REF2021 IMPACT CASE STUDY: Improving Security and Privacy of Next Generation Aviation Networks

Modern Air Traffic Control technologies are increasingly reliant on digital communication systems, which support aircraft surveillance, avert collisions and enable air-to-ground communications. Today’s aviation industry relies on the security of these systems, and this research project revealed a range of security and privacy challenges, resulting in major adjustments across the industry. 

Research by Professor Ivan Martinovic and Dr Martin Strohmeier discovered evidence of cyber-attacks on modern surveillance systems and systematic leakage of sensitive data. It found that attacks are not only possible but inexpensive, and that widely used systems fail to obscure aircraft movements from observation, revealing private flight details and transferring sensitive passenger details, and that a cipher used to provide confidentiality can be readily broken. 

The findings led to major policy changes by air traffic regulators, operational improvements by carriers, and new product developments by global equipment manufacturers. The research also contributed to the establishment of the OpenSky Network, a global volunteer network analysing air traffic that has grown into the largest aviation research platform worldwide. 

The major policy changes that have resulted from this work is testament to its impact in advancing aviation security and efficiency across the globe. We are also pleased to have played a part in the development of the OpenSky Network and to see it grow into the largest platform of its kind. Professor Ivan Martinovic 

The impact 

Having more detailed data streams is fundamental to ongoing aviation modernisation efforts, to improve efficiency and safety, while lowering costs. This research demonstrated the scope for malicious activity and provided the evidence base for changes throughout the industry. 

The research has been influential in the security work of the International Civil Aviation Organization, the US Department of Defense, the Swiss government and the Swiss Air Force. It has been incorporated into assessments of cyber-security for critical infrastructure by the governments of Singapore, Sweden and the Netherlands. Swiss Air undertook system improvements to mitigate the vulnerabilities, benefitting more than 16 million passengers carried by the airline annually.  

The OpenSky Network operates over 2,000 sensors worldwide and serves approximately 3,000 members, including national air traffic regulators and the Europe-wide air traffic body. The value of this open data came into focus with the emergence of COVID-19, as the International Monetary Fund recommended the data for use in measuring countries’ economic relationships when faced with emergency circumstances. Additionally, the Bank of England used the data for its Monetary Policy Report, which studied the economic impact of COVID-19 on the UK.   

Find out more  

The full REF submission is available in this PDF.