Dealing with cyber-turbulence
It is customary to say that the aeroplane is the safest form of transport in the world. To ensure that the same adage applies to cybersecurity, Stormshield supports the aviation industry with trusted solutions that satisfy its protection challenges.
Preventing cyber attacks in the aviation industry
Aviation is a critical activity by nature, with high risks in the event of failure. If a production line or navigation systems are disrupted, or a third party takes remote control of drones or aircraft, the consequences can be disastrous. At both manufacturing and operational levels, the sector is also exposed to the risk of theft or alteration of data relating to passengers, or industrial or even military secrets. Given the possible consequences at human, economic and governmental level, the prevention of cyberattacks against network components – and also cyberattacks that target workstations – is a clear a priority.
With this in mind, our Stormshield Network Security (SNS) range of firewalls makes it possible to segment networks. It also prevents both known and unknown attacks by means of deep contextual analysis of industrial protocols and allows for granular control of authorised messages as well as control of operational values through the implementation of custom patterns. The Breach Fighter option on our Stormshield Network Security firewalls (SNS) and our Stormshield Endpoint Security (SES) EDR solution are designed to block advanced attacks on endpoints (including ransomware).
With the Stormshield XDR offering, effectively combine Stormshield solutions with each other. Be notified of incidents based on analyses of your endpoints, networks, web files and emails before managing the response with your various security products, driven by centralised incident management. This is the ideal combination for alerting you in real time and managing a rapid, long-term response on both the network and endpoints.
Keeping all equipment operational
Whether the aim is to keep a production line moving or to provide public Wi-Fi at the airport, there are an abundance of highly connected environments in the wider aerospace sector. It is therefore essential to ensure the best performance of these networks by implementing an available and resilient infrastructure, capable of withstanding a breakdown in particular.
Our Stormshield Network Security solutions (SNS) deliver high availability thanks to an intrusion prevention system (IPS) optimised for low latency – and to their bypass functionality, which ensures operational reliability.
Protecting highly sensitive confidential information
Industrial secrets, navigational data andeven defence instructions – a large amount of confidential information transits between aircraft, airports and industrial sites. In order to prevent its alteration or interception, it is essential to establish trusted communication channels.
For example, our Stormshield Network Security firewall range's IPSec site-to-site VPN tunnel authenticates the data's origin and ensures its confidentiality and integrity. The Stormshield Network Security range (SNS) also includes a physical secure storage module (TPM) and offers protection for Restricted data and networks.
A highly regulated sector
As with any critical activity, aircraft manufacturers and operators must use products that are certified and qualified to strict standards. At national French level, many players in the sector are thus considered as “operators of vital importance” (OIVs) and must therefore comply with the requirements of France’s Military Planning Law (LPM). This list can be extended to the European level, with operators of essential services (OESs) being required to follow the recommendations of the Network and Information Security (NIS & NIS2) directive. Finally, some classified information requires the use of NATO and EU Restricted Dissemination-certified solutions.
To satisfy these requirements in terms of confidentiality and trust, Stormshield solutions are certified and qualified to the highest European level. Using products with trusted certifications and credentials offers the best guarantee of effective cyber protection.
Managing mobility in changing situations
Various means of connection
In addition to its mobile fleets, the aeronautical industry has a significant geographical distribution of the equipment to be protected, with factories spread around the world and airports with multiple critical points (signage, security gates, baggage sorting, etc.). These sizeable infrastructures require a large team of administrators to easily deploy and manage security equipment and VPN keys. To cope with temporary disconnections or changes in network links, our Stormshield Network Security firewalls (SNS) allow multiple WAN accesses to be managed and links to be changed according to their availability (SD-WAN). Also, in the case of of temporary equipment downtime, our Stormshield Management Center (SMC) centralised management solution offers automatic deferred configuration deployment.
To help them with deployment, our Stormshield Management Center (SMC) solution offers the ability to pre-configure the Stormshield Network Security firewalls (SNS) by saving settings on a USB stick. Thanks to this staging process, the firewalls can connect to their Stormshield Management Center (SMC) central management server as soon as they are activated. Stormshield Network Security (SNS) solutions also provide an API that can be controlled by various tools and has orchestration capability (Ansible, Python). More specifically, our Stormshield Management Center (SMC) solution also includes VPN management (SD-WAN), filtering and the simultaneous administration of several firewalls.
A physical environment with significant constraints
Temperature, humidity, pressure: aeroplanes, helicopters and aircraft factories are not like other spaces. In contrast to traditional IT environments, it is necessary to install the security devices as close as possible to the equipment to be protected, without a computer rack and in a physically constrained context.
For this reason, we have designed industrial firewalls with reinforced enclosures – the SNi20 and SNi40, which are easy to install and designed to adapt to your constraints. Designed to be embedded in vehicles operating in critical environments for extreme aeronautical, space and military missions, the SNxr1200 is a next-generation firewall made for tough environments, providing a much-needed higher level of security in communications. Its secure storage of secrets, IPS analysis of VPN flows and compliance with the Restricted Distribution (RD) mode ensure maximum protection for your most sensitive communications.
Securing remote access
All these infrastructures imply more or less urgent intervention needs. However, it is not always possible to provide immediate physical access to IT teams, or to the many contractors involved, involving varying levels of cyber awareness and trust. To enable them to connect remotely and securely, our Stormshield Network Security solutions (SNS) feature SSL or IPSec mobile VPNs and user authentication on network flows. In addition, our Stormshield Endpoint Security solution (SES) offers context-sensitive workstation protection for mobile technicians.
Network protection, terminal protection, data protection: find out how to combine cyber security, sovereignty and cyber protection in your aeronautical business. To request a demonstration, discuss Stormshield customer testimonials, make an appointment or plan a POC, contact the Stormshield sales and pre-sales teams.