On 2024-02-19
by Markus Neumaier, Incident Responder at Airbus Protect
Cybersecurity

Annual Review for Germany: Cyber Defence at Airbus Protect Reaches New Level in 2023

Germany: cybersecurity rewind 2023

In 2023, Airbus Protect demonstrated unparalleled achievements in cyber defence, marking a significant milestone for the company. Four key events in Germany contribute to the organisation's commitment to excellence and innovation in the ever-evolving landscape of cybersecurity.

Four key events in Germany contribute to the organisation's commitment to excellence and innovation in the ever-evolving landscape of cybersecurity.

Summary

1. “Locked Shields”: A Premier Participation

 

The German Airbus Protect team entered uncharted territory as it participated in the prestigious NATO exercise “Locked Shields.” The world’s largest live-fire cyber defence exercise, organised by the NATO Cooperative Cyber Defence Centre of Excellence, presented Airbus Protect with an opportunity to showcase its expertise. The team, including Incident Responder Markus Neumaier and SOC Analysts Tobias Paßreiter, Stefan Hechler, and Fabian Sylvester, collaborated with military personnel and cybersecurity specialists. Their performance underscored the company’s dedication to tackling real-time cyber threats and highlighted the necessity of industry-military cooperation for robust cyber defence in Europe.

 

2. Global Triumph in “Boss of the SOC”

 

Airbus Protect’s cybersecurity analysts, hailing from the Security Operations Center (SOC) in Germany, secured the top spot in the global “Boss of the SOC” competition. Competing against over 1000 participants from 30 countries, the team demonstrated exceptional proficiency in utilising Splunk and other tools. Tobias Paßreiter, Dominik Rabenau, Atilla Öztamur, and Hugo Rodriguez showcased their expertise in open source intelligence and analytical skills through their winning strategy. This victory not only highlighted the team’s prowess but also emphasised the high-quality Managed Security Services offered by Airbus Protect.

 

3. BSI Qualification as APT Response Service Provider

 

In July 2023, Airbus Protect achieved a significant milestone by passing the examination of the German Federal Office for Information Security (BSI) and earning qualification as a trusted Advanced Persistent Threat (APT) response service provider. The rigorous evaluation process, including comprehensive documentation and technical interviews, affirmed Airbus Protect’s capability to effectively manage and respond to sophisticated cyber attacks. Inclusion in the BSI’s list of qualified APT response service providers reinforced Airbus Protect’s position as a cybersecurity leader in Germany, capable of providing robust emergency and crisis management.

 

4. Knowledge Exchange with Law Enforcement

 

Airbus Protect engaged in a knowledge exchange with the State Criminal Police Office of North Rhine-Westphalia (LKA NRW) Cybercrime Unit. The collaboration involved two-way visits, with the Airbus Protect team gaining insights into LKA NRW’s methods for unmasking hackers and mobile forensics. This exchange developed relationships and provided valuable information for incident reports relevant to law enforcement. The engagement highlighted Airbus Protect’s commitment to staying abreast of the latest investigative techniques and fostering collaboration with law enforcement agencies.

 

Summary

In summary, Airbus Protect’s journey in 2023 marked a paradigm shift in the realm of cyber defence. From participating in international exercises and winning global competitions, to achieving qualifications and engaging in knowledge exchange, the company demonstrated an unwavering commitment to advancing cybersecurity capabilities. As Airbus Protect continues to set new standards, its endeavours in 2023 lay a solid foundation for future innovations and collaborations in the field of cyber defence.

 

  • Share

More on Cybersecurity

Cybersecurity in industrial and manufacturing environments: Understanding the fundamentals Cybersecurity

Cybersecurity in industrial and manufacturing environments: understanding the fundamentals

Introduction to OT Security Source: CEA list from DIMS event, 16th May 2024   You've probably heard of Industry 4.0 – the ongoing automation of manufacturing and industrial practices using modern technology. More industries are embracing this approach by incorporating IoT, cloud, AI and cyber-physical systems into their production chain. The resulting connectivity boosts productivity [...] Read more
The naked truth about securing the cloud. Cybersecurity

The naked truth about securing the cloud

Now that every company is using the cloud, whether it be full cloud, hybrid, or SaaS (Software-as-a-Service), they often worry about being secure and sure that they master their flows and data. You can say that this should have been their concern from the very beginning and maybe before but, as often the way, it [...] Read more
MQTT Hidden talks Cybersecurity

Whispers of the Machines: Exposing MQTT Hidden Talks

Why does IoT need to be secure? With over 15 billion IoT (Internet of Things) devices interconnected worldwide, machines can now ‘talk’ to each other seamlessly. This is enabled by protocols like Message Queuing Telemetry Transport (MQTT), which orchestrate our smart homes, cities and critical infrastructure. The extensive use of MQTT, a lightweight machine-to-machine protocol [...] Read more