Security Management Platform FP7 Integrated Project; Project Co-ordinator: Mr. Giuliano D'Auria (giuliano.dauria@leonardocompany.com); Project Website: www.gamma-project.eu/ Objectives The goal of GAMMA project is to propose security solutions to combat the emerging threats to Air Traffic Management Systems. GAMMA is complimentary to SESAR, adding a new security perspective to the overall ATM system while remaining open for future extensions, e.g., SESAR 2020. GAMMA project has been focusing on: assessing security risks related to ATM systems, defining security controls, producing security architecture views of ATM systems, building ATM system prototypes and validating these prototypes. GAMMA Concept Concept validation in GAMMA Systems LGSOC NGSMP EGCC Local Security ATM Nodes Cyber Security intelligence Attack Prediction Coordination & Control Local National European ATM Security Management Platform Satcom Security Secure GNSS communications Secure ATC Information Exchange Gateway Security System Integrated Modular Communication ATM Security Management Platform Information Dissemination System Attack Prediction Cybersecurity Intelligent Platform Command and Control National GAMMA Security Management Platform NGSMP European GAMMA Control Center EGCC The GAMMA concept builds on the principles related to Security Management in a multi stakeholder collaborative environment, while maintaining a strong link to the current international and European legal frameworks, it is considering the constraints and assuming the rights to national sovereignty. The GAMMA can be conceptualised as a network of distributed nodes embedded within the ATM context, providing interfaces to (ATM) internal and external security stakeholders. GAMMA defines three layers for managing Security at Local (LGSOC), National (NGSMP) and European levels (EGCC). The GAMMA concept is developed through a central event handling security coordination system named Security Management Platform (SMP) and a number of ATM systems (prototypes) each managing security threats specific to different ATM application. SMP receives security related data from ATM systems (prototypes), utilises the data as the basis of managing security and produces information and knowledge. These is used for prevention, threat identification, and efficient resolution of any potential attacks to the ATM assets as well as by various stakeholders for different purposes. Security Management Platform & Prototypes SMP main functions Coordination & Control System: Provides Alarm Correlation, Security Monitoring and Decision Support for Incident Management Attack Effect Prediction: Provides prediction for the adversary actions and its possible impact based on the information received from the SMP. Cyber Security Intelligence Platform: provides information regarding emerging threats to ATM security, Social and Political contingencies with a possible impact on ATM security. Information Dissemination System (IDS): Disseminates automatically relevant security reports between SMPs: from SMP at European level to the SMPs at National levels. It allows the SMP operator at National level to disseminate security reports to the other Security Management Platforms. External Event Busa Cyber Security Intelligence Platform Internal Event Bus IDS Module Attack Prediction Alerts in input to SMP Decision Support Correlation Engine Stream Based Event Processing Rule Engine DSS Data Collectors Signature Based Support Anomaly Based Support Historical Analysis Support Visualization Module Visualization Coordination and Control <ATTACK INTERFACE> <IDS INTERFACE> <INTELLIGENCE INTERFACE> GAMMA Application Prototypes Satcom Security: Detection and handling of attacks or tampering with airborne Satcom systems Integrated Modular Communication: Secure integration of radio coms into an on-board platform for use by a diverse set of applications Secure GNSS Communication: Detection of different attacks (interference or spoofing) on the GNSS signals Secure ATC Communication: Speaker authenticity verification of A2G voice com., searching for stress signals & unusual traffic behaviour Information Exchange Gateway: Protection of ATM network through a HTTP/HTTPS/SOAP intrusion detection system Information Security system: Protection of ATM data communication (G2G and A2G) by using authentication and encryption methods Project Facts Theme: FP7- IP [SEC-2012.2.2-2], Air Traffic Management/Control Threat Assessment Model GAMMA (Global ATM Security Management) Project; Duration 2013-17 Grant Agreement No: 312382 Project Partners: This project has received funding from the European Union’s Seventh Framework Programme for research, technological development and demonstration under grant agreement nr. 312382