Cybersecurity Challenges for NATO Military Air Transport Operations

doi: 10.32567/hm.2024.4.12

Abstract

The aviation industry's increasing reliance on technology has led to concerns about state-sponsored cyberattacks, which pose cybersecurity challenges for both military and civil aviation. This paper analyses NATO's military air cargo capabilities. It examines relevant civil aviation cyberattacks as case studies in light of potential cyber threats to NATO military aviation. Summarising these findings, the authors conclude their implications. They then use an analytical-evaluative method to identify categories of cyberspace assets that are key to protecting aviation IT infrastructure and highlight the differences and overlaps between IT-OT and Platforms in a military context. In addition, a comprehensive presentation of ways to effectively defend civil and NATO military aviation systems against cyber-attacks will be presented, which is essential to ensure a secure aviation system and address evolving cyber threats.

Keywords:

NATO military air cargo capabilities civil aviation cyberattacks Boeing Airbus cybersecurity challenges IT-OT-Platform

How to Cite

Paráda, I., & Tóth, A. (2025). Cybersecurity Challenges for NATO Military Air Transport Operations. Military Engineer, 19(4), 167–182. https://doi.org/10.32567/hm.2024.4.12

References

Anomali Threat Research (2019): Weekly Threat Briefing: Spam Campaign Uses Recent Boeing 737 Max Crashes to Push Malware. Anomali, 2019. március 19. Online: Weekly Threat Briefing: Spam Campaign Uses Recent Boeing 737 Max Crashes to Push Malware

ANTONIUK, Daryna (2023): Airbus Investigates Data Leak Allegedly Involving Thousands of Suppliers. The Record, 2023. szeptember 12. Online: https://therecord.media/airbus-data-leak-suppliers-breachedforums

BHARGAVA, Amit Kumar (2024): Cybersecurity in Aerospace: A Military Perspective. Blue Yonder, 1(1). Online: https://journals.capsindia.org/index.php/byj/article/view/48

BRITTON, Niki (2022): ‘Cyber Incident’ Affected Flight Planning. Boeing Subsidiary Jeppesen Apparently Targeted. AOPA, 2022. november 9. Online: www.aopa.org/news-and-media/all-news/2022/november/09/cyber-incident-affected-flight-planning

BRYANT, William D. (2015): Resiliency in Future Cyber Combat. Strategic Studies Quarterly, Winter, 87–107. Online: https://www.airuniversity.af.edu/Portals/10/SSQ/documents/Volume-09_Issue-4/Bryant.pdf

BRYANT, William D. (2016): Mission Assurance through Integrated Cyber Defense. Air & Space Power Journal, 30(4), 5–17. Online: https://www.airuniversity.af.edu/Portals/10/ASPJ_Spanish/Journals/Volume-29_Issue-3/2017_3_04_bryant_s_eng.pdf

DUVELLEROY, Matthieu (2019): Airbus Statement on Cyber Incident. Airbus, 2019. január 30. Online: https://www.airbus.com/en/newsroom/press-releases/2019-01-airbus-statement-on-cyber-incident

GATES, Dominic (2018): Boeing Hit by WannaCry Virus, But Says Sttack Caused Little Damage. The Seattle Times, 2018. március 28. Online: https://www.seattletimes.com/business/boeing-aerospace/boeing-hit-by-wannacry-virus-fears-it-could-cripple-some-jet-production/

HOOD, James D. (2009): NATO Strategic Airlift: Capability or Continued US Reliance? Maxwell Air Force Base, Air Command and Staff College Air University. Online: https://apps.dtic.mil/sti/tr/pdf/ADA539589.pdf

HUNORFI, Péter – PARÁDA István – FARKAS Tibor (2024). Kiberbiztonsági kihívások a légi közlekedésben. Hadmérnök, 19(1), 101–120. Online: https://doi.org/10.32567/hm.2024.1.6

ILASCU, Ionut (2023): LockBit Ransomware Leaks Gigabytes of Boeing Data. Bleeping Computer, 2023. november 12. Online: www.bleepingcomputer.com/news/security/lockbit-ransomware-leaks-gigabytes-of-boeing-data/

ILLING, Dawn (2023): The Cyber Threat Landscape Of The Aviation Sector. Skyradar, 2023. március 28. Online: https://www.skyradar.com/blog/the-cyber-threat-landscape-of-the-aviation-sector

