Civil Aviation Cybersecurity in Indonesia: Legal Compliance, Regulatory Gaps, and Reform in Light of ICAO Standards

Adya Paramita Prabandari; Ramalina Ranaivo Mikea Manitra

doi:10.15294/jllr.v7i4.40581

Authors

Adya Paramita Prabandari Faculty of Law, Universitas Diponegoro, Semarang, Indonesia Author https://orcid.org/0000-0003-0016-0453
Ramalina Ranaivo Mikea Manitra ASTA Research Center, Antananarivo, Madagascar and Faculty of Law, Universitas Airlangga, Surabaya, Indonesia Author https://orcid.org/0009-0008-6852-8780

DOI:

https://doi.org/10.15294/jllr.v7i4.40581

Keywords:

Aviation Law, Cybersecurity, ICAO, Indonesia, International Standard Compliance

Abstract

Cybersecurity has become an important component of international aviation safety and security as the increasing digitalization of aircraft systems and air traffic management creates new risks for civil aviation. In Indonesia, the expansion of digital infrastructure in the aviation sector requires a coherent legal and institutional response to these risks. This paper aims to examine Indonesia’s civil aviation cybersecurity legal framework in comparison with international standards established by the International Civil Aviation Organization (ICAO) and related legal instruments. Using a comparative doctrinal legal method, the study analyses primary legal materials, including the Aviation Law, the Electronic Information and Transactions (ITE) Law, Government Regulation No. 71 of 2019, Presidential Regulation No. 82 of 2022, and Ministerial Regulation No. 51 of 2020, supported by secondary legal materials on civil aviation cybersecurity, through normative qualitative analysis. The findings show that Indonesia has incorporated cybersecurity obligations into its aviation laws and regulations, demonstrating progress in recognizing cybersecurity as part of aviation safety and security. However, the level of compliance remains uneven across different areas of the national legal and institutional system, particularly in institutional coordination, enforcement, and international cooperation. The study recommends strengthening the incorporation of ICAO Standards and Recommended Practices into national regulations, establishing a dedicated national aviation cybersecurity strategy, integrating cybersecurity requirements into safety and certification processes, improving cross-border cooperation and CSIRT capacity, formalizing public-private cooperation, and strengthening institutional capacity. The study concludes that Indonesia has established a substantial legal basis for aviation cybersecurity. However, greater legal coherence and institutional coordination are required to achieve more consistent compliance with international standards.

References

Abeyratne, Ruwantissa. “Cyber Terrorism and Aviation—National and International Responses.” Journal of Transportation Security 4, no. 4 (December 2011): 337–49. https://doi.org/10.1007/s12198-011-0074-3.

Ali, Muhammad, Yim-Fun Hu, Rameez Asif, and Jiang-Ping Li. “Security Risk Assessments and Countermeasures for Future Aeronautical Communication Network Architecture.” In Aviation Cybersecurity: Foundations, Principles, and Applications, edited by Houbing Song, Abdullah Hopkinson, Tomaso De Cola, Tom Alexandrovich, and Dahai Liu, 141–80. Bradford, United Kingdom: Institution of Engineering and Technology, 2021.

Beyond Machines. “Hacker Claims Breach of Indonesian Civil Aviation Authority.” BeyondMachines.Net, June 2024.

———. “Indonesia Reports Government Data Center Hit by Ransomware.” BeyondMachines.Net, June 2024.

Bhakti, Agus, Arfin Sudirman, R Widya Setiabudi Sumadinata, and Arry Bainus. “State Defense Strategy in Facing Cyber Threats After Hacking Incidents on Government Institutions: A Case Study in Indonesia.” Journal of Human Security 20, no. 1 (2024): 109–17. https://doi.org/10.12924/johs2024.20116.

Blecken, Marvin, Harmut Hintze, and Ralf God. “Enabling Airworthiness Security by a Holistic Security Engineering Process at Various Aircraft Design Levels.” In ICAS Proceedings, 1–12. Hamburg, Germany: International Council of the Aeronautical Sciences, 2024.

Dwiaji, Lingga, Agung Mulyo Widodo, Gerry Firmansyah, and Budi Tjahyono. “Analysis of Knowledge Management Strategies for Handling Cyber Attacks with the Computer Security Incident Response Team (CSIRT) in the Indonesian Aviation Sector.” Asian Journal of Social and Humanities 2, no. 6 (March 2024): 1341–53. https://doi.org/10.59888/ajosh.v2i6.261.

Eleimat, Mahmaud, Omar Alharasees, and Arnold Oszi. “Advancements in Airport Security Technologies: A Patent Analysis.” In Proceedings of 2024 1st Edition of the Mediterranean Smart Cities Conference, MSCC 2024, edited by Dahmane A.B., Dahmane A.B., El Hibaoui A., and Essaaidi M. Budapest, Hungary: Institute of Electrical and Electronics Engineers Inc., 2024. https://doi.org/10.1109/MSCC62288.2024.10696990.

Elmarady, Ahmed Abdelwahab, and Kamel Rahouma. “Studying Cybersecurity in Civil Aviation, Including Developing and Applying Aviation Cybersecurity Risk Assessment.” IEEE Access 9 (2021): 143997–16. https://doi.org/10.1109/ACCESS.2021.3121230.

