{'fraction_non_alphanumeric': 0.016231474947071278, 'fraction_numerical': 0.002117148906139732, 'mean_word_length': 5.358744394618834, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Investigating operative cybersecurity awareness in air traffic control

Although the feasibility of cyberattacks manipulating air traffic control surveillance data have been demonstrated, the probability that such attacks can occur is seen as very low in the aviation industry. As a consequence, training to prepare for such events is typically not conducted. This paper presents a study using surveillance pictures and low-fidelity simulation to investigate the operative cybersecurity awareness of air traffic control officers (ATCOs). Five licensed ATCOs participated in a 1-1.5-hour remote data collection session. The results show that the participants did not detect the developing cyberattack until it became very obvious. The participant's perception of the situation was changed after they realized it was a cyber-event. Although they focused on traffic resolution and the safety of the aircrafts, they now prepared for situations where the aircraft had to land on their own due to possible further degradation of air traffic management systems. The study also showed the feasibility of using a low-fidelity simulation of ATM scenarios with remote participation. Even though interactivity and realism were limited, this kind of abstracted simulation allowed for learning from and reflecting around the scenarios. The results show the needs for awareness of possible cyber events in the operative environment.