Aviation is a cornerstone of our global infrastructure and economy. While passenger safety is at an all time high, the increasing adoption of connected technologies exposes aircraft, airports, and the interdependent aviation ecosystem to new types of risks. The consequences of cybersecurity failure can impact human life and public safety; a crisis of confidence in the trustworthiness of air travel can undermine economic and (inter)national security.
Statement of Values
The aviation industry, security researchers, and the public share a common goal: safe, reliable, and trustworthy air travel. For too long, negative perceptions and fractured trust on all sides have held back collaboration between the aviation and security researcher communities that has advanced safety, reliability, and security of other industries. As the traditional domains of aviation safety and cybersecurity increasingly overlap, we will be safer, sooner, together.
The Aviation Village will create a first-of-its-kind platform to bridge the gap between the security research community and the aviation community. The Aviation Village will do this by:
- Building connections, trust, and understanding among all Village participants.
- Developing aviation security skills among DEF CON attendees through workshops and hands-on activities.
- Promoting constructive dialog through talks and interaction.
Through the Aviation Village, the security research community invites industry leaders interested in aviation security, safety, and resilience to attend, understand, collaborate together to achieve our common goals. Empathy and understanding build common ground, while acts and words likely to increase division between these two communities undermine these efforts. The Aviation Village welcomes those who seek to improve aviation security, safety, and resilience through positive, productive collaboration among all ecosystem stakeholders.
The Aviation Village has two primary goals.
Education and Awareness
Cybersecurity in aviation is a topic not widely understood by the public and there are many misconceptions. A primary goal of the village is to provide education and awareness about aviation cybersecurity. We’ll discuss the intersection of aviation safety and security; cybersecurity certification and accreditation; the industries approach to securing aviation systems and emerging technologies that will enhance aviation security.
We also want support aviation cybersecurity researchers. We’ll help researchers understand the difference between IT equipment and aviation equipment and provide recommendations on research approaches and considerations. Additionally, we’ll discuss methods for responsible disclosure.
Members of the aviation and cybersecurity industries will be available to answer your questions. Demonstrations and displays of aviation technology will be provided.
Collaboration and Engagement
Our second goal is to foster collaboration between the aviation industry and the infosec/hacker community. We believe that collaboration benefits both the industry and the public. This as proved to be true with other DEF CON villages and we seek to replicate those successes
We are planning participation by aviation industry, consortia, airlines, government, and members of the cybersecurity industry. We will have invited speakers from these industries and an open CFP to engage the infosec/hacker research community.
Cybersecurity in Aviation can be a broad topic which can intersect with other security domains such as physical security and operational security. While equally important, our first village will be focused on specific aspects of aviation cybersecurity. These topics include:
- Computers and Networks
- Passenger Systems
- Aviation Support Systems and Services
- Testing Considerations and Responsible Disclosure for Researchers
- Cybersecurity Certification and Accreditation
Topics and activities that will not be included this year but may be considered in the future villages include:
- A CTF or vulnerability discovery event
- Passenger and Cargo Screening
- Aircraft and airport physical security
- Aviation operational security
- Other aviation security related to TSA (Transportation Security Administration) and CBP (Customs and Border Protection)