ABOUT CYVIATION

OUR WHITE HAT RESEARCH POLICY

THE MOTIVATION

Our mission is to make flights more secure.
Our research aims to map potential vulnerabilities in airplanes and their surrounding circles while considering possible risks to passengers, aircrew, aircraft, airlines, and communications to ATC.
We are constantly working to map as many threats as possible to develop and apply means for operators, aircrew, airlines, and others to increase their cyber resiliency as much as possible.

Cyber attacks on the aviation sector are already a fact.
We urge this sector to get ready for cyber attacks targeting aircraft by knowledge sharing, cyber awareness and aircrew training, and adopting tools and technologies to identify and manage cyber incidents.

THE MEANS

Our research team comprises experts from a few domains, sharing knowledge and brainstorming on possible weaknesses and vulnerabilities, specifically on airplanes.
These experts’ backgrounds vary from cyber researchers {Red/Blue, cyber analysts, reverse engineers}, active commercial pilots {AirBus, Boeing, and private jets}, avionic engineers, and maintenance personnel.
We methodologically examine subsystems in the most common airplane types, reverse a subset of selected devices, and simulate attacks in our hybrid (mix of physical devices and digitally simulated devices) Boeing 767 lab.
In addition, we simulate cyber attacks in certified simulator software to reflect real-life scenarios for pilots and aircrews.

OUR GUIDELINES

• Do not harm
  We will do our research to do good.
  Our research is non-intrusive to ‘in-service’ aircraft.
  We shall not provide pen-test services, tools, technology, or knowledge.
• Disclosures
  For any findings, such as zero-day vulnerabilities or any high-risk threats that require the airlines, OEMs, devices manufacturers, regulators, or any party of interest, we will engage as soon as possible for coordinated disclosure through the appropriate channels.
• Knowledge Sharing
  We encourage any academic research facility, cyber research companies, aviation safety and security regulators, and others to contact us for collaboration. As in any other research field, multiple views and ideas can enrich the outcome and resiliency. 
• Data Pool
  We groom an archive of vulnerabilities and threats derived from our research and external resources.
  This pool of knowledge helps us to better understand and protect against malicious actors.
• Awareness
  We participate in consortiums, gatherings, brainstorming opportunities and meetings, and offer our knowledge and experience to airlines and aircrews worldwide since we believe cybersecurity is not yet as common in the aviation industry as safety perspective, training, and knowledge.
• Compliance
  As regulations are advancing, we focus our research on areas, and domains that can assist airlines and aircrew in following the regulated guidelines.
• Resiliency
  We take our research to practical tools and technologies.
  While we are a business aiming for success, we encourage the industry to explore any capability that can contribute to or extend their cyber protection on the aircraft.