Abstract
The aim of this paper is show how existing legal frameworks applied to civil aviation might be relevant in the context of cyberspace. Security threats to civil aviation operations have become more sophisticated and challenging to deal with. One that is emerging, and arguably even more complicated and sophisticated to manage, is the cyber-attack. This article is interdisciplinary as it briefly defines cyber-attack and describes the nature of the threat it poses to aviation and society generally, but also focuses on the international legal instruments that are available to address cyberterrorism and reflects on the challenges faced by aviation through cyberspace. Conclusions offer some food for thought on the article’s conclusions and on possible developments in the relationship between civil aviation and cyber security.
Similar content being viewed by others
Notes
Fox, S.J. Flying challenges for the future: Aviation preparedness – in the face of cyber-terrorism. J Transp Secur 9, Fox 2016, 206; R. Abeyratne, Cyber Terrorism and Aviation–National and International Response, 4 J. Transp. Sec., no. 4, Dec. Abeyratne, 2011, 337–340; M. Klenka, Aviation Safety: Legal Obligations of States and Practice, J Transp Secur (Klenka 2017) 10: 127, 127; P. Tyson, Cybersecurity Challenges in Aviation, 1–2, available at: https://www.advisenltd.com/wp-content/uploads/2016/06/ cybersecurity-challenges-in-aviation-ABC-paper-2016–06-07.pdf; EUROCONTROL. Aviation Intelligence Unit. Think Paper #3—August 2019. Cyber Security in aviation. Available at: https://www.eurocontrol.int/sites/default/files/2020-01/eurocontrol-think-paper-3-cybersecurity-aviation.pdf.
R. Abeyratne, Cyber Terrorism and Aviation–National and International Response, 4 J. Transp. Sec., no. 4, Dec. Abeyratne, 2011, 337, 340; see also Ruwantissa Abeyratne, The Beijing Convention on the Suppression of Unlawful Acts Relating to International Civil Aviation–An Interpretative Study, 113.
B. Lim, Aviation Security: Emerging Threats from Cyber Security in Aviation – Challenges and Mitigations, J. Aviation Mgmt. 83 (Lim 2014), 83, Available at: http://www.saa.com.sg/saaWeb2011/export/sites/saa/en/Publication/downloads/EmergingThreats_CyberSecurityinAviation_ChallengesandMitigations.pdf
M. Pierides, et al., Cybersecurity and the Aviation Sector: Recent Incidents Highlight Unique Risks, Pillsbury Law (August 24, Pierides et al. 2015), https://www.pillsburylaw.com/images/content/1/1/v2/1196/AlertAug2015GlobalSourcingCybersecurityandTheAviationSector.pdf.
D. Jeyakodi, Cyber Security in Civil Aviation, Aviation & Space J., no.4, Oct.–Dec. Jeyakodi 2015, 2.
NIST, Cybersecurity Framework, https://www.nist.gov/cyberframework
H. O. Simmons, Cybersecurity in Aviation: Constant Vigilance Required, 82 J. Air L. & Com. 771 (Simmons 2017), 802.
Fox, S.J. Flying challenges for the future: Aviation preparedness – in the face of cyber-terrorism. J Transp Secur 9, Fox 2016, 197–198.
W. L. Tafoya, Cyber Terror, FBI Law Enforcement Bulletin (November 1, Tafoya 2011), https://leb.fbi.gov/articles/featured-articles/cyber-terror
R. Abeyratne, Aviation Cyber Security: A Constructive Look at the Work of ICAO, 41 Air & Space Law 25, 26–29 (Abeyratne 2016).
U.S. Gov’t Accountability Office, GAO/AIMD-98–155, Air Traffic Control: Weak Computer Security Practices Jeopardize Flight Safety (1998).
T. Gjelten, Extending the Law of War to Cyberspace, National Public Radio (Sept. 22, Gjelten 2010), https://www.npr.org/templates/story/story.php?storyId=130023318. In: O. A. Hathaway et al., The Law of Cyber-Attack, 100 Cal. L. Rev. 817, 823 (Hathaway et al. 2012).
O. A. Hathaway et al., The Law of Cyber-Attack, 100 Cal. L. Rev. 817, 822–32 (Hathaway et al. 2012).
R. Abeyratne, Cyber Terrorism and Aviation–National and International Response, 4 J. Transp. Sec., no. 4, Dec. Abeyratne, 2011, 337–40.
