Are pilots prepared for a cyber-attack? A human factors approach to the experimental evaluation of pilots' behavior. (June 2018)

• Record Type: Journal Article
• Authors: Gontar, Patrick; Homans, Hendrik; Rostalski, Michelle; Behrend, Julia; Dehais, Frédéric; Bengler, Klaus
• Is Part Of: Journal of air transport management. Volume 69(2018)
• Page Start: 26
• Page End: 37
• Publication Date: 2018-06
• Subjects: Cyber security -- Human factors -- Simulator study -- Pilots -- Trust -- Workload -- Eye-tracking; Airlines -- Management -- Periodicals; Aeronautics, Commercial -- Management -- Periodicals; 387.7068
• DOI: 10.1016/j.jairtraman.2018.01.004
• Languages: English
• ISSNs: 0969-6997

Abstract

Abstract: The increasing prevalence of technology in modern airliners brings not just advantages, but also the potential for cyber threats. Fortunately, there have been no significant attacks on civil aircraft to date, which allows the handling of these emerging threats to be approached proactively. Although an ample body of research into technical defense strategies exists, current research neglects to take the human operator into account. In this study, we present an exploratory experiment focusing on pilots confronted with a cyber-attack. Results show that the occurrence of an attack affects all dependent variables: pilots' workload, trust, eye-movements, and behavior. Pilots experiencing an attack report heavier workload and weakened trust in the system than pilots whose aircraft is not under attack. Further, pilots who experienced an attack monitored basic flying instruments less and their performance deteriorated. A warning about a potential attack seems to moderate several of those effects. Our analysis prompts us to recommend incorporating cyber-awareness into pilots' recurrent training; we also argue that one has to consider all affected personnel when designing such training. Future research should target the development of appropriate procedures and training techniques to prepare pilots to correctly identify and respond to cyber-attacks. Highlights: Current cyber-security efforts focus mainly on technical approaches but neglect the human as possible barrier. Cyber-attacks are likely to be characterized by ambiguous cues leading to high uncertainty. Cyber-attacks have a large effect on pilots' perceived workload, system trust, gaze-behavior, and performance. Pilot training should emphasize on generic decision making skills by implementing unforeseen events into training.