Cyber-Security Challenges in Civil Aviation: Analyzing Current Threats, Common Attack Vectors, and Future Trends with a Focus on the Aviation Sector in South Africa.

Abstract

Aviation is an industry that has adopted Information and Communication Technology (ICT) tools at a great pace. However, this transition towards technologies has also led to critical security gaps hence much needed to be done to understand the cyber security issues. Using case studies and global data, this research investigates the digital risks and threat to South Africa’s aviation systems in the last two decades. South African CAPSO has an evolving threat landscape in the aviation sector. Newspaper reports said flight services were disrupted and passenger details were compromised with the hacking of aviation systems making the hacking of aviation systems at least 45 per cent up from five years ago. Those adversaries are exploiting the weaknesses to conduct espionage operations and exfiltrate sensitive aviation data — advanced persistent threat (APT) groups and state sponsored actors. Cybercriminals are targeting the I.T. infrastructure supporting flight management systems, air traffic control operations and passenger data using tactics like phishing scams, malware injections and ransomware attacks. This study identifies points of vulnerability in these systems tracks attack trends and recommends steps to mitigate risk. This research targets developing defence mechanisms specific to South Africa's aviation industry by understanding the motivations and strategies of cyber attackers. Cybersecurity measures are crucial, to protect aviation services that foster trust and the continued safety and reliability of air travel. This study does not guide policy development. Also drives tech progress, and promotes cooperative efforts, between industry parties, to enhance avsec cyber-resiliency.