Cyber attacks on all aspects of society have become almost daily occurrences. Consequences

range from mere inconvenience due to disrupted services to financial loss to more severe effects.

For many aerospace and defense systems, attacks can cause mission failure and even loss of life.

Threat actors are getting more sophisticated by employing Artificial Intelligence, especially chat

bots, to discover zero-day vulnerabilities and create exploits against them.

Almost all aerospace systems and platforms are cyber physical entities: they have electronic

hardware, software and networks embedded in physical units. This talk will outline how to protect

cyber physical systems, a category which also includes industrial control systems, power grids,

transportation and other critical infrastructure, and many other sectors which provide essential

services to society.

The talk will describe cyber threat actors, resulting system faults, errors, failures and

consequences. Current approaches to countering these attacks will be summarized. Many

aerospace and other cyber physical systems are hard real-time systems and have stringent

reliability and availability requirements. They cannot be turned off and taken off-line for forensic

analysis and repair. As such, there are many shortcomings of state-of-the-practice in cyber

defenses. Some of the deficiencies will be enumerated and novel approaches suggest in three

areas:

1. Technical: Revolutionary technical capabilities that go beyond intrusion prevention and

detection.

2. New Concepts of Operation: Broadening mindset to treat cyber as a constantly evolving

warfare between attackers and defenders.

3. Policy: Complementing technical solutions with the whole of society approach.