A Risk-Oriented Systems Engineering Approach to address Cyber Security Issues of Civil Aircraft, Air Traffic Management and Airports Systems

The aggregate use of Information Technology (IT) and automation in civil aviation have increased exponentially in recent years, and aerospace cybersecurity paradigm has been reconceptualized to a new era. The cyber resiliency of Communication, Navigation, and Surveillance (CNS), Air Traffic Management (ATM) systems and legacy airport infrastructure have been curtailed owing to their annexure to public networks, which constitute significant risks to the aviation industry and flying public. The paper aims to investigate threats to aviation assets, vulnerabilities of aviation systems and to analyze through a novel cybersecurity risk assessment methodology for aviation systems.