DEF CON 32 - Navigating the Turbulent Skies of Aviation Cyber Regulation - M. Weigand, S. Wagner

The video outlines a critical gap in civil aviation cybersecurity: commercial aircraft lack real-time antivirus or intrusion detection systems, despite increasing connectivity and reliance on software. The speaker advocates for mandating continuous monitoring of avionics in new aircraft designs, a change enabled by the recently passed FAA reauthorization act. Key takeaways include the importance of telemetry data for learning and adaptation, the need to break down industry data silos, and the potential for hackathons to drive innovation in aviation security. A major challenge is balancing rapid threat response with aviation safety standards that require long software certification cycles.

• Current aircraft lack onboard cybersecurity tools like antivirus or intrusion detection, despite growing software dependency 3:30.
• The FAA reauthorization act now requires cyber security and continuous monitoring in new aircraft designs—a shift from previous suggestions to a formal requirement 5:44.
• Lessons from Air Force hackathons demonstrate how operational data can be used to build real-time monitoring systems and detect anomalies, offering a model for civil aviation 11:00.
• Pilots emphasize the need for crew alerts to detect malicious software or system failures, stressing that current training does not cover such threats 32:00.

Cybersecurity in aviation must evolve from reactive fixes to proactive, data-driven monitoring. While real-time alerts remain a challenge due to pilot workload, the long-term value of continuous data collection for predictive maintenance and threat detection is clear. The policy path forward requires inclusive, cross-sector collaboration to develop standards that balance safety, security, and operational efficiency.