Voting
?What about new design for our website
- Excellent
- Very Good
- Good
Voting Number 1647
- Saab delivers fourth GlobalEye to the UAE
- Birds of Goodness executes 37th humanitarian aid airdrop in north Gaza
- Birds of Goodness executes 36th humanitarian aid airdrop in north Gaza
- Birds of Goodness executes 35th humanitarian aid airdrop in north Gaza
- Led by the Commander of Joint Operations .. A delegation from the Ministry of Defense, has initiated several-day visit to the People's Republic of China
- Birds of Goodness executes 34th humanitarian aid airdrop in north Gaza
- Birds of Goodness' executes 33rd humanitarian aid airdrop in north Gaza
- Birds of Goodness delivers over 2,000 tonnes of aid via 32 airdrops since humanitarian operation began
- On the 2nd day of Eid al-Fitr... Birds of Goodness Executes 31st Humanitarian Airdrop and Eid Clothing in North Gaza
- On the first day of Eid Al-Fitr,UAE and Jordan conduct 14th joint food aid airdrop in northern Gaza
- UAE and Jordan conduct 13th joint food aid airdrop in northern Gaza
- 'Birds of Goodness' Executes 29th Humanitarian Aid Airdrop and Eid Clothing in North Gaza.
- UAE and Jordan conduct 12th joint food aid airdrop in northern Gaza
- 'Birds of Goodness' Executes 28th Humanitarian Aid Airdrop and Eid Clothing in North Gaza
- UAE and Jordan conduct 11th joint food aid airdrop in northern Gaza
- ‘Birds of Goodness’ delivers over 1,500 tonnes of aid via 27 airdrops since humanitarian operation began
- 'Birds of Goodness' executes 26th humanitarian aid airdrop in north Gaza
- 'Birds of Goodness' executes 25th humanitarian aid airdrop in north Gaza
- UAE and Jordan conduct 10th joint food aid airdrop in northern Gaza
- 'Birds of Goodness' executes 24th humanitarian aid airdrop in north Gaza
2022-06-01
Constant Innovation Holds the Key on Cyber Security: IAI’s Esti Peshin
By: Sakha Pramod
With digital technology gripping every aspect of life, cyber security poses a huge challenge. Israel Aerospace Industries (IAI) has been developing state-of-the-art solutions to nations and large enterprises to protect themselves from cyber-attacks.
On the sidelines of the Global Aerospace Summit 2022 in Abu Dhabi, Esti Peshin, VP, General Manager, Cyber Division at IAI – ELTA, spoke exclusively with Nation Shield on a broad range of topics including cyber security challenges facing the aviation sector, digital technology vulnerabilities and cyber resilience.
Could you tell us a few words about IAI’s debut participation at the Global Aerospace Summit?
Yes, it was our first participation in the Summit in Abu Dhabi. IAI is Israel’s largest government-owned defense company, focusing on air, land, naval, space, cyber, and other solutions, that has been around for so many years, founded in 1953. We have been participating in global events around the world every year and also had opportunities to take part in several events in Dubai. It was great to be in the Abu Dhabi event for the first time. It gave a feeling of second home as everyone turned out to be nice and cooperation between our two countries is flourishing. It’s extremely heart-warming.
You have overseen the export of IAI’s cybersecurity products all over the world. What do you think are the biggest cyber security challenges facing the aerospace sector?
This is actually a wide question and I will try to answer by first looking at some of the cyber challenges specifically about aviation.
Number 1, we are seeing more state and superpower involvement in cyber. Countries are using cyber space as a means to exert power over other countries. We are seeing this in conflicts around the world.
Number 2, we are witnessing more and more cyber-attacks against critical infrastructure. They are elements that we depend upon for our daily lives, like transportation, power and water systems. Last year, there was an attack on a pipeline in the U.S. that made people stand in gas stations for hours because there was no gas. As severe as that.
We are seeing wide industrial espionage, meaning any information available online is in effect insecure. We are noticing proliferation of malware, which is easily available and some people utilise that for cyber-attacks.
Finally, we are witnessing CNI (Computer Network Influence). These attacks target our minds. For example, by trying to influence elections. These are very sophisticated attacks
because it is very difficult to defend against them. Where do we draw a line between a legitimate campaign and a campaign that aims at changing your minds unintentionally? What is the extent of fake news in this?
because it is very difficult to defend against them. Where do we draw a line between a legitimate campaign and a campaign that aims at changing your minds unintentionally? What is the extent of fake news in this?
We are also noticing that attackers are targeting software or computer providers, and through this, targeting all of us computer users.
Finally, a very important point. We are seeing the use of the media…of the press, of the social network as a means to augment cyber-attacks. We can speak about a very minor cyber-attack on the website of an organisation which does not have a severe impact. It does not impact organisational ability of the group, they don’t steal information, but they disparage the website. The media comes in and makes it all big news. A minor attack become a major cyber-attack because of amplification by the press and social media.
These are major generic challenges of cyber-attacks.
In aviation, it becomes even more pronounced. Most of us have fear of flying. When we are up there, we are concerned with anything. Even a little noise can rattle.
There is an example of cyber-attack in Israel recently. People were boarding and a prankster sent pictures of crashed planes to everyone via AirDrop. The plane had to return to the gate. They had to examine the entire plane for potential bomb. It caused the airline significant financial loss. Due to the delay, many passengers missed connections. That was a minor cyber-attack targeting passengers who kept AirDrop open. Pictures were shown in every news media and it was even spoken about in radio and social media.
