A conceptual SOC framework for air traffic management systems

Abstract

Air Traffic Management (ATM) systems were originally developed without incorporating essential security controls such as confidentiality, integrity, and availability. Integrating external systems into ATM systems has further heightened their vulnerability to cybersecurity threats. A Security Operations Centre (SOC) can help mitigate these risks by offering threat visibility and facilitating incident response. However, the successful implementation of a SOC in the aviation sector requires a framework tailored to its specific needs, which is currently lacking in existing literature. This study addresses this gap by reviewing SOC frameworks from other industries to identify foundational elements for an ATM-specific SOC framework. Key pillars-People, Processes, Technology, Compliance, and Governance-common to SOCs across various sectors were adapted to fit the distinctive requirements of ATM. The resulting conceptual framework consists of five core components and three success factors, a ll designed to meet the unique cybersecurity demands of the aviation sector.