1. CybAIRVision®
Next generation of Cyber-attacks : “Air Operations cyber intrusion detection”

2. ThalesRaytheonSystems by Numbers
#1Cyber Air Defense dedicated solution

3. Air operations cyber space
Networks
0-day Insider
Conventional threats
Cyber threats
Air Command Centre
Next generation of threats very specific, domain
Communications links
Sensors

4. Orchard Operation – Syria, 2007
Orchard is the name of an Israeli operation (06/09/2007) targeting the destruction of a nuclear plant in Syria.
Several analyses confirm that the Israeli Air Force has used an avatar of the « Suter » cyber weapon to blind the Syrian radars and enable 7 Israeli fighters to cross the Syrian air space without being detected up to the nuclear site to be neutralised.
Suter is an Air Defence-specific Cyber Weapon developed by BAE Systems for the US Air Force combining:
One module acting as spy enabling to get the picture of the infested C2
One modifying this picture as per realistic scenarios
This operation points out a new reality:
The Cyber Space is becoming a battle field with specific yet destructive weapons;
Cyber and conventional attacks can be combined;
The Air Defence systems and networks are strategic targets and need to be secured;
Today’s cyber weapons are undetectable for classical SSI systems and require a Domain Specific Approach
The first known Cyber Attack on Air Defence Systems

5. Cyber vs. CybAIR
Thanks to its 40-year experience in Air Defense ThalesRaytheonSystems has developed an innovative domain-specific approach combining:
Traditional Cyber security means
Multi-level supervision of the System detecting any abnormal operational behavior at radars, center and national levels
General Principle of CybAIRVision®
Detection of an abnormal behavior of the system
Alarms raised, processed and correlated
Visualization of Operational consequences of cyber-attacks on the system

6. CybAIRVision®, a dedicated Air Defense Cyber solution
Networks : existing thales solutions but also local and adapted solutions
Services : upadted CybaAIR Agents, training

7. CybAIR Radbox, the CybAIR security product for radars (1/2)
Customisable CybAIR Agents
Periodic updates

8. CybAIR Radbox, the CybAIR security product for radars (2/2)
Main features
Analyzes the information provided by any surveillance radars to detect possible intrusions affecting the detection
Alerts the user upon occurrence of an abnormal behavior and their operational consequences and provide decision aids
Includes forensics and post-analysis features
Designed and prototyped HMI with the users
Communication gateway providing optimal protection against standard IT threats
Detection of abnormal radar data flow thanks to embedded cyber agents
Cut-off or by-pass
Technico-Operational Supervision
Technical Supervision:
HW / SW surveillance of the CybAIR Radbox itself;
Site / environment supervision;
Operational Supervision:
Detection of tracking anomalies;
Impact on radar coverage of any failure of the radar;
Jamming…
40-year of Air Defense experience embedded in the CybAIR Radbox

9. CybAIR Radbox proven with French Air Force
French Air Command and Control
Any surveillance radars
(civilian and military)
SBS : Surveillance and Broadcast Service
ADS-B : Automatic Dependent Surveillance - Broadcast
Agile process
Workshops on CybAIR functionalities and Human Factors

10. THANK YOU