March 15, 2018 |

F-Secure’s Aviation Cyber Security Services Takes Off

F-Secure’s new service combines expertise in aviation and cyber security to help aviation companies protect their most critical assets.

 Helsinki, Finland – March 15, 2018: Trust is everything in the aviation industry. And a successful cyber attack – even a minor one against something like an in-flight entertainment system – could undermine confidence in airlines or even the entire aviation industry. That’s why global cyber security provider F-Secure has launched a specialized Aviation Cyber Security Services offering that’s designed to help airlines and similar organizations protect their aircraft, infrastructure, data, and reputations.

Cyber security has emerged as a significant issue for many industries, including those working in aviation. 85 percent of airline CEOs identified cyber security as a significant risk in a 2015 survey.* And while many industries have been dealing with data breaches and cyber attacks for many years, F-Secure’s Hugo Teso says that changes in the aviation industry are bringing new risks for airlines.

“Off-the-shelf communication technologies are finding their way into aircraft, which makes security much more complicated than in the past,” said Teso, a former pilot and current head of F-Secure’s Aviation Cyber Security Services. “Because these off-the-shelf technologies weren’t necessarily created to meet the rigorous safety requirements of airlines, the aviation industry is making cyber security a top priority. But they need a partner that understands both cyber security and the details of airline operations, because it’s an industry where those details make a big difference.”

F-Secure’s Aviation Cyber Security Services was designed to help airlines and other companies working in aviation secure their operations from the ground up. It integrates security assessments of avionics, ground systems and data links, vulnerability scanners, security monitoring, incident response services, and specialized cyber security trainings for IT managers as well as cabin and cockpit crews, into a single package that helps airlines harden their operations against cyber attacks.

Security assessments play a particularly vital role in aviation cyber security by flagging potential issues before airlines or manufacturers attempt to certify devices or services for use. Security assessments can focus on individual components such as specific pieces of hardware and software, or broader issues, such as how different systems interact with one another in an entire aircraft program.

F-Secure’s head of Hardware Security Andrea Barisani works with a team of experts that has nearly a decade of experience in performing security assessments for avionics and aircraft manufacturers, and places particular focus on designing and verifying data diodes – a defense mechanism that mitigates worst case scenarios by restricting how an aircraft’s systems can communicate with one another.

“A key issue we help organizations with is how to protect an aircraft’s safety-critical systems from compromises in systems that are, in a sense, more exposed but less significant to an airplane’s operations,” said Barisani. “A key protection measure is separating systems into different ‘trust domains’, and then controlling how systems in different domains can interact with one another. This prevents security issues in one domain, like a Wi-Fi service accessible to passengers, from affecting safety-critical systems, like aircraft controls or air to ground datalinks.”

But the service isn’t limited to simply assessing different technologies or components. According to Teso, the offering aims to help airlines achieve-long term security for all their operations and systems.

“In aviation, trust is everything, and airlines know that if they lose trust they lose business. And even though cyber security is a relatively new concern for them, they understand that they need to get on top of problems right away and stay ahead of potential issues as technologies, operations, and threats evolve,” said Teso. “The overlap between security and safety is 100 percent clear to airlines, so even an attack that’s not intended to affect the safety of an aircraft in reality – like hacking into a database to steal passenger data – is an unacceptable risk that threatens to undermine customer confidence in other operations.”

*Source: https://www.pwc.com/us/en/industrial-products/publications/assets/pwc-airline-industry-perspectives-cybersecurity.pdf

 

More information

Blog: The Fundamentals of Aviation Cyber Security

Video: In Aviation, Trust is Everything

 

About F-Secure

Nobody knows cyber security like F-Secure. For three decades, F-Secure has driven innovations in cyber security, defending tens of thousands of companies and millions of people. With unsurpassed experience in endpoint protection as well as detection and response, F-Secure shields enterprises and consumers against everything from advanced cyber attacks and data breaches to widespread ransomware infections. F-Secure’s sophisticated technology combines the power of machine learning with the human expertise of its world-renowned security labs for a singular approach called Live Security. F-Secure’s security experts have participated in more European cyber crime scene investigations than any other company in the market, and its products are sold all over the world by over 200 broadband and mobile operators and thousands of resellers.

Founded in 1988, F-Secure is listed on the NASDAQ OMX Helsinki Ltd.

f-secure.com twitter.com/fsecure | facebook.com/f-secure

 

F-Secure media relations

Adam Pilkey

+358 40 637 8859

Latest Press Releases

September 18, 2018

F-Secure TOTAL Expands to Protect You, Your Devices and Your Home

New F-Secure cyber security offering for consumers combines connected home protection and password management with internet security and a consumer virtual private network

September 13, 2018

Firmware Weakness in Modern Laptops Exposes Encryption Keys

Experts say current security measures not enough to protect data in lost or stolen laptops

July 31, 2018

Spam Is Still the Choice of Online Criminals, 40 Years Later

Spam is the number one source of malware as criminals add a few new tricks to this classic method, new research from F-Secure and MWR InfoSecurity finds.

July 24, 2018

F-Secure Listed as a Vendor to Watch in Gartner Market Insight: Address 3 Critical Security Issues to Differentiate Yourself in the Connected Home Market

F-Secure believes its investment in artificial intelligence and relationships with 200 carrier partners worldwide are validated by its report listing.

%d bloggers like this: