Digital trust
for aviation
What are the top aviation cybersecurity risks?
The major risks to the aviation industry are very broad and stem from the complexity of managing the supply chain, outdated delivery methods, and the criticality of fault tolerance in safety-centric airborne systems. While some of the risks that apply to ground transportation systems are also applicable to avionics, the significant differences are due to the sheer complexity of electronic platforms onboard and implications related to insurance. The willingness and ability to invest and innovate with new technologies is deeply lacking.
What goes into a strong aviation process automation strategy?
A strong aviation automation strategy requires the following actions:
- Securing the onboard messaging systems
- Securing the digital secrets (keys) that offer such security countermeasures at a nation-state level of alertness
- Rotating the digital secrets at scale and as a remote maintenance activity—as a mitigation strategy for vulnerability countermeasures
- Using X.509 digital certificates for key lifecycle management from a secure facility to meet a high level of assurance
- Tamper-resistant content delivery through the supply chain for traceability
- Historic audit trail for trackability of change ledgers
What aviation systems are most vulnerable to cyberattack?
Cyber threats have moved from cyber attacks to cyber warfare. Aircraft flight control system, monitoring, commercial and military communication, navigation, weather, collision-avoidance systems, radar, sonar, and major weapons systems may be vulnerable due to a lack of strong embedded cryptographic controls, including: multi-factor authentication, secure boot, secure update, and secure, encrypted communications.
What cybersecurity standards apply to the aviation industry?
Avionics manufacturers need to more easily meet DO-178 cybersecurity compliance requirements and ensure high reliability and safety. Many avionics controllers, FADECs, flight navigation and storage systems in aircraft are vulnerable to cyber attack.
How Does DigiCert + Mocana Secure the Aviation Industry?
Used by more than 200 OEMs to protect more than 100 million devices.
Mocana’s end-to-end cybersecurity system is a FIPS 140-3 validated embedded cybersecurity software solution that ensures device trustworthiness and secure communications by giving avionics, aerospace and aircraft manufacturers an easy way to harden electronic control units, FADECs and controllers with multi-factor authentication and trust chaining, as well as secure boot to validate the firmware, OS and applications.
Learn more about DigiCert + Mocana solutions
TrustCenter™
Control center for managing devices in the field
TrustEdge™
Plug-and-play on-device clients that secure operations
TrustCore™
SDK that simplifies business application development
"Mocana has been helping industrial manufacturing and automation companies to secure industrial control systems, SCADA networks, avionics subsystems and IoT devices since 2002. Mocana’s IoT Security Platform is solving operational technology and IoT security challenges by tackling one of the toughest industry problems—making industrial controllers and IoT endpoints more secure and trustworthy."
Michael Dolbec
Managing Director, GE Ventures
"The tools provided by Mocana are rooted in its long history of equipping engineers with the ability to harden devices that perform mission-critical operations. Manufacturers can now be equipped to leverage the power of the embedded chips in their products to support the security and privacy requirements of these emerging data-driven IoT ecosystems."
Rob Westervelt
Research Manager, IDC
"Industrial IoT cybersecurity is both difficult and essential. Xilinx and Mocana share a vision to remove barriers to IIoT adoption by reducing risk, cost and speeding time to market for any customer that wants to innovate and move their business forward."
Christoph Fritsch
Director, Industrial IoT, Scientific and Medical, Xilinx
"Ensuring the safety, security, and reliability of control systems is critical. Mocana’s IoT Trust Platform can simplify the implementation of security across modern control and safety systems."
Joe Weiss
Managing Partner of Applied Control Solutions, LLC