Emirates tightens network security

Intrusion prevention helps airline to prevent breaches

Emirates Group has installed security detection systems across its global computer network to prevent hackers and viruses from damaging business operations.

The airline worked with 3Com subsidiary TippingPoint to install the intrusion prevention systems, which monitor network activity and try to spot attempts to breach company IT security.

UK operations in Gatwick, Heathrow, Birmingham, Manchester and Glasgow are protected under the deal, including electronic communications with airports, pilots and flight crews.

‘Due to the expanding nature of Emirates’ business, we want to use technology as much as possible to meet our needs,’ said Laserian Kelly, information security manager for Emirates Group.

‘A lot of our systems are web-based, we use wireless, and people access systems externally. So we want to make sure there is as much security as possible in the infrastructure.’

The TippingPoint systems inspect all incoming internet traffic and external port scans, which are often carried out by hackers, and block illegitimate traffic from entering the network.

Emirates’ security team can also view reporting tools on a security management system and are alerted to events that could lead to a security breach.

‘Aviation security is too critical to rely only on traditional security solutions such as firewalls and anti-virus software,’ said Kelly.

‘Our industry demands extremely robust precautions to stop hackers and other threats from affecting systems that support services and scheduling.’

The TippingPoint system acts as an extra level of protection against viruses and zero-day attacks, blocking suspect internet traffic while IT teams patch software vulnerabilities.

‘We have very many PCs and systems to patch worldwide, so this gives us a bit of extra time to do it,’ said Kelly.

Intrusion prevention is part of a major IT security programme under way at Emirates, says Kelly. The airline is also working on a major identity management project and may use rights management technology to protect data.

‘All of our flight crews access information through a portal, and there is layered security protecting this,’ he said. ‘It is also vitally important to protect customer information due to data privacy laws.’