Cyber-security in Aerospace: Legal Implications Under International and Korean Law

Abstract

The aerospace sector, comprising aviation, airports, airlines, and their subcontractors, is increasingly vulnerable to cyberattacks due to its heavy reliance on digital technologies for crucial operations such as navigation, communication, and data management. This paper examines the legal frameworks that address cybersecurity risks in this vital industry, focusing on South Korea’s domestic regulations alongside international law. By reviewing South Korea’s data protection policies and key international treaties, the study identifies significant gaps in existing cybersecurity laws. It highlights the limitations of these frameworks, pointing out inconsistencies in definitions and enforcement challenges in international agreements like the Budapest and Chicago Conventions. The paper also looks at initiatives such as the Tallinn Manual—a non-binding guide on applying international law to cyber warfare—and the United Nations Group of Governmental Experts (GGE) on cybersecurity, which aim to set norms for cyber operations but fall short of establishing binding global standards. The findings emphasize the need to align legal frameworks and improve cross-border cooperation to effectively address the growing cybersecurity risks facing the aerospace sector. These recommendations would provide practical guidance for legal practitioners analyzing this complex landscape, ultimately ensuring both national security and the protection of critical infrastructure.