# Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends
## 5 Mitigation of Cyber-Security Challenges within the Civil Aviation Industry  
The mapping of the range of cyber-attacks within the civil aviation industry reveals that phishing and network attacks, such as eavesdropping, DoS, Man-in-the-middle and spoofing attacks, predominate [76]. Distributed Denial-of-Service (DDoS) and DoS attacks on network assets at the airport, most notably, Vulnerability Bandwidth Depletion DDoS Attacks (VBDDA), could be mitigated according to [PERSON] et al. [77] by the proposed embedded Stateful Packet Inspection (SPI) based on the OpenFlow Application Centric Infrastructure (OAC). The focus was to mitigate attacks on Airport Information Resource Management Systems (AIRMS), an enterprise cloud-based resource management system used in some airports. [PERSON] et al. [78] assume a different position on DDoS prevention, adopting volumetric protection through providing an alternative secondary Internet connection, as well as deploying high-performance hardware devices. The latter monitor logging activities and traffic continuously to improve the efficiency of the protection mechanism. [PERSON] and [PERSON] [79], [PERSON] [80] and [PERSON] and [PERSON] [81] propose the use of airport intelligence classification to protect airport assets and infrastructure from cyber-attacks, the method being classified according to good technical practice for high-level security issues. In practice, the approach is founded on a good cyber-hygiene culture, involving system and anti-virus regular updates, cyber-education for new employees, regular data backup and password management. The use of encoding was posited by [PERSON] et al. [52] as a measure to prevent cyber-attacks on ADS-B data used for airborne and ground surveillance in airports. The use of the random blurring technique on aircraft data from ADS-B within permissible error bounds, so as not to impair the operational integrity  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Class** & **Ref** & **Component** & **Mitigation** & **Description** \\ \hline C,I & [53] & SATCOM terminals & Consistent patching and software updates, phasing out existing legacy encryption as soon as practicable and following current recommendations on the use of cryptographic algorithms and network protocols. & SATCOM terminals can be exploited through some design flaws in areas such as hardcoded credentials, insecure protocol, weak encryption algorithms. \\ \hline C,I & [55,56] & Aerospace systems & Consistent patching of OS, phasing out existing legacy encryption as soon as practicable and following current recommendations on the use of cryptographic algorithms. & Attackers, based on skill level, can exploit issues with integration of OS in embedded systems, such as in OS kernel, context switching, protection mechanisms. \\ \hline C,I & [65,66] & ACARS & Phasing out existing legacy encryption as soon as practicable and following current recommendations on the use of cryptographic algorithms and established policy measures. \\ \hline C,I & [71] & ADS-B & Phasing out existing legacy encryption as soon as practicable and following current recommendations on the use of cryptographic algorithms. & The ADS-B communication channel is prone to eavesdropping, jamming attacks, message injection, deletion and modification. \\ \hline C,I & [62,63] & AWN & Phasing out existing legacy encryption as soon as practicable and following current recommendations on the use of cryptographic algorithms. & The Wireless Avionic Network communication channel is prone to data integrity problems such as data assurance, reliability and security. \\ \hline \hline \end{tabular} Legend: C = Confidentiality, I = Integrity, A = Availability.  
\end{table}
Table 4: Some Exploitable Flaws and Components in the Civil Aviation Industry.  
of Air Traffic Control (ATC), is also proposed as a means of limiting and monitoring the level of interference of Unmanned Aerial Vehicles (UAVs) on ADS-B data using aircraft information at the airport.