How secure is CPDLC? a comprehensive review of cyber threats and defense mechanisms in aviation communication

Abstract

With the increasing reliance on digital communication in modern aviation, securing air–ground communication systems has become a critical concern. Controller–Pilot Data Link Communications (CPDLC), a cornerstone of next-generation air traffic control, replaces traditional voice communication with text-based messaging be- tween pilots and air traffic controllers. However, like any digital system, CPDLC is vulnerable to various cybersecurity threats that may compromise flight safety, con- fidentiality, and operational integrity. This study presents a comprehensive review and analysis of existing research focused on CPDLC security. The main contribution of this work is the development of a detailed taxonomy covering the full spectrum of cyberattacks and countermeasures related to CPDLC systems. In contrast to ear- lier reviews, our study offers broader coverage of attack types and proposes targeted mitigation techniques. Each cyberattack is examined in terms of its method, impact, and implications for aviation communication. To support this effort, we analyzed all relevant articles selected through a structured methodology. Additionally, we high- light the necessity of implementing cryptographic mechanisms—such as encryption, hashing, and digital signatures—to safeguard the confidentiality, integrity, and au- thenticity of CPDLC messages. This work serves as a foundation for advancing secure and resilient aviation communication protocols.

Keywords: CPDLC Security, Cyberattacks In Aviation, Countermeasures, Aviation Communication, Security Taxonomy