Developing an integrated information security model for civil aviation: A comprehensive framework for risk assessment and mitigation strategies

This thesis proposes an integrated information security model to enhance information security in civil aviation, focusing on the integrity, confidentiality, and availability of computer-based systems in modern civil aviation. The research aims to identify and mitigate potential threats to various critical systems by examining existing and emerging aviation technologies. The study includes an analysis of avionics, flight data networks, mobile systems, and electronic flight bags, as well as ground-based systems that are integral to flight operations. Through a survey of aviation personnel, suggestions on training, awareness, threats, and solutions to information security issues affecting aviation operations were collected, and the information security model needed was tried to be understood. Through this holistic approach, the thesis aims to develop an information security model that addresses the challenges posed by the increasing digitalization of aviation infrastructure. The resulting model is expected to contribute significantly to the national aviation cybersecurity knowledge base and provide valuable insights for industry stakeholders, operators, and researchers. Ultimately, this study aims to enhance civil aviation's overall safety and reliability by strengthening stakeholders' digital awareness against evolving cyber threats.