The Thales group. How a global industry player addresses the Cybersecurity challenges of Air Transport

Transcription

1 The Thales group How a global industry player addresses the Cybersecurity challenges of Air Transport NORMAN MATHINYA- SALES DIRECTOR SOUTH AFRICA IFATSEA ATNS CONFERENCE: 23 AUGUST 2017 JOHANNESBURG MONTE CASINO OPEN

2 Profile This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in Collective intelligence for a safer world Whenever critical decisions need to be made, Thales has a role to play. In all its markets (aerospace, space, ground transportation, defence and security ) Thales solutions help customers to make the right decisions at the right time and act accordingly. World-class technology, the combined expertise of 64,000 employees and operations in 56 countries have made Thales a key player in keeping the public safe and secure, guarding vital infrastructure and protecting the national security interests of countries around the globe. Employees 64,000 A balanced revenue structure Defence 50% Revenues in billion euros Global presence 56 countries Shareholders (at 31 December 2014) Self-funded R&D* million euros Civil 50% 26,4% French State Float 48,3% of which employeeowned 2% * Does not include therefore R&D undertaken with external funding. 25,3% Dassault Aviation 2 OPEN

3 Mission statement WHEREVER SAFETY AND SECURITY ARE CRITICAL, THALES DELIVERS. TOGETHER, WE INNOVATE WITH OUR CUSTOMERS TO BUILD SMARTER SOLUTIONS. EVERYWHERE. 3 OPEN This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in

4 Global leadership N 1 worldwide Payloads for telecom satellites Air Traffic Management Sonars Security for interbank transactions N 2 worldwide Rail signalling systems In-flight entertainment and connectivity Military tactical radiocommunications N 3 worldwide Commercial avionics Civil satellites Military surface radars 4 OPEN This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in

5 Thales South Africa Systems (Pty) Ltd ABOUT OUR ORGANISATION OPEN

6 Business with Thales South Africa Systems This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in Benefits Valuable Technologies Localized development Contribution towards the fight against unemployment Development of the country s intellectual and skills capital Contribution to the GDP growth and tax recovery Foreign currency earnings from export sales Reduction in foreign currency earnings for defence equipment Full support to all elements of BEE transformation Significant annual contributions to social projects within underprivileged communities 6 OPEN

7 This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in TSAS: Our local competencies 7 Bids & Project 20% Engineering 18% Production_Services 39% OPEN Support 23%

8 TSAS market activities DUAL MARKETS Military & Civil AEROSPACE DEFENCE SECURITY SPACE TRUSTED PARTNER FOR A SAFER WORLD 8 OPEN GROUND TRANSPORTATION This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in

9 Security Develop integrated solutions, resilient networks and value added services to protect citizens, sensitive data and critical infrastructure Surveillance & ICT Systems for the new King Shaka International Airport at La Mercy, Durban Electronic Driving License Production System 9 OPEN This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in

10 Cyber security in South Africa This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in Top 10 most vulnerable country to cyber attacks - Rapid7 /Accenture 2017 Enterprises are facing more destructive attacks who are inventive- TechRepublic/Fireeye 2017 Estimated loss of R50Bn per year ITWEB % businesses plan to invest in unified threat management appliances Bbrief 2017 Average loss per cyber attack for an SME: Damage to enterprise: R2.8M; Brand damage: R115K - PWC IT security solutions spent to grow from R5.8Bn in 2015 to R8.2Bn in 2020 ITWEB 2017 Data breaches 17% increase with 60% of attacks touching governmental entities ITWEB2017 Digital transformation The total transformation of business and organisational activities, processes etc. leveraging technology Tight regulative framework setting-up : e.g. National CybersecurityPolicy bill (approved by cabinet end of 2016): - Gives SA a coordinated approach to cyber security - Establish body to set up performance indicators, monitoring and evaluation mechanisms - Companies are liable to damages caused to third parties if cyber protection not enforced Being hacked means heavycosts: recoverycosts, operationaland reputationaldamage, brand damage 10 OPEN

11 Air Transport Cyber-attack surface is growing More interconnected systems means more reachable targets Increasing Connectivity and use of non-protected by design A/G Data Link Communication More access points with networking and System Wide Information Management (SWIM) for CDM Migration for interoperability to standard IP-based network with publicly available vulnerabilities Less isolated architectures with e-enabled aircrafts, clouded services, virtual center and remote processing, Total Airport Management 11 Commercial-in-Confidence

12 Cyber-attacks are multiplying in many sectors Destructive attacks TV5 Monde, Ukraine power grid attack Denial of service attacks Boryspil Airport (Kiev Ukraine), Indonesian targets including airlines and airports (to protest against Air pollution), Hanoi Ho Chi Minh airports Information theft Operation Cleaver (Pakistan, Qatar, Korean airlines, etc.), US Office of Personnel Management Ransomware Hospitals, Civil Aviation Authority Commercial-in-Confidence

13 Potential Aviation Threats Actors Persons of Interest Offensive operations Nation States Criminals Financial Gain Fraud Ransomware > Destruction < Disruption Terrorism Hacktivists Activism Kudos Geopolitics 13 Commercial-in-Confidence

14 Growing cyber-risks are rising questions to many Air Navigation Service Providers (ANSPs) As critical operator how to cope with strengthening regulation in particular for legacy systems? Is my surveillance network a major weakness? Or elsewhere? What is the safety and operational impacts of cyber-attacks? Does contingency planning enough to be resilient against serious attacks? What is my policy about cyber-incident and more generally about Cybersecurity? Does cyber-protection enough? What is the minimum level? What kind of training for my staff? Should I organize exercises? 14 Commercial-in-Confidence

15 and Airports Operators as facing many cybersecurity challenges What would be the impacts of modification and unavailability of AODB? How to manage cybersecurity of critical SCADA systems? What are the impacts of cyber attacks on Security (baggage reconciliation, access control )? How to protect from hybrid attacks? How to ensure cybersecurity of IT networks: vital communication services to airport & public access for passengers? How to ensure cybersecurity of IT infrastructure to airlines (DCS, PC for load sheet preparation )? How to protect passenger personal data? 15 Commercial-in-Confidence

16 What can we do as Thales? Leverage experiences from many other domains : Defense, Banks, Satellite Offer dedicated solutions through deep knowledge of Air Transport & ATM Provide in-depth cybersecurity from boundary protection to component level Propose preventive cybersecurity solutions and detection of abnormal events Deploy Cyber-Security Operations Center including domain threat Intelligence Perform on-site testing and assess risk to assist in building Cyber-Roadmap 16 Commercial-in-Confidence

17 Thales experience in cyber security OPEN 17This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in

18 This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in Thales cyber security portfolio Anticipate Cyber-Threats Evaluate Risk Security Consulting Security Auditing Threat Intelligence Vulnerability Management Secure Infrastructure E2E Security for Applications E2E Security for Network and IT Dedicated Security Solutions Maintain Security Security Operations Detect & Respond to Security Incidents Detect and Analyze Real-Time Incident Detection and Management Support Investigate Log Analysis Forensics and Malware Analysis On-site Investigation Manage Crisis Crisis Management Rapid Response Team Thales provides consulting services to map cyber risks / set up cyber security strategy 12 OPEN Comply with Policies & Regulation Define Security Policy Definition Comply Certification Management Security Policy Deviation Control Log Management Evolve Change Management

19 Thales cyber security portfolio for Air Trafic Management OPEN 19This document may not be reproduced, modified, adapted, published, translated, in any way, in whole or in

20 THANK YOU CONTACTS MR. RAV RAVHUDZULO SALES MANAGER ATM & AIRPORTS BUSINESS LANDLINE: ; MOBILE OPEN