Are pilots prepared for a cyber-attack? A human factors approach to the experimental evaluation of pilots' behavior

Abstract

A B S T R A C TThe increasing prevalence of technology in modern airliners brings not just advantages, but also the potential for cyber threats. Fortunately, there have been no significant attacks on civil aircraft to date, which allows the handling of these emerging threats to be approached proactively. Although an ample body of research into technical defense strategies exists, current research neglects to take the human operator into account. In this study, we present an exploratory experiment focusing on pilots confronted with a cyber-attack. Results show that the occurrence of an attack affects all dependent variables: pilots' workload, trust, eye-movements, and behavior. Pilots experiencing an attack report heavier workload and weakened trust in the system than pilots whose aircraft is not under attack. Further, pilots who experienced an attack monitored basic flying instruments less and their performance deteriorated. A warning about a potential attack seems to moderate several of those effects. Our analysis prompts us to recommend incorporating cyber-awareness into pilots' recurrent training; we also argue that one has to consider all affected personnel when designing such training. Future research should target the development of appropriate procedures and training techniques to prepare pilots to correctly identify and respond to cyber-attacks.

Application of Eye Tracking Technology in Aviation, Maritime, and Construction Industries: A Systematic Review

“…For example, saccade rate decreases with fatigue and difficult tasks [ 27 ]. Saccadic length has also been used to measure mental workload [ 33 ] and has been shown to increase with increased mental workload (MWL) [ 73 ], with very short saccades related to the presence of conflict [ 56 ]. In a maritime setting, the number of saccades can reveal improvements in the scanning technique of a navigator [ 111 ].…”

eMaintenance in railways: Issues and challenges in cybersecurity

“…56 In addition to this, the single greatest challenge is to educate the current and future workforce so they can be prepared to meet the problem approperiately. 57,58 In the transport sector, cybersecurity challenges include weaker European laws on cybersecurity for transport, low cybersecurity awareness, and small cybersecurity budgets. 46 Railway maintenance based on ICT generally depends on Internet and this makes it vulnerable to cybersecurity threats.…”

A View from the Cockpit: Exploring Pilot Reactions to Attacks on Avionic Systems

“…Some work addressing simulation for cyber security has begun to emerge. In [23] the authors conduct a human factors focused study to assess how pilots respond to an attack on ground-based navigation systems. They find that pilots under attack lose some monitoring capacity, and that warnings can help mitigate this.…”