D. Jeyakodi, Cyber Security in Civil Aviation, Aviation & Space J., no.4, Oct.-Dec. Jeyakodi 2015, 3–6.
R. Abeyratne, Cyber Terrorism and Aviation–National and International Response, 4 J. Transp. Sec., no. 4, Dec. Abeyratne, 2011, 340–42.
E. Iasiello, Getting Ahead of the Threat: Aviation and Cyber Security, Aerospace America, July-Aug. Iasiello 2013, 22, 24–25.
T. Schóber et al., Present and Potential Security Threats Posed to Civil Aviation, 4 INCAS Bulletin, no. 2, Apr.–June Schóber et al., 2012, 169, 173–174.
A. Cohen, Cyberterrorism: Are We Legally Ready?, 9 J. Int’l Bus. & L., no. 1, 2010, 6.
A. Gendron & M. Rudner, Assessing Cyber Threats to Canadian Infrastructure, 23, https://www.canada.ca/en/security-intelligence-service/corporate/publications/assessing-cyber-threats-to-canadian-infrastructure.html
E. Iasiello, Getting Ahead of the Threat: Aviation and Cyber Security, Aerospace America, July-Aug. Iasiello 2013, 25; T. De Zan et al., The Defence of Civilian Air Traffic Systems from Cyber Threats, Instituto Affari Internazionali, Dec. De Zan et al., 2015, at 21–25; Fox, S.J. Flying challenges for the future: Aviation preparedness – in the face of cyber-terrorism. J Transp Secur 9, Fox 2016, 198.
J. A. Urban, Not Your Granddaddy's Aviation Industry: The Need to Implement Cybersecurity Standards and Best Practices Within the International Aviation Industry, 27 Alb. L. J. Sci. & Tech. 62 (Urban 2017).
E. Iasiello, Getting Ahead of the Threat: Aviation and Cyber Security, Aerospace America, July-Aug. Iasiello 2013, 25.
Industrial Control Systems Cyber Emergency Response Team. For the report see: ICS-CERT, ICS-CERT Monitor, Sep. 2014–Feb. 2015, https://ics-cert.us-cert.gov/monitors/ICS-MM201502.
T. De Zan et al., The Defence of Civilian Air Traffic Systems from Cyber Threats, Instituto Affari Internazionali, Dec. De Zan et al., 2015, 25–27.
T. De Zan et al., The Defence of Civilian Air Traffic Systems from Cyber Threats, Instituto Affari Internazionali, Dec. De Zan et al., 2015, 27–28.
T. Schóber et al., Present and Potential Security Threats Posed to Civil Aviation, 4 INCAS Bulletin, no. 2, Apr.–June Schóber et al. 2012, 173.
M. N. Schmidt. Tallinn Manual 2.0 on the International Law applicable to Cyber Operations. Schmidt 2017. Cambridge University Press, 259.
E. Iasiello, Getting Ahead of the Threat: Aviation and Cyber Security, Aerospace America, July-Aug. Iasiello 2013, 22–23.
M. Strohmeier et al., Assessing the Impact of Aviation Security on Cyber Power, 8 Int’l Conf. on Cyber Conflict, 223, 224–28, https://www.cs.ox.ac.uk/files/8266/cycon_strohmeier.pdf.
M. N. Schmidt. Tallinn Manual 2.0 on the International Law applicable to Cyber Operations. Schmidt 2017. Cambridge University Press, 259.
P. Dempsey, Aviation Security: The Role of Law in the War Against Terrorism, 651.
Chicago Convention, Art. 3(d).
This 1984 amendment to the Chicago Convention “reaffirm[s] the principle of non-use of weapons against civil aircraft in flight.” Protocol Relating to an Amendment to the Convention on International Civil Aviation, pmbl., May 10,1984,23 I.L.M. 705.
