AVI AFRIQUE 2018 23 - 24 October 2018 Tshepo Peege AVIATION AND CYBERCRIME THREATS ARE BECOMING A REALITY 23 - 24 October 2018 Tshepo Peege REPRESENTATIVE OF SOUTH AFRICA ON THE COUNCIL OF ICAO

The Chicago Convention "Whereas the future development of international civil aviation can greatly help create and preserve friendship and understanding among the nations and peoples of the world, yet its abuse can become a threat to the general security.”

Annex 17 - Safeguarding International Civil Aviation against Acts of Unlawful Interference Assembly called for specifications in existing or new Annexes to the Chicago Convention to specifically deal with the problem of unlawful interference, in particular with unlawful seizure of aircraft. Annex sets out the basis for the ICAO civil aviation security programme and seeks to safeguard civil aviation and its facilities against acts of unlawful interference. Of critical importance to the international aviation community at large are the measures taken by ICAO to prevent and suppress all acts of unlawful interference against civil aviation throughout the world.

A39-19: ADDRESSING CYBER SECURITY IN CIVIL AVIATION • Whereas the global aviation system is a highly complex and integrated system that comprises information and communications technology critical for the safety and security of civil aviation operations. • Noting that aviation sector is increasingly reliant on the availability of information and communications technology systems, as well as on the integrity and confidentiality of data. • Mindful that the threat posed by cyber incidents on civil aviation is rapidly and continuously evolving, that threat actors are focused on malicious intent, disruption of business continuity and the theft of information for political, financial or other motivations, and that the threat can easily evolve to affect critical civil aviation systems worldwide.

WAY FORWARD SITA To manage this complexity and improve the safety and efficiency of operations which ultimately provide financial or operating benefits the air navigation system must transform and build upon the use of emerging technologies information, connectivity and concept of operations Secure exchange of information on a global basis Enabled by a global resilient aviation network built upon a trust framework, As part of this global approach, it proposes a multilayer defense to cyber attacks and outlines the characteristics of a global resilient aviation network.

IFATCA, IFALPA, ICCAIA, etc.    In response to these changes, a new and globally harmonized end-to-end approach supporting the needs to increase cyber resilience of the civil aviation system must be pursued must be done in a manner that supports all civil aviation stakeholders This approach should consider governance and technical aspects, and should leverage commercially available technologies and methods to meet the demands of speed and affordability for the industry.

AUSTRIA, EU and ECAC   Internationally, Computer Emergency Response Teams (CERTs) and Computer Security Incident Response Teams (CSIRTs) have created a community called the Forum for Incident Response and Security Teams (FIRST). Forum could serve the aviation community as a blueprint for a concerted approach towards global information sharing with the objective of not only reacting to incidents but also preventing future attacks becoming successful. In dealing with the discovery of new vulnerabilities, the information collected by CSIRTs will allow for a certain anticipation of emerging risks and consequently take preventive measures to limit detrimental effects on civil aviation.

A39 ALSO CALLS FOR UPON STATES INTER ALIA: Encourage the development of a common understanding among Member States of cyber threats and risks, and of common criteria to determine the criticality of the assets and systems that need to be protected Encourage government/industry coordination with regard to aviation cyber security strategies, policies and plans, as well as sharing of information to help identify critical vulnerabilities that need to be addressed  Develop and participate in government/industry partnerships for the systematic sharing of information on cyber threats, incidents, trends and mitigation efforts

A39 ALSO CALLS FOR UPON STATES INTER ALIA: cont’d Develop and participate in government/industry partnerships for the systematic sharing of information on cyber threats, incidents, trends and mitigation efforts  

CONCLUSION   All aviation organizations and stakeholders have come together to request ICAO to do the following: Work with States, industry and international organizations to develop a globally harmonized aviation trust framework that: includes governance, policy, training and overall technical performance requirements to allow the realization of an information rich and resilient aviation system.

THANK YOU