Short answer: Sagi Waitzman says Cyviation maps an aircraft's computer systems, checks versions and connections using documents and MRO data, and assesses risk without physical testing, which could ground a plane for about a year.
Watch this answer from Episode 28 (starts at 4:33) · Episode 28 notes and transcript
From Episode 28: Why You Can't Pen Test an Airplane — AI Cybersecurity for Aviation, starting at 4:33.
Jordan Metzner [4:32]: So, Sagi, tell us a little bit about the company and what you guys do.
Sagi Waitzman [4:37]: So actually, what you've done, I think, is what most people think about is cybersecurity for the airlines because they check what is on the ground, and that's exactly what you showed. What we do is we check the airplane itself. Today, the airplane has so many computers. You know? He's got his own server room inside the airplane, and Sabad need to make a risk assessment for it, and this is what we do. We have our technology in order to map all the different elements, you can say it, okay, in the airplane or different computer systems. And then we have our logic. We analyze them. We check the version. We check the connection. We check everything we can get from the documents and all the information we collect from the MRO, from all other inputs we can get, and then we say what is the risk. If there is a risk, what is the risk? What is the effect? Because there can be a channel effect. Somebody can enter from x and get to y.
Sagi Waitzman [5:40]: Okay? Something that other company can do today. I think the most important thing that people need to understand that you can't do pen test to an airplane. Like, you don't want to fly an airplane. The day before, some hacker tried to see what he can do. Like, so testing physically an airplane mean that you will be on the ground for about a year until it can be certified again. So this is where we come. We do with our technology. We can have a risk assessment. We have a straight process how to do a risk assessment, and then the airlines can be compliant to a new regulation that are coming this year. So this is actually the gap we want to fill, to help the airlines to be compliant in the new regulation.
