Earlier this month the IAA hosted EUROCONTROL for a joint 'capture the flag' exercise on aviation systems.
The 'capture the flag' exercise consisted of various challenges in different fields related to cyber and in changing levels of difficulty. All in a self-contained simulated/test environment, fully isolated from the operational environment.
Scenarios were developed by the IAA for which some objectives (flags) have been defined. IAA's Security Operation Center (SOC) Analysts and EUROCONTROL's European Air Traffic Management Computer Emergency Response Team (EATM-CERT) tried to solve the challenges and achieve those objectives (capture the flags). This kind of exercise aims to train cyber-security experts of both organisations in order to maintain their skills in a fast-evolving domain where hackers’ creativity has no limit.
This first exercise involved the IAA and EUROCONTROL only, but the aim is for IAA to host an annual 'capture the flag' event, potentially involving stakeholders from other EUROCONTROL Member States.