So in aviation everything is augmented. We cannot afford mistakes. If there is a cyber-attack in a plane, even if we did not prevent, it is extremely important that we detect it. If we do not know about the cyber-attack, it could lead to a catastrophic event.
In aviation, it is not about risk management, it is about detection 100 per cent, no false negatives.
IAI has four groups. Aviation Group, ELTA Systems, Military Aircraft and Missiles & Space Systems.
IAI is an aviation powerhouse and a cyber powerhouse. We decided to combine the knowhow and offer cyber security solutions.
We created CyViation. This subsidiary is focussing on cyber solutions for commercial aviation ecosystem. Ours is the first company focussing on this.
What major initiatives are needed for the aerospace industry to fortify cyber resilience?
Let me explain the difference between cyber security and cyber resilience. Cyber security is basically putting in protection means to prevent the next cyber-attack. Resilience means knowing cyber-attack will happen and focussing on how quickly to recover from it. That is the difference.
In aviation, the focus is on cyber resilience. We focus mainly on three areas. 1. Risk assessment: It is our ability to let the airline know the level of cyber risk in their fleets, for the entire fleet. 2. Training: The human is the weakest link. We ensure everyone who is part of the commercial aviation ecosystem is cyber aware and does not do things she/he does not need to do. For example, a technician better not connect the mobile phone to a USB connection because it can harm a plane. Cyber awareness is extremely important. Pilots need to be more cyber aware as planes today are more digital.
Finally, we are developing a product solution that is onboard a plane and alerts pilots of potential cyber-attacks, something that may create a situation, or that he cannot trust an instrument. Our solution is focussed on alerting pilots. Not to miss any potential cyber-attack–that is what we are focussing on today in Cyviation.
Hackers are a global threat. How do you think the vulnerabilities of digital technologies could be overcome?
Today, almost all are on social media. They are communicating with others unknown. One of the main challenges is the fact there is no trust in network. Everyone can impersonate anyone. But this can be prevented with better global regulation. What the world needs to do is to make sure that for each packet of information, we attach some information about the originator. The world is discussing stringent regulation on the Internet. In Israel we use the term ‘clean water model.’ When we open a tap, we get clean water. The question is when you open Internet, can you expect clean data without malware.
Today many countries are talking about clean water model. The Internet service providers should monitor traffic, not content, not to intrude privacy, but remove malware from traffic. In a few years, may be the nature of Internet would change. Then the world will be cyber secure.
Today many countries are talking about clean water model. The Internet service providers should monitor traffic, not content, not to intrude privacy, but remove malware from traffic. In a few years, may be the nature of Internet would change. Then the world will be cyber secure.
Meanwhile, since this is not the case now, IAI is creating solutions developing state-of-the-art solutions to nations and large enterprises to protect themselves from cyber-attacks.
How effective is the TAME Range cyber training platform which is designed to strengthen the cybersecurity proficiency level of large organisations? In cyber training, first you have to receive knowledge. A trainer explains in the classroom about network, malware and how to protect the organisation, procedures etc. Once the student has crossed this stage, he does know how to protect anything. It’s all only theory. Then begins hands-on practice. For this we simulate a network environment.
We put malware on network environment and tell students to protect. She/he gets the same alerts in simulated environment. The student learns hands on how to handle cyber events that are elusive. One needs hands-on practice to become a cyber expert.
We put malware on network environment and tell students to protect. She/he gets the same alerts in simulated environment. The student learns hands on how to handle cyber events that are elusive. One needs hands-on practice to become a cyber expert.
TAME Range allows for teamwork. We have various experts to work together on a scenario. TAME has very sophisticated, high-end scenarios to ensure students learn cyber security in highest possible level.
TAME also has labs. Labs are for individual learning. In a simulated environment, a student needs to find solution. The student searches and has to answer a few questions. They elevate step by step and this method is considered one of the best.
Do you think the world community has successfully overcome cybersecurity concerns caused by COVID-19 era?
Well, the broad answer is no. We need to understand that cyber security is an on-going effort. Bad guys keep constantly developing more and more cyber-attacks. Good guys need to constantly keep developing solutions. COVID created a situation where more people turned online. People are using the service more than in the past.
If there is an email mentioning some bank account problem and asks for password in order to resolve, some may yield. There has been a rise of 300 per cent in phishing attempts during COVID. There is no single solution to solve all cyber security concerns.
The UAE is known as a land of innovation and enterprise. Would you like to share your experience as VP, General Manager, Cyber Division at IAI – ELTA?
Cyber is constantly evolving. One of the pillars is constant innovation. Example, the area called smart transportation. Autonomous cars are starting to drive on roads. In Israel, we are on stage 5 of autonomous cars. Driverless cars are connected through networks. Attacks are also increasing. It is critical infrastructure. If the bad guys win, it can cause havoc. We constantly need to innovate and outwit adversaries.
The UAE is fostering innovation like Israel. Just now at the summit, I saw students from various universities showcasing their works. It’s simply amazing!. It shows how much the UAE is investing in fostering innovation. Israel is doing the same thing. Together our two countries can provide better solutions for a safer world in cyber and other areas.
Visitors Comments
Related Topics
.
No Comments