O. A. Hathaway et al., The Law of Cyber-Attack, 100 Cal. L. Rev. 868 – 869.
O. A. Hathaway et al., The Law of Cyber-Attack, 100 Cal. L. Rev. 870.
D. Jeyakodi, Cyber Security in Civil Aviation, Aviation & Space J., no.4, Oct.–Dec.Jeyakodi 2015, 7 – 9.
A. Cohen, Cyberterrorism: Are We Legally Ready?, 9 J. Int’l Bus. & L., no. 1, 2010, 23 – 24.
R. Abeyratne, Cyber Terrorism and Aviation–National and International Response, 4 J. Transp. Sec., no. 4, Dec. Abeyratne, 2011, 342 – 343.
D. Jeyakodi, Cyber Security in Civil Aviation, Aviation & Space J., no. 4, Oct.–Dec. Jeyakodi 2015, 9 – 11.
CYBER RESILIENCE IN CIVIL AVIATION A39-WP/99 EX/45, TE/26 27/7/16. p. 1 – 3.
R. Abeyratne (2019) Legal Priorities in Air Transport, 192–193.
ICAO. Cybersecurity. Civil Aviation Cybersecurity. 2019. Available at: https://www.icao.int/cybersecurity/Pages/default.aspx.
Available at: https://www.icao.int/cybersecurity/Documents/A40-10.pdf
R. Abeyratne (2020) Aviation in the Digital Age. Legal and Regulatory Aspects, 134–136.
R. Abeyratne (2020) Aviation in the Digital Age. Legal and Regulatory Aspects, 175.
Judge Stein Schjolberg. The Third Pillar for Cyberspace. An International Court or Tribunal for Cyberspace. Available at: http://www.cybercrimelaw.net/documents/Draft_Treaty_text_on_International_Criminal_Tribunal_for_Cyberspace.pdf
IATA. Aviation Cyber Security Toolkit. Available at: http://www.iata.org/publications/store/Pages/aviation-cyber-security-toolkit.aspx
D. Jeyakodi, Cyber Security in Civil Aviation, Aviation & Space J., no. 4, Oct.–Dec. Jeyakodi 2015, 11 – 14.
R. Ellis, V. Mohan (Ellis and Mohan 2019). Rewired Cybersecurity Governance. Wiley, 75.
E. Iasiello, Getting Ahead of the Threat: Aviation and Cyber Security, Aerospace America, July-Aug. Iasiello 2013, 25.
D. Jeyakodi, Cyber Security in Civil Aviation, Aviation & Space J., no. 4, Oct.–Dec. Jeyakodi 2015, 14 – 17.
References
Abeyratne R (2011) Cyber Terrorism and Aviation--National and International Response, 4 J. Transp. Sec., no. 4
Abeyratne R (2016) Aviation cyber security: a constructive look at the work of ICAO, 41 air and space law 25, 26–29
Abeyratne R (2019) Legal Priorities in Air Transport. Springer Nature Switzerland AG
Abeyratne R (2020) Aviation in the digital age. legal and regulatory aspects. Springer Nature Switzerland AG
Abeyratne R (n.d.) The Beijing Convention on the Suppression of Unlawful Acts Relating to International Civil Aviation--An Interpretative Study
Chicago Convention (n.d.)
Clarke RA, Knake RK (2010) Cyber war: the next threat to National Security and What to Do About It, 11
Cohen, Cyberterrorism (2010) Are we legally ready?, 9 J. Int’l Bus. & L., no. 1, 2010
CYBER RESILIENCE IN CIVIL AVIATION A39-WP/99 EX/45 (n.d.) TE/26 27/7/16
De Zan T et al 2015 The Defence of Civilian Air Traffic Systems from Cyber Threats, InstitutoAffari Internazionali
Dempsey P (n.d.) Aviation security: the role of law in the war against terrorism
Ellis R, Mohan V (2019) Rewired Cybersecurity Governance. Wiley
EUROCONTROL (2019) Aviation intelligence unit. Think Paper #3 - August 2019. Cyber Security in aviation. Available at: https://www.eurocontrol.int/sites/default/files/2020-01/eurocontrol-think-paper-3-cybersecurity-aviation.pdf2020-01/eurocontrol-think-paper-3-cybersecurity-aviation.pdf. Accessed 21 Mar 2021
Fox SJ (2015) CONTEST’ing Chicago origins and reflections: lest we forget! Int J Private Law 8(1):73–98
Fox SJ (2016) Flying challenges for the future: aviation preparedness – in the face of cyber-terrorism. J Transp Secur 9:191–218
Gendron A, Rudner M (n.d.) Assessing cyber threats to Canadian infrastructure. Available at: https://www.canada.ca/content/dam/csis-scrs/documents/publications/CyberTrheats_AO_Booklet_ENG.pdf. Accessed 21 Mar 2021
