A U.S. transportation security agency has said it plans to issue new cybersecurity requirements for some key aviation systems after several U.S. airport websites recently were hit with apparently coordinated denial-of-service attacks.
The Transportation Security Administration (TSA) said the cyberattacks that were allegedly organised by pro-Russian hackersdid not disrupt airport operations or access to information.
TSA noted it previouslyupdated its aviation security programs to require airport and airline operators to designate a cybersecurity coordinator and report cybersecurity incidents, conduct a cybersecurity assessment, and develop remediation measures and incident response plans. TSA added it plans tosoon issue additional performance-based cybersecurity requirements for critical aviation systems.
The Federal Aviation Administration (FAA) as a condition of airport terminal grants said in a notice last month to airports they must demonstrate effortsto consider and address physical and cyber security risks relevant to the transportation mode and type and scale of the project.
The FAA addedprojects that have not appropriately considered and addressed physical and cyber security and resilience A?? will be required to do so before receiving funds for construction. The Government Accountability Office in a 2020 report said the FAA should fully implement key practices to address cybersecurity risks.
GAO notedmodern aeroplanes are equipped with networks and systems that share data with the pilots, passengers, maintenance crews, other aircraft, and air-traffic controllers and if not properly protectedcould be at risk of a variety of potential cyberattacks. GAO said in 2020 there had not been any reports of successful cyberattacks on an aeroplanes avionics systems.
