Hugo Teso

This brief workshop aims to provide the attendees with the resources and knowledge necessary to engage in any type of Aviation cyber security research avoiding the most common pitfalls committed by most researchers when targeting aviation systems. Attendees will receive a crash course covering the most important topics to address Aviation research in a secure, responsible and safe way. The most important Aviation regulations and standards for cyber security research will be introduced and the key parts highlighted in order to help researchers any trouble as outcome of their investigation. Going more technical, the researches attending will be given then all types of resources to engage in data links and avionics cyber security research avoiding the most common mistakes made when addressing those technologies: the lack of proper context and a comprehensive view of the entire system-of-systems that is an aircraft. Finally, the proper means to report the vulnerabilities found and the special aviation circumstances to be taken into account will be explained to help the researchers to disclose the result of their work in a responsible way with the full support and credit of the aviation industry.

It is possible to perform all types of Aviation cyber security research and to report the results while getting proper credit and recognition from both, the Aviation industry and the cyber security community, it just has to be done properly and in this workshop attendees will learn how.