# Smart Airport Cybersecurity: Threat Mitigation and Cyber Resilience Controls +
## 5 Smart Airports Attacks: Scenario Development
### Attack Scenarios Analysis Along with Mitigation and Resilience Measures
#### 5.2.3 Malicious Attack: Malicious Software on an Airport's Network  
Smart airports have complex wired campus networks that allow data access through secondary and tertiary levels of distribution. Having incorporated artificial intelligence systems to their daily functions and by allowing employees and maintenance personnel to use their owned smart devices (BYOD), they became more vulnerable to network malicious attacks. Moreover, aviation and ATM systems have increased the use of IP connections to enhance efficiency and interoperability, which may lead to unauthorized individuals gaining access [19]. Research experiments have shown that any malicious passenger or employee, equipped with a smart device infected with malware, may be able to access the aircraft's system and even influence system's integrity [27]. Similar attacks can be accomplished with malware installation to the airport's website or intranet, where airport users' devices may be infected, thus giving the opportunity to malicious attackers to access airport's network and critical information system through these infected devices, as presented in Figure 9. Such an attack happened in September 2016, at Vienna Airport, where computer servers and employee's computers were infected with malware [32]. Impact Evaluation: Assuming that BYOD can be inserted in both conventional network and the restricted one of internal systems communication, in order to exchange information, a compromised device can impact airport systems integrity and availability. Since airports systems are interconnected to increase their interoperability, potential attacks on airport's network can cause network outage, flight cancellations, passenger delays, loss of confidence and financial damages. In the unlikely event that aircraft's avionics systems are also infected, attacker may be able to manipulate data from essential functionalities and services, which can jeopardize airplane safety parameters [11]. While this attack can impact the availability and integrity of information and airport's resources, the impact on confidentiality has a lesser effect on the smooth operation of airport facilities. This does not mean that we should not bear in mind this impact and therefore implement appropriate countermeasures. Cascading effects: Once an attacker gains access to airport network or even aircraft avionics systems, he may be able to control other components or applications connected to this system. Indicative examples are air navigation and air traffic control management systems, communications, aircraft collision avoidance systems and other aircraft management systems. Compromising either airport's or aircraft systems puts at serious risk essential services and facilitates further attacks that may lead to fatal accident and loss of human lives. Mitigation Actions: For the adequate protection of smart airports, some of the basic countermeasures and BYOD controls, including antimalarialware and Intrusion Detection & Protection Systems (IDS/IPS), should be implemented. Moreover, smart airports should establish technical controls and organizational policies, in order to protect the infrastructure from potential risks coming from the employees' personal devices. In addition, strict control measures and severe access restrictions for BYOD on airport's critical systems or SCADA systems should be applied. Personnel security training and awareness is also vital for the ones, who are allowed to bring and connect their own devices, such as smartphones or tablets, to airport's systems. Finally, it is quite important that all the airport systems are designed and developed according to international security standards and best practices that drive at organization's sufficient security. Resilience Measures: It is important all the software patches and hardware updates to be done on time, so as smart airport's systems to be kept up-to-date, with reduced exposure to common vulnerabilities.