%PDF-1.4
%
1 0 obj
<<
/CreationDate (D:20220803150903-04'00')
/Creator (PDF-XChange Editor 5.5.314)
/ModDate (D:20220803151836-04'00')
/Producer (PDF-XChange PDF Core API \(5.5.314\))
>>
endobj
2 0 obj
<<
/AcroForm 3 0 R
/Metadata 4 0 R
/OCProperties <<
/D <<
/Order [[(2022 FAA-EASA Intl Aviation Safety Conference Presentation Material.pdf) 5 0 R]]
/RBGroups []
>>
/OCGs [5 0 R]
>>
/Outlines 6 0 R
/Pages 7 0 R
/Type /Catalog
>>
endobj
3 0 obj
<<
/DR <<
/Font <<
/F0 8 0 R
/F1 9 0 R
>>
>>
/Fields []
>>
endobj
4 0 obj
<<
/Length 3141
/Subtype /XML
/Type /Metadata
>>
stream
application/pdf
uuid:7d30a896-225b-473e-919a-1f8fbc7346c4
uuid:306d0541-015f-42ee-ab04-f319082cbb42
2022-08-03T15:09:03-04:00
PDF-XChange Editor 5.5.314
2022-08-03T15:18:36-04:00
PDF-XChange PDF Core API (5.5.314)
endstream
endobj
5 0 obj
<<
/Name (Background)
/Type /OCG
/Usage <<
/PageElement <<
/Subtype /BG
>>
>>
>>
endobj
6 0 obj
<<
/Count 4
/First 10 0 R
/Last 11 0 R
>>
endobj
7 0 obj
<<
/Count 4
/Kids [12 0 R 13 0 R 14 0 R 15 0 R]
/Type /Pages
>>
endobj
8 0 obj
<<
/BaseFont /Helvetica
/Subtype /Type1
/Type /Font
>>
endobj
9 0 obj
<<
/BaseFont /ArialMT
/Encoding /WinAnsiEncoding
/FirstChar 32
/FontDescriptor 16 0 R
/LastChar 255
/Subtype /TrueType
/Type /Font
/Widths [278 278 355 556 556 889 667 191 333 333 389 584 278 333 278 278
556 556 556 556 556 556 556 556 556 556 278 278 584 584 584 556
1015 667 667 722 722 667 611 778 722 278 500 667 556 833 722 778
667 778 722 667 611 722 667 944 667 667 611 278 278 278 469 556
333 556 556 500 556 556 278 556 556 222 222 500 222 833 556 556
556 556 333 500 278 556 500 722 500 500 500 334 260 334 584 350
556 0 222 556 333 1000 556 556 333 1000 667 333 1000 0 611 0
0 222 222 333 333 0 556 1000 333 1000 500 333 944 0 500 667
0 333 556 556 556 556 260 556 333 737 370 556 584 0 737 552
400 549 333 333 333 576 537 333 333 333 365 556 834 834 834 611
667 667 667 667 667 667 1000 722 667 667 667 667 278 278 278 278
722 722 778 778 778 778 778 584 778 722 722 722 722 667 667 611
556 556 556 556 556 556 889 500 556 556 556 556 278 278 278 278
556 556 556 556 556 556 556 549 611 556 556 556 556 500 556 500]
>>
endobj
10 0 obj
<<
/A 17 0 R
/Next 18 0 R
/Parent 6 0 R
/Title ( M a n a g i n g C y b e r s e c u r i t y T h r e a t s)
>>
endobj
11 0 obj
<<
/A 19 0 R
/Parent 6 0 R
/Prev 20 0 R
/Title ( U n i t e d D r a f t O r g a n i z a t i o n S t r u c t u r e S M S / I S M S)
>>
endobj
12 0 obj
<<
/Annots [21 0 R 22 0 R 23 0 R]
/Contents 24 0 R
/CropBox [0 0 720 405]
/MediaBox [0 0 720 405]
/Parent 7 0 R
/Resources <<
/ColorSpace <<
/CS0 25 0 R
>>
/ExtGState <<
/GS0 26 0 R
>>
/Font <<
/TT0 27 0 R
>>
/Properties <<
/MC0 5 0 R
>>
