Safeguarding Skies: Airport Cybersecurity in the Digital Age

TL;DR

This paper reviews airport cybersecurity threats, applies the MITRE ATT&CK Matrix to analyze risks, and proposes modern defense strategies like Zero Trust Architecture for aviation security enhancement.

Contribution

It is the first to utilize the MITRE Matrix for airport security risks, offering a novel framework for understanding and mitigating cyber threats in aviation.

Findings

Identified vulnerabilities in airport cybersecurity infrastructure.

Mapped attack techniques to the MITRE ATT&CK Matrix.

Recommended modern cybersecurity frameworks and mitigation strategies.

Abstract

The aviation industry faces significant vulnerabilities from both physical and cybersecurity threats, highlighting the urgent need for enhanced cybersecurity measures amid increasingly sophisticated attacks. This paper systematically reviews emerging threats at airports, analyzing real-world incidents and relevant literature while mapping risks to the MITRE ATT&CK Matrix, a widely recognized knowledge base for categorizing cyberattack tactics, techniques, and procedures. This is the first to apply the MITRE Matrix to airport security risks, offering a novel approach to understanding and mitigating these challenges. Building on this analysis, the paper advocates for modern cybersecurity defense models, emphasizing Cybersecurity Frameworks and Zero Trust Architecture, as well as critical measures for supply chain risk management and strategies to mitigate ransomware and DoS attacks. Our analysis provides insights into vulnerabilities and actionable recommendations, serving as a comprehensive guide for aviation stakeholders to strengthen defenses against evolving cybersecurity threats.