Examining Pilot Response to Cybersecurity Events on the Flight Deck

Cybersecurity is a growing concern in the aviation industry. In general, cybersecurity research has typically focused on providing technical solutions such as hardening networks and improving computer systems, with little focus on the human operator. Human operators, such as pilots, are often the last line of defense; however, it is currently unclear whether pilots can recognize cybersecurity vulnerabilities, detect when a system is being compromised, and respond appropriately to a cybersecurity event. A review of literature revealed three key stages in cybersecurity response decision process (susceptibility, detection, and response) that are influenced by eight separate factors (perceived susceptibility, perceived safeguard cost/ effectiveness, system trust, system reliability, system knowledge, cybersecurity knowledge/ experience, saliency of cybersecurity event, and system transparency). This framework was examined within the aviation domain by administering a questionnaire to a large sample of airline, corporate and general aviation pilots and conducting a simulator study with a medium size sample of B737 airline pilots. This presentation will describe the methods and findings associated with these two efforts, along with implications and guidance for the aviation industry