/XObject <<
/Im0 28 0 R
>>
>>
/Rotate 0
/Tabs /S
/Type /Page
>>
endobj
13 0 obj
<<
/Annots [29 0 R]
/Contents 30 0 R
/CropBox [0 0 720 405]
/Group 31 0 R
/MediaBox [0 0 720 405]
/Parent 7 0 R
/Resources <<
/ExtGState <<
/GS0 26 0 R
>>
/Font <<
/TT0 27 0 R
>>
/Properties <<
/MC0 5 0 R
>>
/XObject <<
/Im0 32 0 R
/Im1 33 0 R
>>
>>
/Rotate 0
/Tabs /S
/Type /Page
>>
endobj
14 0 obj
<<
/Contents 34 0 R
/CropBox [0 0 720 405]
/Group 31 0 R
/MediaBox [0 0 720 405]
/Parent 7 0 R
/Resources <<
/ExtGState <<
/GS0 26 0 R
>>
/Font <<
/TT0 27 0 R
>>
/ProcSet [/PDF /Text /ImageC]
/Properties <<
/MC0 5 0 R
>>
/XObject <<
/Im0 32 0 R
/Im1 35 0 R
/Im2 36 0 R
>>
>>
/Rotate 0
/Tabs /S
/Type /Page
>>
endobj
15 0 obj
<<
/Annots [37 0 R]
/Contents 38 0 R
/CropBox [0 0 720 405]
/Group 31 0 R
/MediaBox [0 0 720 405]
/Parent 7 0 R
/Resources <<
/ColorSpace <<
/CS0 39 0 R
>>
/ExtGState <<
/GS0 26 0 R
>>
/Font <<
/TT0 27 0 R
/TT1 40 0 R
/TT2 41 0 R
>>
/Properties <<
/MC0 5 0 R
>>
/Shading <<
/Sh0 42 0 R
>>
/XObject <<
/Im0 32 0 R
/Im1 43 0 R
/Im2 44 0 R
/Im3 45 0 R
>>
>>
/Rotate 0
/Tabs /S
/Type /Page
>>
endobj
16 0 obj
<<
/Ascent 905
/CapHeight 716
/Descent -212
/Flags 32
/FontBBox [-665 -325 2000 1040]
/FontName /ArialMT
/ItalicAngle 0
/StemV 0
/Type /FontDescriptor
>>
endobj
17 0 obj
<<
/D [12 0 R /Fit]
/S /GoTo
>>
endobj
18 0 obj
<<
/A 46 0 R
/Next 20 0 R
/Parent 6 0 R
/Prev 10 0 R
/Title ( S l i d e N u m b e r 4 5)
>>
endobj
19 0 obj
<<
/D [15 0 R /Fit]
/S /GoTo
>>
endobj
20 0 obj
<<
/A 47 0 R
/Next 11 0 R
/Parent 6 0 R
/Prev 18 0 R
/Title ( F A A C y b e r C o m m u n i t y a n d I n f o r m a t i o n S h a r i n g)
>>
endobj
21 0 obj
<<
/AP <<
/N 48 0 R
>>
/C [1 1 1]
/CL [443.012757 163.670105 414.062531 360.312439 402.062531 360.312439]
/Contents ("In 2016, data generated = 1.6mb/person/second.\rHowever, half the world's data generated in last two years!\rThreat landscape continues to evolve."\rFAA runs 340+ systems \(including mission critical systems\). FAA gives out 1TB of data per day \(to both authenticated and unauthenticated users\).\rPNT Denver GPS outage. ADS-B spoofing.)
/CreationDate (D:20220803150949-04'00')
/DA (1 0 0 rg /F1 12 Tf)
/DS (font-family:Arial;font-size:12pt;color:#000000;)
/F 4
/IT /FreeTextCallout
/LE /OpenArrow
/M (D:20220803151306-04'00')
/NM (b1083000-12cf-4a18-8b3af1a5b6ae9749)
/P 12 0 R
/RC (
"In 2016, data generated = 1.6mb/person/second.
However, half the world's data generated in last two years!
Threat landscape continues to evolve."
FAA runs 340+ systems \(including mission critical systems\). FAA gives out 1TB of data per day \(to both authenticated and unauthenticated users\).
PNT Denver GPS outage. ADS-B spoofing.
