Latest Videos

New Yorkers' thoughts on wi-fi

thoughts_video

Honeywell and Inmarsat sent a reporter on to the streets of New York to ask people about their experiences of using inflight wi-fi, and what they really want from connectivity

01 December, 2017


Accessible IFE for passengers with sight loss

ife_video

Bluebox has launched an accessible IFE platform which will entertain passengers with visual impairments aboard Virgin Atlantic flights. This makes Virgin Atlantic the first global airline to make IFE accessible for passengers with sight loss across its entire fleet

01 December, 2017


Visit Our YouTube Channel

Read Latest Issue

What do you think is most likely to become of today's long-haul first and business class cabins? 

Supplier Spotlight

Join our
LinkedIn Group


Industry Opinion

« back to blog listings

Blockchain and Cloud can revolutionize cyber security

From keeping aircraft in the air to checking passengers in, aviation organizations rely heavily on IT systems. But data collected from the growing number of aircraft, routes and passengers has increased the pressure on these systems, while legacy and inflexible IT systems are also leaving airlines vulnerable to the growing threat of cyber-attacks.

Safeguarding data is a serious challenge in the aviation industry, and cloud security and blockchain can help airlines reinforce cyber security

Cyber-attacks – not if, but when
Like most industry segments, airlines are quickly realizing that threats are just as likely to come from inside the organization as from outside. Cyber-attacks have been reported at airports across the world, and it seems only a matter of time before we see an attack on a major airline.

In response to this threat, many commercial aviation organizations are actively hiring chief security officers and, according to a SITA Airline IT Trends Survey, the number of airlines which said they were advancing preparations to manage cyber risks has almost doubled to 91% in three years.

With more IoT-enabled sensors being used, it’s actually the newer aircraft fleets which have a higher chance of being attacked, many of which can be ill-equipped to prevent unauthorized access. Increasingly being used for things such as passenger wi-fi, real-time air-to-ground communications are evolving to support mission critical functions such as inflight fuel adjustments and aircraft health monitoring, both of which could severely disrupt airlines if compromised.

The safeguarding of data has become a major challenge for airlines, one that threatens to disrupt key practices for the entire industry.

Compliance remains a top priority
From passenger information at check-in desks to engine health data and maintenance history, airlines collect huge amounts of data. The corruption or loss of any of this information can pose serious safety and regulatory issues.

Storing information means airlines must adhere to compliance regulations, such as PCI-DSS for customer payment data or the UK Data Protection Act which states that information must be protected against unauthorized access and accidental loss. These regulations are even harder for international airlines to meet, having to cope with different data compliance laws across country borders.

This has implications on data storage, a lot of which is now being held in the Cloud. Companies that don’t have strict policies in place, lack data access controls or use legacy IT systems will struggle to keep their data secure.

Blue sky thinking
Cloud solutions are a vital tool in the new airline IT landscape, especially when dealing with scheduled and unscheduled aircraft maintenance. Having mobile devices wirelessly connected to software and data in the Cloud frees-up personnel from having to physically or electronically store manuals and documents. Powerful and easy-to-use mobile applications are now available to help decipher the mountains of data available, finally leveraging the elusive “return on experience” to support mechanics in real-time.

This also helps with compliance during inspections, as data on portable tools can be easily recorded. A cornerstone principal in aviation compliance is having that second set of eyes. Allowing data to be shared across organizations lowers the potential for errors as there is no longer the time lag and inaccuracy that workers have been accustomed to from paper records.

The new generation of Cloud solutions can be set up in their own separate environments, which today have the potential to be far more secure than any previous private or on-premise data center. As the name suggests, cloud containers create isolated boundaries of data which means that if anything goes wrong in one container, it only affects that single cell and not the entire system – helping reduce the threat of a wider cyber-attack.

Blockchain will help redefine cyber security
The aviation supply chain covers a wide variety of businesses, from original equipment manufacturers and Tier 1 suppliers to airlines, airports and third-party MRO providers. This presents an interesting dilemma because not only do you need to secure and protect data accumulated from each party, you also need to be able to share it across this broad supply chain.

Blockchain technology is emerging for this very purpose. In a Blockchain, each record or ‘block’ of data has its own timestamp and is encrypted with credentials in a peer-to-peer relationship, which makes malicious tampering extremely difficult. All ‘blocks’ are linked to the previous block of data, meaning the only way to tamper with its content is to have the entire network of trusted peer-to-peer contributors collude to corrupt the chain.

Blockchain is still some way off being widely adopted, and is just a concept for airlines right now, but the technology has real potential to help boost cyber defenses.

Safe travels
The fear of cyber-attacks disrupting the entire aviation industry is driving organizations to make sure they have the right solutions in place when, not if, an attack occurs. Cloud security systems build the assurance airlines need to prevent and minimise the impact of cyber-attacks, and blockchain could even further protect operational data for airlines in the future.

But keeping up with cyber developments require airlines to adapt to new technology. Legacy systems pose a stumbling block, especially when it comes to dealing with compliance regulations and data protection – the cost of which can be damaging in an industry where safety is the top priority.

Inflexible and cumbersome IT implementations cannot always adapt quickly to incorporate new technologies to stay ahead in the cyber arms race. Airline systems need inherent agility in order to keep passengers, staff and the business safe from the rising tide of cyber-attacks.

Jeff Cass is VP of strategy at the Aviation & Defense Business Unit at IFS

 

 

22 September 2017

Comments:

There are currently no comments.

If you would like to post a comment about this blog, please click here.
RECEIVE THE
LATEST NEWS


Your email address:



Read Latest Issue

Read Latest Issue

Web Exclusives

From our 2004 archive, Boeing invites you to step aboard Flight 960 with Jenny, one of a host of fictional characters that Boeing was using to explore tomorrow's travel experience. Jenny was envisioned as a passenger in 2016, so see how today's experience compares…
Click here to read more

Airbus is consolidating cabin design and the passenger experience across its model range with the Airspace brand, which may just gain airlines a few more ‘likes’ on social media
Click here to read more

The Desire Lines concept has been conceived to shape a new future for the aerospace industry – and for Zodiac Aerospace
Click here to read more

The SportJet isn’t just another concept: this airborne sports clinic is part of Sukhoi’s strategy to boost sales of the SuperJet 100 regional aircraft, and it is ready for team orders
Click here to read more

Could a freighter hold the secret to the next-generation passenger experience? A3, an Airbus outpost in California, believes that with its Transpose concept, it does. Let’s give Transpose a closer look – and a reality check
Click here to read more


Supplier Spotlight

Supplier SpotlightClick here for listings and information on leading suppliers covering all aspects of the aircraft interiors industry. Want to see your company included? Contact simon.hughes@ukimediaevents.com for more details.

Submit your industry opinion

Industry BlogDo you have an opinion you'd like to share with the aircraft interiors community? Good or bad, we'd like to hear your views and opinions on the leading issues shaping the industry. Share your comments by sending up to 500 words to adam.gavine@ukimediaevents.com

Submit Your Recruitment Ad

Recruitment AdTo send us your recruitment advertising or to receive information on placing a banner please email simon.hughes@ukimediaevents.com