e-VTOL Security

Threat Modeling of e-VTOLs
A Research Study on e-VTOL Cyber-Physical Systems: Threat Modeling, Attack Vectors, and Security Implications for Confidentiality, Integrity, and Availability
Abstract: We will identify specific threats and attack vectors that could compromise the confidentiality, integrity, and availability of the systems using the Microsoft Threat Modelling Toolkit. The e-VTOL ecosystem will be modeled as a Cyber-Physical System (CPS) for the purpose of this analysis as it captures the e-VTOL ecosystem most accurately from a systems perspective. Possible threats to the confidentiality of CPS could be man-in-the-middle attacks such as data interception and eavesdropping. For example, attackers may intercept information exchanged between flight control systems, ground control stations, communication channels, and onboard computers. This interception could potentially compromise mission-related data. In eavesdropping, adversaries may listen to communication channels to gather insights into flight operations and other sensitive mission details. Data tampering is an integrity-related threat where attackers may manipulate data in transit or at rest. This manipulation could lead to incorrect inputs, such as commands or sensor readings the e-VTOL systems receive. Such data tampering could jeopardize the safety of the aircraft and its occupants. Adversaries might also compromise the integrity of the embedded systems software, leading to safety issues. In terms of availability, attackers have the potential to carry out Denial of Service attacks on communication networks and software, leading to disruptions in communication and making it difficult to control the aircraft. Adversaries can also use radio jamming devices to disrupt communication systems, impacting real-time data transmission and navigation capabilities.