). The review by [PERSON] [23], which covered the period 1997-2014, is not exhaustive, as well as being outdated considering the evolutionary progression of cyber-security incidents in recent times. Although the presented mapping has been carried out diligently, the authors acknowledge the possibility that some cyber-attacks in the civil aviation industry within the period under review may have been omitted, as some incidents may not have been made public. \begin{table}
\begin{tabular}{p{42.7 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt}} \hline \hline
**Class** & **Ref** & **Year** & **Incident** & **Source Location** & **Description** \\ \hline C & [24] & 2003 & Slammer Worm attack & OTR USA & One of the FAA’s administrative servers was compromised through a slammer worm attack. Internet services were shut down in some parts of Asia as a result of this attack and this slowed down connections worldwide. \\ \hline A & [25] & 2006 & Cyber-Attack & OTR Alaska, USA & Two separate attacks on US Federal Aviation Administration (FAA) internet services that forced it to shut down some of its air traffic control systems. \\ \hline C & [25] & 2008 & Malicious hacking attack & OTR USA & Oklahoma, USA & Hackers stole the administrative password of FAA’s interconnected networks when they took control of their system. By gaining access to the domain controller in the Western Pacific region, they were able to access more than 40,000 login credentials used to control part of the FAA’s mission-support network. \\ \hline C & [26] & 2009 & Malicious hacking attack & OTR USA & A malicious hacking attack on FAA’s computer, through which hackers gained access to personal information of 48,000 current and former FAA employees. \\ \hline C & [27] & 2013 & Malware attack & OTR Turkey & Istanbul, Turkey & Shutting down of passport control system at the departure terminals of Istanbul Ataturk and Sabiha Gokcen airports due to a malware attack, leading to the delay of many flights. \\ \hline C & [28] & 2013 & Hacking and phishing attacks & OTR USA & Malicious hacking and phishing attacks that targeted about 75 airports. These major cyber-attacks were alleged to have been carried out by an undisclosed nation-state that sought to breach US commercial aviation networks. \\ \hline A & [29] & 2015 & DDoS attack & OTR Poland & A Distributed Denial-of-Service (DDoS) attack by cyber-criminals that affected LOT Polish Airlines flight-plan IT Network systems at the Warsaw Chopin airport. The attack rendered LOT’s system computers unable to send flight plans to the aircraft, thus grounding at least 10 flights, leaving about 1400 passengers stranded. \\ \hline I & [30] & 2016 & Hacking, phishing attacks & OTR Vietnam & The defacement of a website belonging to Vietnam airlines and flight information screens at Ho Chi Minh City and the capital, Hanoi, displaying messages supportive of China’s maritime claims in the South China Sea by Pro-Beijing hackers. \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Cyber-Attacks in the Civil Aviation Industry.