Cybersecurity Challenges in Modern Aviation: Protecting Digital Infrastructure in Aircraft Systems

The rapid digital transformation of the aviation industry has significantly improved operational efficiency, communication, navigation, and passenger services. However, this increasing dependence on interconnected digital systems has also expanded the sector's exposure to cybersecurity threats. Modern aviation relies on aircraft avionics, satellite-based navigation, air traffic management systems, airport information infrastructure, and airline databases, all of which may become targets for cyberattacks.
This paper presents a narrative review of major cybersecurity challenges affecting contemporary civil aviation systems. The study is based on secondary sources including academic literature, regulatory documents, industry reports, and selected incident cases. The review identifies key threats such as GPS spoofing, ADS-B manipulation, malware, ransomware, data breaches, denial-of-service attacks, and insider threats, and examines critical vulnerabilities linked to legacy systems, weak authentication mechanisms, growing system interconnectivity, and fragmented cyber governance.
In addition, the paper examines the main technical and organizational responses discussed in the literature, including intrusion detection systems, continuous monitoring, encryption, zero-trust principles, employee training, and international information-sharing frameworks. The findings suggest that aviation cybersecurity must be approached not only as an information technology issue but also as a broader safety, operational, and regulatory concern requiring coordinated action among airlines, airports, manufacturers, regulators, and cybersecurity experts.

Aviation Cybersecurity; Aviation Cyber Threats

1. Ukwandu, E., et al. (2022). Cybersecurity in Aviation: A Systematic Literature Review. Information, 13(3), 146. https://doi.org/10.3390/info13030146 [Google Scholar] [Crossref]

2. Manesh, M. R., & Kaabouch, N. (2017). Analysis of vulnerabilities, attacks, countermeasures and overall risk of the Automatic Dependent Surveillance–Broadcast (ADS-B) system. International Journal of Critical Infrastructure Protection, 19, 16–31. https://doi.org/10.1016/j.ijcip.2017.08.002 [Google Scholar] [Crossref]

3. Khan, S., et al. (2021). GPS Spoofing Detection Techniques: A Review. IEEE Sensors Journal, 21(24), 27327–27340. https://doi.org/10.1109/JSEN.2021.3124841 [Google Scholar] [Crossref]

4. International Civil Aviation Organization (ICAO). (2022). Aviation Cybersecurity Strategy. ICAO Publications. https://www.icao.int [Google Scholar] [Crossref]

5. International Air Transport Association (IATA). (2021). Cyber Security Guidance Material for Civil Aviation. IATA. https://www.iata.org [Google Scholar] [Crossref]

6. RTCA. (2014). DO-326A: Airworthiness Security Process Specification. RTCA Inc. [Google Scholar] [Crossref]

7. EUROCAE. (2014). ED-202A: Airworthiness Security Process Specification. EUROCAE. [Google Scholar] [Crossref]

8. AIAA. (2025). Unreliable GPS and GNSS Disruptions in Aviation: Emerging Risks and Resilient Navigation Solutions. American Institute of Aeronautics and Astronautics. [Google Scholar] [Crossref]

• “Next-Generation Cybersecurity Through Blockchain and AI Synergy: A Paradigm Shift in Intelligent Threat Mitigation and Decentralised Security”
• Forensic Payroll Analytics for IPPIS: A Hybrid Anomaly-Detection Framework to Expose Payroll Fraud, Improve Data Governance, and Protect Employee Rights
• Factors Influencing Data Protection on Global Trade
• Development Of Artificial Intelligence-Based Model for Forensic Analysis of Cross-Platform Deepfakes
• Cyber Threats and Nigeria’s National Security: Assessing the Role of Regional Cooperation in West Africa