Ransomware os riscos do sequestro de dados na aviação civil

Abstract

This research is focused on informing about the risk that types of ransomware pose to civil aviation. Ransomware is malicious software capable of encrypting a victim's files and restricting access to the affected system by requiring a ransom value to restore it. Considering that the plane is a highly technological means of transport and depends on computerized systems, such as software, computer networks, and the Internet of Things (IoT), one element is essential for its operation: data. They are present in practically all areas of aviation, whether when checking in via the internet or issuing flight plans, for example. Thus, they end up becoming very valuable tools for companies and entities in the sector, which makes the aeronautical modal an attractive target for criminal actions. In fact, the interdependence of these computerized systems has brought new challenges to the protection against acts of unlawful interference since the threats are now not only physical, but also virtual and data hijacking is one of them. In this way, ransomware can degrade or even suspend essential systems for aviation, causing a series of damages and even compromising security. Therefore, in addition to making a historical analysis of the most famous attack cases and the respective impacts they caused, the objective of this research is to raise awareness of the aeronautical community, through reports and brief analysis of case studies, about the risks related to this type of malicious software as well as present some practices to avoid them.