Aerospace is a cornerstone of our global infrastructure and economy. While passenger safety is at an all time high, the increasing adoption of connected technologies exposes aircraft, airports, and the interdependent aerospace ecosystem to new types of risks. The consequences of cybersecurity failure can impact human life and public safety; a crisis of confidence in the trustworthiness of air travel can undermine economic and (inter)national security.
Statement of Values
The aerospace industry, security researchers, and the public share a common goal: safe, reliable, and trustworthy air travel. For too long, negative perceptions and fractured trust on all sides have held back collaboration between the aerospace and security researcher communities. that has advanced safety, reliability, and security of other industries. As the traditional domains of aerospace safety and cybersecurity increasingly overlap, we will be safer, sooner, together.
The Aerospace Village will create a platform to bridge the gap between the security research aerospace communities. The Aerospace Village will do this by:
- Building connections, trust, and understanding among all Village participants.
- Developing aerospace security skills among DEF CON attendees through workshops and hands-on activities.
- Promoting constructive dialog through talks and interaction.
Through the Aerospace Village, the security research community invites industry leaders interested in aerospace security, safety, and resilience to attend, understand, collaborate together to achieve our common goals. Empathy and understanding build common ground, while actions and words likely to increase division between these two communities undermine these efforts. The Aerospace Village welcomes those who seek to improve aerospace security, safety, and resilience through positive, productive collaboration among all ecosystem stakeholders.
The Aerospace Village has two primary goals.
Education and Awareness
Cybersecurity in aerospace is a topic not widely understood by the public and there are many misconceptions. A primary goal of the village is to provide education and awareness about aerospace cybersecurity. We’ll discuss the intersection of aerospace safety and security; cybersecurity certification and accreditation; the industries approach to securing aerospace systems and emerging technologies that will enhance aerospace security.
We also want to support aerospace cybersecurity researchers. We’ll help researchers understand the difference between IT equipment and aerospace equipment and provide recommendations on research approaches and considerations. Additionally, we’ll discuss methods for responsible disclosure.
Members of the aerospace and cybersecurity industries will be available to answer your questions. Demonstrations and displays of aerospace technology will be provided.
Collaboration and Engagement
Our second goal is to foster collaboration between the aerospace industry and the infosec/hacker community. We believe that collaboration benefits both the industry and the public. This has proved to be true with other DEF CON villages and we seek to replicate those successes.
We are planning participation by aerospace industry, consortia, airlines, government, and members of the cybersecurity industry. We will have invited speakers from these industries and an open CFP to engage the infosec/hacker research community.
Cybersecurity in Aersospace can be a broad topic which can intersect with other security domains such as physical security and operational security. While equally important, our village will remain currently focused on specific aspects of aerospace cybersecurity. These topics include:
- Computers and Networks
- Passenger Systems
- Aerospace Support Systems and Services
- Testing Considerations and Responsible Disclosure for Researchers
- Cybersecurity Certification and Accreditation
- A CTF or vulnerability discovery event (our first one is planned for DC28)
Topics and activities that will not be included this year but may be considered in the future villages include:
- Passenger and Cargo Screening
- Aircraft and airport physical security
- Aerospace operational security
- Other aerospace security related to TSA (Transportation Security Administration) and CBP (Customs and Border Protection)