KALIVODA, Michal – DEFAZIO, Alexander (2017): Defending NATO’s Aviation Capabilities from Cyber Attack. JAPCC, 2017. január, Online: https://www.japcc.org/articles/defending-natos-aviation-capabilities-from-cyber-attack/

KLINT, Matthew (2022): Breaking: Boeing’s Jeppesen Subsidiary Hit with Potential Ransomware Attack. Live and Let’s Fly, 2022. november 3. Online: https://liveandletsfly.com/boeing-jeppesen-ransomware-attack/

MEGYERI Lajos – FARKAS Tibor (2017): Kockázatkezelés, tudomány vagy kuruzslás? Hadmérnök, 12(3), 198–209. Online: https://real.mtak.hu/64731/1/1.Farkas_Hadm%C3%A9rn%C3%B6k2017.pdf

NATO (2022): Multi Role Tanker Transport Capability (MRTT-C) Factsheet. Online: https://www.nato.int/nato_static_fl2014/assets/pdf/2022/9/pdf/2209-factsheet-mrtt.pdf

NATO (2023): Vilnius Summit Communiqué. Online: https://www.nato.int/24cps/ge/natohq/official_texts_217320.htm

NATO (2024a): Strategic Airlift. 2024. március 7. Online: https://www.nato.int/cps/en/natohq/topics_50107.htm

NATO (2024b): Washington Summit Declaration. 2024. július 10. Online: https://www.nato.int/cps/cn/natohq/official_texts_227678.htm

NYITRAI Mihály (2016): Eredmények a szövetséges stratégiai légi és tengeri szállítóképesség erősítése terén. Hadtudományi Szemle, 9(2), 73–94. Online: https://tudasportal.uni-nke.hu/xmlui/handle/20.500.12944/14008

OPPELAAR, Isaiah (2023): NATO’s Multinational MRTT Unit An Update and Case Study for Future Defence Cooperation. The Journal of the JAPCC, 35, 25–31. Online: https://www.japcc.org/articles/natos-multinational-mrtt-unit/

RAJ, Aaron (2023): Boeing Hack: Should the Airline Manufacturer Negotiate with Cybercriminals? Tech Wire Asia, 2023. november 6. Online: https://techwireasia.com/2023/11/boeing-hack-should-the-airline-manufacturer-negotiate-with-cybercriminals

ROBIN, Miriam (2023): Cyber Risk Disclosures in Crosshairs as SEC Charges SolarWinds with Fraud. Intelligize, 2023. november 16. Online: https://www.intelligize.com/cyber-risk-disclosures-in-crosshairs-as-sec-charges-solarwinds-with-fraud/

SIPOSNÉ KECSKEMÉTHY Klára (2019): A NATO biztonsági beruházási programja Magyarországon. Honvédségi Szemle, 147(2), 27–40. Online: https://real.mtak.hu/125189/

SZARVAS László (2008): Stratégiai Légi Szállítási képesség – egy új többnemzeti megoldás. Nemzet és Biztonság, 1, 60–76. Online: https://www.nemzetesbiztonsag.hu/cikkek/szarvas_laszlo-strategiai_legi_szallitasi_kepesseg___egy_uj_tobbnemzeti_megoldas.pdf

SZÁSZI Gábor (2015): A Magyar Honvédség légiszállító képességének változása napjainkig, a fejlesztés jövőbeni lehetpségei. Economica, 8(4/2), 216–227. Online: https://doi.org/10.47282/ECONOMICA/2015/8/4/2/4607

THEOCHARIDOU, Marianthi – STANIC, Zoran – DROUGKAS, Athanasios – DE SOUSA FIGUEIREDO, Ricardo – TSEKMEZOGLOU, Eleni – NAYDENOV, Rossen – LELLA, Ifigeneia – MALATRAS, Apostolos szerk. (2022): ENISA Threat Landscape: Transport Sector. ENISA. Online: https://doi.org/10.2824/553997

THURBER, Matt (2022): Jeppesen Planning, Chart Products Suffer ‘Technical Issues’. AIN Online, 2022. november 4. Online: www.ainonline.com/aviation-news/business-aviation/2022-11-04/jeppesen-planning-chart-products-suffer-technical-issues

UKWANDU, Elochukwu – BEN-FARAH, Mohamed Amine – HINDY, Hanan – BURES, Miroslav – ATKINSON, Robert– TACHTATZIS, Christos – ANDONOVIC, Ivan– BELLEKENS, Xavier (2022): Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends. Information, 13(3), 3–5. Online: https://doi.org/10.3390/info13030146