Swansea University Advances Aerospace Cybersecurity with MBSE Integration

Enhancing Aerospace Cybersecurity through Model-Based Systems Engineering

Swansea University, in collaboration with Novel Engineering Consultants Ltd and Airbus Endeavr Wales, has initiated a pioneering research project aimed at strengthening aerospace systems against cyber threats. This effort marks the first of its kind to explore the application of Model-Based Systems Engineering (MBSE) at the early design stage to proactively embed cybersecurity into aerospace infrastructure.

Led by Professor Siraj Shaikh, Head of the Systems Security Group at Swansea University, and Dr. Hoang Nga Nguyen, the project brings together academic research and industry expertise to create resilient, forward-thinking cybersecurity frameworks. The initiative addresses increasing concerns over cyberattacks in the aerospace sector and aims to develop tools and practices that can be integrated into system architectures from inception.

With the support of Airbus Endeavr Wales, a joint initiative between the Welsh Government and Airbus Defence and Space, the project also contributes to job creation, skills development, and economic growth in Wales. It underscores the importance of academic–industry collaboration in driving innovation and securing critical infrastructure.

Understanding the Aerospace Cybersecurity Landscape

Evolution of Aerospace Cyber Threats

The aerospace industry has witnessed a significant evolution in its cybersecurity needs over the past two decades. Historically, aviation systems operated in isolated environments with limited digital interfaces. However, the integration of satellite communications, in-flight entertainment, cloud-based navigation, and interconnected operational technologies has drastically expanded the attack surface.

Incidents such as the 2018 Cathay Pacific data breach, which impacted 9.4 million passengers, and attacks on European aerospace manufacturers have highlighted vulnerabilities in both passenger and operational domains. According to industry reports, cyberattacks on aerospace systems have increased by over 60% between 2019 and 2021, with ransomware and data breaches becoming increasingly common.

Regulatory bodies like the European Aviation Safety Agency (EASA) have responded by proposing amendments to aircraft certification processes, requiring cybersecurity considerations in systems that interface with flight control mechanisms. These developments underscore the urgency for integrated, systemic approaches to cybersecurity in aerospace.

What is Model-Based Systems Engineering (MBSE)?

MBSE is a methodology that replaces traditional document-based engineering with model-centric approaches. It provides a structured framework for managing system requirements, design, analysis, and validation through interconnected models. These models serve as the authoritative source of information throughout the system lifecycle.

By enabling real-time impact analysis and automated verification, MBSE enhances the ability to identify and mitigate vulnerabilities early in the design process. This is particularly valuable in complex systems like aircraft, where interdependencies between software, hardware, and human factors can introduce unforeseen risks.

In the context of cybersecurity, MBSE allows for the visualization of threat pathways, simulation of attack scenarios, and integration of security features as core design elements rather than afterthoughts. This proactive approach is essential in an environment where threats are constantly evolving.

“MBSE transforms cybersecurity from bolt-on remediation to foundational design principle. By modeling threat scenarios pre-deployment, we shift from reactive patching to predictive hardening.” , Professor Siraj Shaikh

The Collaborative Research Initiative

Roles and Contributions

Swansea University leads the research component of the project through its Systems Security Group. With a strong track record in cyber-physical systems, the university brings academic rigor and technical expertise to the initiative. Professor Shaikh and Dr. Nguyen are at the forefront of developing methodologies that integrate cybersecurity into system architecture from the outset.

Novel Engineering Consultants Ltd contributes its deep experience in MBSE. The company specializes in creating models that map complex interdependencies within aerospace systems. Their tools and frameworks are essential for visualizing and validating security measures across different system layers.

Airbus Endeavr Wales provides the industrial context and funding support necessary for real-world application. As a partnership between the Welsh Government and Airbus Defence and Space, Endeavr facilitates technology transfer from academia to industry, ensuring that innovations are aligned with operational needs.