)
/RD [0.75 153.725373 45.016999 0.75]
/Rect [0.153817 162.920105 447.079529 404.729432]
/Subj (Callout)
/Subtype /FreeText
/T (Hagop Kazarian)
/Type /Annot
>>
endobj
22 0 obj
<<
/AP <<
/N 49 0 R
>>
/C [1 1 1]
/CL [422.989533 121.082467 338.141388 232.703782 326.141388 232.703782]
/Contents (EASA put 4 pillars based on ICAO mandate.\r\t1. Aircraft cert standards \(SCs\)\r\t2. Part-IS\r\t3. Information sharing\r\t4. Collaboration\rLuc believes avionics is more vulnerable when on test stand.\rEU will pass regulatory framework to centralize cybersecurity reporting under EASA; in effect end of 2023.\rLuc stated that the upcoming EU Part-IS \(ISMS\) will require EU operators to manage infosec risks for all their ops including for EFBs.)
/CreationDate (D:20220803151101-04'00')
/DA (1 0 0 rg /F1 12 Tf)
/DS (font-family:Arial;font-size:12pt;color:#000000;)
/F 4
/IT /FreeTextCallout
/LE /OpenArrow
/M (D:20220803151506-04'00')
/NM (ef0e5398-964e-48b0-8a51cde9170b3bbc)
/P 12 0 R
/RC (EASA put 4 pillars based on ICAO mandate.
1. Aircraft cert standards \(SCs\)
2. Part-IS
3. Information sharing
4. Collaboration
Luc believes avionics is more vulnerable when on test stand.
EU will pass regulatory framework to centralize cybersecurity reporting under EASA; in effect end of 2023.
Luc stated that the upcoming EU Part-IS \(ISMS\) will require EU operators to manage infosec risks for all their ops including for EFBs.
)
/RD [0.75 31.281304 97.598145 0.75]
/Rect [0.153802 120.332467 423.739533 314.543793]
/Subj (Callout)
/Subtype /FreeText
/T (Hagop Kazarian)
/Type /Annot
>>
endobj
23 0 obj
<<
/AP <<
/N 50 0 R
>>
/C [1 1 1]
/CL [415.480866 86.82206 203.986115 59.389054 203.986115 47.389054]
/Contents (Commented that there are multiple reporting requirements which is hard to manage, and raises risk bad actors are informed: SDRs, SMS reporting, CISA reporting, etc...)
/CreationDate (D:20220803151518-04'00')
/DA (1 0 0 rg /F1 12 Tf)
/DS (font-family:Arial;font-size:12pt;color:#000000;)
/F 4
/IT /FreeTextCallout
/LE /OpenArrow
/M (D:20220803151639-04'00')
/NM (176e26a1-5e3e-4766-ada372f706678402)
/P 12 0 R
/RC (Commented that there are multiple reporting requirements which is hard to manage, and raises risk bad actors are informed: SDRs, SMS reporting, CISA reporting, etc...
)
/RD [0.75 0.75 11.665375 43.643059]
/Rect [2.656731 1.670105 416.230866 91.032113]
/Subj (Callout)
/Subtype /FreeText
/T (Hagop Kazarian)
/Type /Annot
>>
endobj
24 0 obj
<<
/Filter [/FlateDecode]
/Length 1588
>>
stream
HWIs6W:EN&3ޚcMH<9(ƒ\߷d{{Mi\'{5<6vWemζX*Jc{ξf;8Ws5NJVDZZzx%l~Xbw93FF.TE몮j;ȘToi\zud{,aO&2j8j2Sy{TSDe_+Kڨ(L&M4qTFJzo Ynˍ-(
끉2g_5-p_k;-2t6s<@ߪpu)*m0E6ˢ88:2^钪3R?D!{ɳ$KI"Ԃ9IM@T;g;.)%lINzn>,U.JJYķE(%op0
<;f.Ua(
B F0_%qpug-bhTX$5)!@`!xSypB{? *aPCll[LA/RO(Kic`Z:pF2 m2T'Z] JSP[Ou
Vjvf^kN
| .cj:rGBB}?l04Pq^x @ J\BI\J3<<qE kOEe rр]Ptl*XdB
> T
&B:o{1dT&ŗw38߀ :B1Y(~D(z8Ҙy8+-Eo9F$D{LmQv̬uʍ <pTF`Wq:'bs+-CHFgrhJx%:{"̧`)}\R1ߵ
:¢Hcc*۔jd\}qG`H悝-+PSAJrpgZ_sB^/ϽHM#1GRZ2ފ>=|D8..97fG"#i;e^ܔ1ϛ>aZ'9
F!;Ru$~(Mnn:S>#m錼h4GidY\)4pLɹ[*V:%UrK- nVA>X-
:Pg{Tꞇ^LcJi<eVI0=}ZQq|w~ʛj
xL:hrͦehڟiLRiĢ;볞+IrQ=O,W~qMwP]w,c(?K@{PtMJ\Iw0톔%4;A-p՞3ۨrI
k/QY8>vG<
yG?K9Ty]84'gӲ"mA ?
