On 2024-05-21
Cybersecurity

Airbus team again takes part in the world’s largest live fire cyber defence exercise ‘Locked Shields’

Airbus Protect at Locke Shield
Summary

We reached a significant milestone last year when a team from Airbus took part in the NATO ‘Locked Shields’ exercise for the first time. The exercise, which has been conducted annually since 2010 by the Cooperative Cyber Defense Center of Excellence (CCDCOE), is the world’s largest live cyber defence exercise with over 3,500 participants from 32 nations. Participating at the invitation of the ‘Centre for Cyber Security in the Bundeswehr’ was an instructive experience that showed us how important international cooperation is in the field of cybersecurity. 

 

We are proud that our efforts were recognised and that we were again invited to Locked Shields 2024.

Again this year at Locked Shields, we were faced with challenges that reflect the complexity of real-world cyber defence, including critical thinking, strategic decision making, legal considerations, crisis communication and strategic planning, all with the aim of strengthening cyber defence capabilities.

The uniqueness of the exercise lies in its comprehensive approach, combining technical skills with strategic, legal and communication expertise to develop a versatile defence strategy. Participants are encouraged to utilise their collective skills and foster an environment where collaboration is key to overcoming complex cyber challenges. 

 

The Airbus team, consisting of cyber security experts from Airbus Protect and Airbus Defence & Space, can confirm this from their own experience. 

‘The intensity of Locked Shields is unrivalled. Every attack is a new challenge that needs to be mastered. The close collaboration with experts from all over the world has opened up new perspectives for me and my skills have been put to the test time and again,’ reports Frank Reckziegel, Cybersecurity Architect.

Markus Neumaier, Forensics Specialist, adds: ‘Locked Shields is not just about the technology, but also about the big picture. The forensic investigations under time pressure showed me how important details are and how they can influence the big picture’.

‘Locked Shields was like a chess game against invisible opponents. Every move and its consequences had to be carefully considered. It was an honour to be part of a team that worked so hard together to protect our system without losing sight of its function,’ says Philipp Schönberger, Cybersecurity Software Architect, summarising his impressions.

 

The increasing participation of different nations and partners shows the global reach and importance of Locked Shields.

This underlines the role of the exercise in improving international cooperation in the field of cyber defence. We look forward to capitalising on our experiences from this and last year, taking on new challenges and continuing to contribute to the protection of the digital world.

  • Share

More on Cybersecurity

Dead disk analysis with Velociraptor Cybersecurity

Performing Linux Dead Disk Forensic Analysis with Velociraptor

What is Velociraptor? Velociraptor is an open source digital forensic and incident response tool that supports several deployment models depending on the investigation scenario. While the most common approach is the client-server model, where agents are deployed on endpoints and communicate with a central server, Velociraptor can also operate through offline collectors or virtual clients [...]

Read more
it-sa 2026: Pragmatic OT Asset Management as the foundation for NIS 2 and ISO 27001 Cybersecurity

it-sa 2026: Pragmatic OT Asset Management as the foundation for NIS 2 and ISO 27001

The digitalisation of production continues to advance, but with increased connectivity comes a growing attack surface. At it-sa in Nuremberg on 28 October 2026, we will be demonstrating why a complete asset inventory is no longer just a 'nice-to-have' and how you can achieve visibility without putting your production at risk. Anyone who lacks detailed [...]

Read more
What the Shell? Accelerating Incident Response: Letting the Malware do the work for you Cybersecurity

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you

Intrusion Context Last month, Airbus Protect’s CSIRT responded to an intrusion targeting a vulnerable, internet-facing Windows Server. What began as typical automated scanning quickly transitioned into a targeted attack utilising tools such as SQLMap and vulnerability scanners. By leveraging a flurry of SQL injection attacks, the threat actor successfully enabled xp_cmdshell which facilitated remote code [...]

Read more