Cyber Security For Airports article review

Cyber Security For Airports article review

In the article “ Cyber Security For Airports,” the authors Kasthurirangan, Manimaran, Doug, and Brent believe that increasing connectivity in computer systems is vital to government organizations and business enterprises’ operations. However, the authors claim that connectivity is vulnerable to cyber-attacks. According to the article, the aviation industry is vulnerable not only to physical threats but also cyber risks as a result of the increasing use of  Bring Your own Device (BYOD) in the aviation sector. In their finding, Kasthurirangan, Manimaran, Doug, and Brent identifies that in the United States, airport cybersecurity standards are currently not in use, and the standards existing focus on the airplane Control System(CS). In support of the finding, the article analyses measures and development research efforts undertaken by the U.s to establish a cybersecurity standard at the airports that focuses on securing the aviation sector from cyber vulnerabilities and education and literacy in cybersecurity to airport staffs.

Kasthurirangan, Manimaran, Doug, and Brent notes that in U.S transportation sector, cybersecurity standards are more advanced in the aviation sector. In such a way, National Airspace System(NAS) aims to drastically change the cybersecurity architecture by ensuring all the network traffic are classified into either External Boundary Protection(EBP), Certified Software Management(CSM as well as Detection and Response (IDR) and even Internal Policy Enforcement(IPE). Additionally, the article shows that NAS has a cybersecurity program that focuses on airline information, passenger data, and entertainment services. In this study, the authors discuss how wireless LANs (WLANs), Health and Usage Monitoring Systems (HUMSs) and Avionics Full Duplex Switched Ethernet (AFDX) are useful in the cybersecurity of both the airplanes and the airport. Overall,  the aviation sector is in the continuous development of security strategies to safeguard cybersecurity risks as well as researching to address risk awareness and educate airport workers on cybersecurity threats.

Cyber Threats to Internal Airport Operations

According to Kasthurirangan, Manimaran, Doug, and Brent, airports are vulnerable to both internal and external cyber risks. Mainly, some of the internal airport operations targeted by cyber threats include Radar system, Supervisory Control and  Data Acquisition(SCADA) as well as wireless and wired network systems and facility management. Generally, with the increasing use of mobile applications and hardware, the vulnerability to cyber threats is a significant concern in the internal airport operations. Similarly, the article points out how usage of Wi-Fi hotspots by the airport employees poses a severe cyber risk because Mi-Fi and  USB Wi-Fi devices are allowed in the airport. As a result, the staff may unknowingly insert an infected device in their computer introducing viruses into the system, which may lead to a breach of cybersecurity defense.

Evaluation of Cyber Vulnerabilities in Airport Industrial control systems

In further support of the findings, Kasthurirangan, Manimaran, Doug and Brent shows how airports rely on Supervisory Control and  Data Acquisition system in facility management and utilities because SCADA systems are not accessible by internet they appear to be more secure. Notably, the SCADA type system useful in the airports functions in a similar way to other sectors such as traffic and highway engineering. Ideally, to accurately monitor the operation in the systems, SCADA systems usually communicate with the remote terminal units (RTUs) while conveys commands from the  Human-machine interfaces (HMI). Mainly,  the control center is made up of HMI, SCADA servers, as well as the RTU connected to a substation to communicate with different intelligent electronic devices (IEDs). Overall, VPN devices are used to protect cybersecurity threats by providing a secure communication channel between the control center and other substations.

Assessment Methodologies

Mainly, to assess the vulnerability of the system, technical vulnerabilities are evaluated.  The authors suggest to the full understand the potential security weakness of the system; it vital to document the security concerns obtained from vulnerability assessment through penetration testing which, determines the possibility of a cyber threat by exploiting the weakness to confirm the severity of the attack. Also, to understand network communication and identify the data passing through the network, a review of network traffic is important in assessment methodologies. Besides,  a review of system configuration using the knowledge of the existing security problem in the SCADA software is the best practice in the assessment of the vulnerability. Additionally, to identify vulnerabilities in a wireless access point, network access point, and other interconnected networks, vulnerability scanning is essential. Moreover, to secure SCADA systems from cyber attacks in airports and other Engineering sectors, a continuous cyber vulnerability assessment is needed.

Airport Information Assurance and Cyber Security Education

Kasthurirangan, Manimaran, Doug, and Brent defines assurance as to the process of guiding information from access by an unauthorized user by ensuring the confidentiality and integrity of the data. With the rise in the use of BYOD in airport and engineering industries, it is essential to educate the staff about cybersecurity.Notably, individuals engage with activities such as internet connection in unsecure platforms, surfing the web, clicking on hyperlinks, and sharing information via external devices, which can lead to potential risk. The article recommends that to safeguard the aviation network systems from cyber threats, and there is a need to balance the operational functions to allows the security system as well as to avoid hindering critical operations.

Conclusion

Despite strict measures and technological advancement, still, there are no perfect procedures to safeguard aviation and engineering It systems from possible cyber threats. However, executing industry standards, taking the right cybersecurity measures, and offering an education program to the airport staff can help reduce the growing security threats associated with cyber attacks. Additionally, an in-depth defense approach suggested to protecting the airport and other sectors such as traffic and highway engineering from cyber vulnerabilities where an individual has an optional mechanism to handle and prevent possible threats. Also, it is essential to offer a vital cybersecurity education to all airport employees to create awareness of potential cyber security threats. Lastly,  to combat cyber attacks, the government, public and private organizations as well as non –profit enterprises have a  shared responsibility as stated by the National security agencies.