IoT could make aviation vulnerable to attacks, warns cyber security expert
April 16, 2015
The emerging IoT will expose the global aviation industry to vulnerabilities at a level never before seen and will have a transformative impact on the industry, according to George Schu, a cyber security strategist with Stangarone & Associates, a Washington DC-based aerospace and aviation consultancy.
"While the IoT promises to introduce enormous efficiencies and enhancements to aviation just as it is to other market segments, malware, or malicious software, is used by hackers with intent to disrupt operations, steal proprietary information or compromise privacy," said Schu. "The aviation industry is five times more likely to be exposed to malware. Theft of customer data, intellectual property and airfreight data are likely top motivations for targeting users in the aviation industry."
The IoT enables automated communications between machines. The term IoT can include the type of radio frequency identification tags that businesses place on products in stores to monitor inventory, the smart grid, which modernises the electrical grid by harnessing digital technologies, and internet-connected jet engines and drills on oil rigs.
"Indeed, there are great benefits to be realised for aviation with IoT – more efficient aircraft routing, enhanced traveller experience, leveraging the sharing economy and an increased number of aircraft in a more connected ecosystem of aviation," he said, "but aviation leaders need to be cautious about how it is implemented."
A report released in January by the Federal Trade Commission (FTC) addressed the security and privacy issues related to the IoT. Though this report is primarily focused on the impact of the IoT on the security and privacy in the consumer market, it raises issues that pertain to other markets such as transportation and aviation.
"We are at the beginning of the IoT era,” said Schu. “The FTC reports that six years ago, for the first time, the number of things connected to the internet surpassed the number of people. Estimates are that there will be 25 billion connected devices this year, and by 2020 there will be 50 billion. Related to the IoT phenomenon is the growth of machine-to-machine (M2M) connections,"
Three and one-half billion sensors are already in the marketplace, and the expectation is that number will increase to trillions within the next decade. Schu said the confluence of IoT and M2M connections was staggering to contemplate. Both will drive new innovation and economies across market verticals.
In the current Annual Security Report issued by Cisco, aviation is cited in the top five market verticals most vulnerable to malware exposure. Schu believes that aviation leaders need to ensure that standards for IoT implementation and security are adopted and strictly used, not just for the aviation industry itself, but for its partners and suppliers as well.
"Your suppliers can become your weakest link," he said.