CybAirSOC

The sector-specific SOC for the aviation sector

CybAirSOC - From an EU project to a specialised cyber security solution for the aviation sector

In an increasingly digitalised world, critical infrastructures such as airports and the entire aviation sector are facing ever more complex cyber threats. While passenger and cargo flights around the world rely on digital systems to ensure efficiency and safety, the risk of targeted cyberattacks is growing. This is precisely where CybAirSOC comes in, as a Security Operations Centre (SOC) specifically customised for the aviation sector that helps to establish new security standards and make air traffic much more resilient to cyber attacks.

Aviation – a safety-critical sector

The aviation industry is one of the most heavily regulated and critical sectors in the world. While physical security measures have long been standard at airports, securing the digital infrastructure is proving to be just as essential. Modern airlines, airports and aviation organisations are highly networked, but increasing digitalisation also makes them vulnerable to cyber attacks, which can lead to everything from disruptions to air traffic to far-reaching economic damage.

CybAirSOC has the explicit goal of improving the resilience of the aviation sector in Europe to cyber-attacks through faster detection and response to cyber security incidents and threats. The initiative thus has the task of securing airports as critical infrastructures throughout Europe.

CybAirSOC represents a significant advance in cybersecurity for the aviation sector and aims to create a core for the sector’s cybersecurity ecosystem.

On the one hand, this strengthens airports’ ability to recognise cyber threats and enables the sharing of cyber threat intelligence – both within the industry community and with other stakeholders, such as authorities.

Why a specific Security Operations Centre for the aviation sector?

SAMA PARTNERS and Flughafen München GmbH have formed a consortium to develop CybAirSOC as a sector-specific Security Operations Centre (SOC) for the entire European aviation sector. The consortium ensures both state-of-the-art cyber security knowledge and sector-specific expertise, both of which are necessary for the success of the project. Until now, Security Operations Centres have been used to monitor corporate IT systems – with findings that are of great security significance for the commissioning company. As a rule, however, this knowledge about cyber threats and their defence remains within the respective company. The CybAirSOC initiative, on the other hand, not only collects information about the current threat situation at Munich Airport, but also uses the ThreatBay® application from SAMA PARTNERS to create an overall threat situation for the entire aviation sector, which can also be shared with other airports in future via the ThreatBay Tweet® communication module, which complements the system.

Munich Airport: First deployment site for CybAirSOC

Munich Airport will serve as the first deployment site for this state-of-the-art solution to demonstrate the capabilities of CybAirSOC and set a new standard for cyber security at airports. The project is being coordinated by SAMA PARTNERS and will run for three years. The initiative is co-funded by the European Union as part of the “Digital Europe” funding programme (DIGITAL-ECCC-2022-CYBER-B-03, project no. 101145851).

What are the advantages of CybAirSOC as a sector-specific SOC solution?

Continuous monitoring

CybAirSOC provides a robust Security Operations Centre (SOC) that ensures continuous monitoring of the current cyber security status. This service facilitates rapid detection and response to cyber attacks and minimises potential damage and downtime.

Improved monitoring through CTI

The solution integrates the effective security monitoring functions of a conventional SOC with the advanced predictive analysis of Cyber Threat Intelligence (CTI). This combination ensures that potential threats are recognised and mitigated before they can cause significant damage.

Advanced AI and machine learning

CybAirSOC utilises the power of cutting-edge artificial intelligence and machine learning technologies to deliver meaningful cyber security insights. These technologies enable the system to adapt and respond to new threats in real time, improving the overall resilience of aviation infrastructure.

Platform for collaboration

CybAirSOC promotes the exchange of information from different SOCs in an intelligent way. The future strategy focuses on scaling the SOC services across Europe in order to integrate additional airports and aviation companies into the security network.

Continuous sensitisation to threats

The security team at CybAirSOC is constantly informed about new threats, methods, attack vectors and technologies. This proactive approach ensures that the system is always up to date with the latest developments in the cyber threat landscape and thus continuously protects the aviation sector.

With the implementation of the first version of the ThreatBay Tweet© communication module, a secure exchange platform for cyber threat information was created, which enables the exchange of current, aviation-relevant cyber threat data with other entities, such as other airports or authorities.

Would you like to learn more about CybAirSOC?

The CybAirSOC concept as a sector-specific security solution for the aviation sector is designed to strengthen the cyber security of the entire aviation industry in Europe, but the sector-specific approach can also be transferred to other safety-critical industries. Sounds interesting? Then get in touch with us.