A GAO report to FAA reveals that the systems adopted in the Aviation industry are still affected by weaknesses that could be exploited by hackers. The weaknesses mentioned in the document are related to controls for protecting system boundaries, user identification and authentication, access controls, auditing and monitoring activity. FAA has taken steps to protect its air traffic control systems from threats, including cyber threats, but according to the report, the FAA has ignored NIST and Federal Information Security Management Act guidelines. The GAO wants to see enhanced authentication, more authorization controlling access to resources, cryptography implementations and audit and monitoring procedures put in place.”]
Source: http://securityaffairs.co/wordpress/34392/security/gao-faa-air-traffic-control.html