endstream
endobj
25 0 obj
[/ICCBased 51 0 R]
endobj
26 0 obj
<<
/AIS false
/BM /Normal
/ca 1
/CA 1
/OP false
/op false
/OPM 1
/SA true
/SMask /None
/Type /ExtGState
>>
endobj
27 0 obj
<<
/BaseFont /QQYGCC+FranklinGothic-Medium
/Encoding /WinAnsiEncoding
/FirstChar 32
/FontDescriptor 52 0 R
/LastChar 150
/Subtype /TrueType
/ToUnicode 53 0 R
/Type /Font
/Widths [250 275 0 0 0 0 717 214 293 293 586 0 241 241 241 479
586 586 586 586 586 586 586 586 586 586 241 241 0 0 0 501
717 603 607 579 655 537 508 642 641 267 372 614 499 801 650 644
599 644 643 571 483 595 541 883 0 0 0 293 0 293 0 500
0 541 539 466 539 524 316 518 542 245 245 532 245 870 542 529
539 542 332 454 322 540 444 697 441 442 418 0 0 0 0 0
0 0 0 0 375 741 0 0 0 0 0 0 0 0 0 0
0 0 241 375 375 667 586]
>>
endobj
28 0 obj
<<
/BitsPerComponent 8
/ColorSpace 25 0 R
/Filter [/DCTDecode]
/Height 1080
/Length 134389
/Name /X
/Subtype /Image
/Type /XObject
/Width 1080
>>
stream
Adobe d
D 88 "
[ !1AQ"aq2#B$3Rr4bc%&CDFSVdstuTU
'()*56789:EGHIJWXYZefghijvwxyz w !1QqA"$ar#234%BRbcsS
&'()*56789:CDEFGHIJTUVWXYZdefghijtuvwxyz ? h)t锛G!pHu= GDBE%vA!$h Eфi%! Kh˪C{hFt+4j@䄠
PB#) N0h(qH@@ H@>(L D!0H#DF8$ \䫢) dr"YuAe$Ah "A!%$EGta8FXX)($0'PJ #T,f A($*@#83} F[h-H: % @J!1a(7D
a %
SAJ (j@Cq>"ӈ%|=i!!daF`RP) % k]qvD4FL6)]u\D H d!A;',4|Q# XFBpHYh c1H{YDHQqJ 7EA+LT!!Ht 4ItI@!%@oԕ
W#)&i0Q-$ IHBєs1tH vGdk1jD'4.,`E!hWG!QF{)
0e8h.% AѢ@$ Aӌ,FAYA! #DC ei$)XAi$2AnRu␓9[T(#DPFbCT!),%f,5($5 cDIs
FA '"*)lg04C!f T)Ed,$ ,
PN3HJ:as mRDhR0FDv
iCِrKUŏ=#T[-Jq@"P adنHX
B{#4hPP)<)A3!0h2S($:0BPHYtv ,C3mв#r
$G4h0IJ☍
L8%
<]Ir@i 4>` %
BBE0BAh DLH 2! #$,G )" DhnE'_AIs2I$ %9twE &萺 P WA
;JDHaHYh"HaH"pB ѢA8A vA(&h3 B9Y]NRpNI; F#N!A($ bSR@J (#P (%XJ !(-`a,hkCJX
Ԗh0t@t*B!bXYJC!8 } 4qh4J bPN-ҚtEA4
qZ4ADjs;A~cW04㬄aFfH A8͋($8[RNE .6)fBGdY 8t@%dY QZ4](m.W]:DaTa8A!VStDR`Z$70IHFta;Y!Ԕ|s>KH8vEdh$8@!d,Z4[@HHв; FBUHBR$a!RC)-IsdF0)93"nK, B'20BY! # XRe! !A hWA!#Ct @ BtWA!#A!$i$BԮ:ⳝ3]FH}Z0VHL0
HJ pKn6Jnb
@J XJ (' а.Cl;LJIc]T9 ّNP7D6'"t% tJ !,ECm:i S[n<,8KٟHaJ
q):a($HP A$%'PK %RR3Ȑ>r9BrGٛr8qFBPD($$9g_̿D4FƉ 0 FtiHTR6)+<D #B
0
+&"W@XHt3+3]`]!