1. Security Management Platform
FP7 Integrated Project; Project Co-ordinator: Mr. Giuliano D'Auria Project Website:
Objectives
The goal of GAMMA project is to propose security solutions to combat the emerging threats to Air Traffic Management Systems.
GAMMA is complimentary to SESAR, adding a new security perspective to the overall ATM system while remaining open for future extensions, e.g., SESAR 2020.
GAMMA project has been focusing on: assessing security risks related to ATM systems, defining security controls, producing security architecture views of ATM systems, building ATM system prototypes and validating these prototypes.
GAMMA Concept
Concept validation in GAMMA
Systems
LGSOC
NGSMP
EGCC
Local Security
ATM Nodes
Cyber Security
intelligence
Attack
Prediction
Coordination
& Control
Local
National
European
ATM Security
Management Platform
Satcom Security
Secure
GNSS
communications
Secure ATC
Information
Exchange
Gateway
Security
System
Integrated
Modular
Communication
ATM Security
Management Platform
Information Dissemination System
Attack
Prediction
Cybersecurity
Intelligent
Platform
Command
and Control
National GAMMA
Security Management Platform
NGSMP
European GAMMA
Control Center
EGCC
The GAMMA concept builds on the principles related to Security Management in a multi stakeholder collaborative environment, while maintaining a strong link to the current international and European legal frameworks, it is considering the constraints and assuming the rights to national sovereignty.
The GAMMA can be conceptualised as a network of distributed nodes embedded within the ATM context, providing interfaces to (ATM) internal and external security stakeholders.
GAMMA defines three layers for managing Security at Local (LGSOC), National (NGSMP) and European levels (EGCC).
The GAMMA concept is developed through a central event handling security coordination system named Security Management Platform (SMP) and a number of ATM systems (prototypes) each managing security threats specific to different ATM application.
SMP receives security related data from ATM systems (prototypes), utilises the data as the basis of managing security and produces information and knowledge. These is used for prevention, threat identification, and efficient resolution of any potential attacks to the ATM assets as well as by various stakeholders for different purposes.
Security Management Platform & Prototypes
SMP main functions
Coordination & Control System: Provides Alarm Correlation, Security Monitoring and Decision Support for Incident Management
Attack Effect Prediction: Provides prediction for the adversary actions and its possible impact based on the information received from the SMP.
Cyber Security Intelligence Platform: provides information regarding emerging threats to ATM security, Social and Political contingencies with a possible impact on ATM security.
Information Dissemination System (IDS): Disseminates automatically relevant security reports between SMPs: from SMP at European level to the SMPs at National levels. It allows the SMP operator at National level to disseminate security reports to the other Security Management Platforms.
External Event Busa
Cyber Security
Intelligence Platform
Internal Event Bus
IDS
Module
Attack Prediction
Alerts in input to SMP
Decision Support
Correlation Engine
Stream Based Event Processing
Rule Engine
DSS
Data Collectors
Signature Based Support
Anomaly Based Support
Historical Analysis Support
Visualization Module
Visualization
Coordination and Control
<ATTACK INTERFACE>
<IDS INTERFACE>
<INTELLIGENCE INTERFACE>
GAMMA Application Prototypes
Satcom Security: Detection and handling of attacks or tampering with airborne Satcom systems
Integrated Modular Communication: Secure integration of radio coms into an on-board platform for use by a diverse set of applications
Secure GNSS Communication: Detection of different attacks (interference or spoofing) on the GNSS signals
Secure ATC Communication: Speaker authenticity verification of A2G voice com., searching for stress signals & unusual traffic behaviour
Information Exchange Gateway: Protection of ATM network through a HTTP/HTTPS/SOAP intrusion detection system
Information Security system: Protection of ATM data communication (G2G and A2G) by using authentication and encryption methods
Project Facts
Theme: FP7- IP [SEC ], Air Traffic Management/Control Threat Assessment Model GAMMA (Global ATM Security Management) Project; Duration
Grant Agreement No:
Project Partners:
This project has received funding from the European Union’s Seventh Framework Programme for research, technological development and demonstration under grant agreement nr