Project Focus Areas

The project is organized around several key objectives. The first is early threat detection, which involves developing techniques to anticipate cyber threats before they affect operations. This includes the use of digital twins and simulation environments to model potential attack vectors.

Another focus is security validation, where the team is creating new methods to test and verify cybersecurity measures within system architectures. These methods aim to ensure that systems can withstand attacks without compromising safety or functionality.

Finally, the project seeks to establish best practice frameworks for integrating cybersecurity at the design stage. These frameworks will align with current aerospace security standards and help guide future developments in the industry.

Economic and Strategic Implications

The initiative is not only a technical endeavor but also a strategic investment in the regional economy. By fostering advanced skills and creating job opportunities, the project supports the Welsh Government’s broader goals for economic development and innovation.

Rebecca Evans MS, Cabinet Secretary for Economy, Energy and Planning, emphasized the importance of the Endeavr program in translating research into tangible economic benefits. The collaboration is expected to attract further investment and position Wales as a hub for aerospace cybersecurity.

The project also contributes to the UK’s national security objectives by enhancing the resilience of critical infrastructure. As cyber threats become more sophisticated, initiatives like this are essential for maintaining operational integrity and public trust in aviation systems.

“By combining Novel’s deep expertise in model-based engineering with Swansea University’s world-class research in systems security, we’re creating new tools and practices that can integrate cybersecurity at the heart of aerospace.” , Ian Thomas, Novel Engineering

Broader Industry Context

Cybersecurity Trends in Aerospace

The aerospace industry is facing a growing array of cyber threats. These include ransomware attacks, supply chain vulnerabilities, and insider threats. As aircraft become more connected, the risk of cyber incidents affecting safety-critical systems increases.

Industry reports predict that the aerospace cybersecurity market will grow significantly over the next decade, driven by increased investment in defense technologies and regulatory compliance. The global market was valued at approximately $26.3 billion in 2022 and is projected to reach $58.8 billion by 2032.

Efforts to secure aerospace systems are increasingly focusing on proactive measures, such as threat modeling and zero-trust architectures. The use of MBSE is gaining traction as a means to implement these strategies effectively and at scale.

Regulatory Developments

Regulatory bodies are updating their frameworks to address new cybersecurity challenges. EASA, for example, has proposed amendments to its certification processes to include cybersecurity risk assessments. These changes reflect a shift towards more comprehensive and integrated security requirements.

The DO-326A standard has become a key reference for aviation cybersecurity. It outlines the processes manufacturers must follow to demonstrate that their systems are secure. The Swansea-led project aligns with these standards, ensuring that its outputs are relevant and applicable to current regulatory environments.

By anticipating regulatory trends, the project positions itself as a leader in shaping the future of aerospace cybersecurity. Its frameworks could serve as models for other sectors facing similar challenges, such as maritime and automotive systems.

Conclusion

The collaboration between Swansea University, Novel Engineering, and Airbus Endeavr Wales represents a significant step forward in aerospace cybersecurity. By applying MBSE at the design stage, the project aims to create systems that are inherently secure, resilient, and compliant with emerging standards.

Beyond technical innovation, the initiative supports economic development and workforce training in Wales. It exemplifies how academic–industry partnerships can drive meaningful change and ensure that the aerospace sector remains safe, secure, and competitive in the face of evolving cyber threats.

FAQ

Question: What is MBSE and how does it relate to cybersecurity?
Answer: Model-Based Systems Engineering (MBSE) is a methodology that uses models to manage system design and analysis. In cybersecurity, MBSE helps identify vulnerabilities early and integrate security measures throughout the system lifecycle.

Question: Who are the main partners in this project?
Answer: The project is a collaboration between Swansea University, Novel Engineering Consultants Ltd, and Airbus Endeavr Wales.

Question: What are the goals of the research?
Answer: The project aims to develop frameworks for early threat detection, security validation, and regulatory compliance in aerospace systems using MBSE.

Sources

• Swansea University
• Novel Engineering Consultants Ltd
• Airbus Endeavr Wales
• INCOSE
• EASA