Gjelten T (2010) Extending the Law of War to Cyberspace, National Public Radio
Hathaway OA et al (2012) The Law of Cyber-Attack, 100 Cal. L. Rev
Iasiello (2013) Getting ahead of the threat: aviation and cyber security aerospace America
IATA (n.d.) Aviation cyber security toolkit. Available at: http://www.iata.org/publications/store/Pages/aviation-cyber-security-toolkit.aspx. Accessed 21 Mar 2021
ICAO (2019) Cybersecurity. Civil aviation cybersecurity. Available at: https://www.icao.int/cybersecurity/Pages/default.aspx. Accessed 21 Mar 2021
Industrial Control Systems Cyber Emergency Response Team (n.d.) For the report see: ICS-CERT, ICS-CERT Monitor, Sep. 2014–Feb. 2015. Available at: https://us-cert.cisa.gov/ics/monitors/ICS-MM201502. Accessed 21 Mar 2021
Int’l Civil Aviation Org., Civil Aviation Cyber-Security (2016) Possible actions by regulators and stakeholders
Int’l Civil Aviation Org., Coordinating Cybersecurity Work (2016)
Jeyakodi (2015) Cyber Security in Civil Aviation, Aviation & Space J., no.4
Judge Stein Schjolberg (n.d.) The third pillar for cyberspace. An International Court or Tribunal for Cyberspace. Available at: https://www.cybercrimelaw.net/documents/140626_Draft_Treaty_text.pdf. Accessed 21 Mar 2021
Klenka M (2017) Aviation Safety: Legal Obligations of States and Practice. J Transp Secur 10:127
Klenka M (2019) Major incidents that shaped aviation security. J Transp Secur 12:39–56
Libicki MC (1995) What is information warfare? 77
Lim (2014) Aviation Security: Emerging Threats from Cyber Security in Aviation – Challenges and Mitigations, J. Aviation Mgmt. 83
Pierides M et al (2015) Cybersecurity and the Aviation Sector: Recent Incidents Highlight Unique Risks, Pillsbury Law
Schmidt MN (2017) Tallinn Manual 2.0 on the International Law applicable to Cyber Operations. Cambridge University Press
Schóber T et al (201) Present and potential security threats posed to civil aviation, 4 INCAS Bulletin, no. 2
Simmons HO (2017) Cybersecurity in Aviation: Constant Vigilance Required, 82 J. Air L. & Com. 771
Stander and Ophoff J (2016) Cyber Security in Civil Aviation, 1 Imam J. Applied Scis., no. 1
Strohmeier M et al (n.d.) Assessing the impact of aviation security on cyber power, 8 Int’l Conf. on Cyber Conflict. Available at: https://www.cs.ox.ac.uk/files/8266/cycon_strohmeier.pdf. Accessed 21 Mar 2021
Tafoya WL (2011) Cyber Terror, FBI Law Enforcement Bulletin
Tyson P (2016) Cybersecurity challenges in aviation. Available at: https://www.advisenltd.com/wp-content/uploads/2016/06/cybersecuritychallenges-in-aviation-ABC-paper-2016-06-07.pdf. Accessed 21 Mar 2021
U.S. Gov’t Accountability Office, GAO/AIMD-98–155 (1998) Air traffic control: weak computer security practices jeopardize flight safety
Urban JA (2017) Not Your Granddaddy's Aviation Industry: The Need to Implement Cybersecurity Standards and Best Practices Within the International Aviation Industry, 27 Alb. L. J. Sci. & Tech. 62
Author information
Authors and Affiliations
Corresponding author
Ethics declarations
Disclaimer
The views and opinions expressed in this article are those of the author and cannot be considered as the official policy, position, or opinions of the Supreme Court of the Slovak Republic.
Additional information
Publisher's note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Rights and permissions
About this article
Cite this article
Klenka, M. Aviation cyber security: legal aspects of cyber threats. J Transp Secur 14, 177–195 (2021). https://doi.org/10.1007/s12198-021-00232-8
Received:
Accepted:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s12198-021-00232-8