“Security by Design” approach presented at the CAELESTIS Cybersecurity Workshop

On October 2, 2024, Christos Skoufis, the CISO and Deputy Head of R&D at eBOS Technologies, delivered a pivotal presentation on “Security by Design” at a Cybersecurity Workshop about “Enhancing Design and Manufacturing through Privacy, Ethics, and Security in CAELESTIS Aerospace Simulation Ecosystem”. The workshop was a cluster collaboration between the CAELESTIS, HERMES, and NERO projects.

As cyber threats increase in sophistication, particularly within the aviation industry, Mr. Skoufis outlined the importance of embedding security into every phase of the software development lifecycle. Mr Skoufis emphasised that traditional cybersecurity measures often come as afterthoughts and must evolve toward proactive solutions to counter modern threats. Security by Design is an approach that ensures software solutions are inherently secure from their inception instead of applying fixes post-development.

The critical components of the presentation included:

• Core Principles of Security by Design: Mr Skoufis detailed practices such as threat modelling, secure coding, and continuous testing, all crucial for identifying vulnerabilities early in the software development. He stressed that these principles help build trust and ensure compliance with regulations like GDPR and HIPAA.
• Cost Efficiency and Reputation: Addressing security concerns early in the development cycle reduces long-term costs and protects the company’s reputation from potential breaches. Mr Skoufis underscored that building security upfront is far more cost-effective than remediating a data breach, which also carries reputational damage.
• Case Studies: Using real-world examples, including the British Airways data breach and Boeing 787 vulnerabilities, Mr Skoufis showcased how inadequate security practices can have severe financial, legal, and safety consequences. He emphasised that adopting a Security by Design approach, mainly using encryption, strong authentication measures, and regular security audits​, could have prevented these incidents.
• Future of Cybersecurity in Aviation: With predictions from Eurocontrol and ENISA showing a significant increase in cyberattacks by 2024, Mr Skoufis highlighted the urgent need for cybersecurity frameworks in aviation systems.