ElMarady, Ahmed AbdelWahab, and Kamel Hussein Rahouma. “The Impact of COVID-19 on the Cybersecurity in Civil Aviation: Review and Analysis.” In 2022 International Telecommunications Conference (ITC-Egypt), 1–6. Cairo, Egypt: IEEE, 2022. https://doi.org/10.1109/ITC-Egypt55520.2022.9855692.

Florido-Benítez, Lázaro. “The Types of Hackers and Cyberattacks in the Aviation Industry.” Journal of Transportation Security 17, no. 1 (December 2024): 13. https://doi.org/10.1007/s12198-024-00281-9.

Garcia, Anna Baron, Radu F. Babiceanu, and Remzi Seker. “Means of Compliance and Relation Between Security Standards in Airworthiness Engineering.” In Integrated Communications, Navigation and Surveillance Conference (ICNS), April:1–9. United States: IEEE, 2019. https://doi.org/10.1109/ICNSURV.2019.8735318.

Gnatyuk, Sergiy. “Multilevel Unified Data Model for Critical Aviation Information Systems Cybersecurity.” In 2019 IEEE 5th International Conference Actual Problems of Unmanned Aerial Vehicles Developments (APUAVD), 242–47. Kyiv, Ukraine: IEEE, 2019. https://doi.org/10.1109/APUAVD47061.2019.8943833.

Hadi Prayitno, Afen Sena, and Putra Wicaksono. “Building Digital and Sustainable Transportation of Indonesia Air Transport.” Journal of Information Technology, Computer Science and Electrical Engineering 1, no. S1 (April 2024): 26–28. https://doi.org/10.61306/jitcse.v1iS1.14.

Hasin, Farah, and Kazi Abu Taher. “Cyber Threat Mitigation of Impending ADS-B Based Air Traffic Management System Using Blockchain Technology.” In Advances in Intelligent Systems and Computing, edited by Kaiser M.S., Bandyopadhyay A., Mahmud M., and Ray K., 1309:545–56. Dhaka, Bangladesh: Springer Science and Business Media Deutschland GmbH, 2021. https://doi.org/10.1007/978-981-33-4673-4_44.

Ilyenko, Anna, Sergyi Gnatyuk, Sergii Ilyenko, Olena Prokopenko, and Valentyna Teliushchenko. “Module for Detecting and Analyzing Cyber Threats in Information and Communication Systems of Civil Aviation Facilities.” In CEUR Workshop Proceedings, edited by Sokolov V., Ustimenko V., Radivilova T., and Nazarkevych M., 3991:158–72. Ukraine: CEUR-WS, 2025.

Jeon, Sanghoon. “Improvement Measures for Aviation Security Policies and Security Management System Against Potential Cyber Threats In-Flight.” The Journal of Korean Institute of Communications and Information Sciences 48, no. 11 (November 2023): 1525–33. https://doi.org/10.7840/kics.2023.48.11.1525.

Kandera, Branislav, Simon Holoda, Marian Jancik, and Lucia Melnikova. “Supply Chain Risks Assessment of Selected EUROCONTROL’s Surveillance Products.” In 2022 New Trends in Aviation Development (NTAD), edited by Andoga R. and Fozo L., 86–89. Žilina, Slovakia: IEEE, 2022. https://doi.org/10.1109/NTAD57912.2022.10013524.

Klenka, Michal. “Aviation Cyber Security: Legal Aspects of Cyber Threats.” Journal of Transportation Security 14, no. 3–4 (December 2021): 177–95. https://doi.org/10.1007/s12198-021-00232-8.

Kusumadewi, Puan Maharani, Kholis Roisah, Adya Paramita Prabandari, and Ramalina Ranaivo Mikea Manitra. “Analisis Standar Penerbangan Di Indonesia Berdasarkan Hukum Udara Internasional.” Masalah-Masalah Hukum 52, no. 3 (October 2024): 262–71. https://doi.org/10.14710/mmh.52.3.2023.262-271.

Kutahya, Cengiz Kerem. “Securing the Digital Twin: Cybersecurity Strategies for Virtual Replicas in Aviation Management.” In Utilizing Cybersecurity to Foster Business Innovation and Resiliency, edited by Filiz Mizrak, 241–60. IGI Global, 2025. https://doi.org/10.4018/979-8-3693-6417-8.ch011.

Longdong, Bryan Dennis. “Pengaturan Hukum Mengenai Pendaftaran Pesawat Udara Menurut Undang-Undang No 1 Tahun 2009 Tentang Penerbangan.” Lex Privatum 9, no. 3 (2021): 151–61.

Lykou, Georgia, George Iakovakis, and Dimitris Gritzalis. “Aviation Cybersecurity and Cyber-Resilience: Assessing Risk in Air Traffic Management.” In Advanced Sciences and Technologies for Security Applications, 245–60. Athens, Greece: Springer, 2019. https://doi.org/10.1007/978-3-030-00024-0_13.

Maio, Francesco Di. “Centralized Security Governance for Air Navigation Services: Innovative Strategies to Confront Emerging Threats against Civil Aviation.” In 2014 International Carnahan Conference on Security Technology (ICCST), edited by Garzia F., Garzia F., Garzia F., Thomas G., and Pritchard D.A., 2014-Octob:1–6. Rome, Italy: IEEE, 2014. https://doi.org/10.1109/CCST.2014.6986968.

Malhotra, Ojaswini, Sharmistha Dey, Ernest Foo, and Marde Helbig. “Cyber Security Maturity Model Capability at The Airports.” In ACIS 2021 - Australasian Conference on Information Systems, Proceedings, 1–11. Brisbane, Australia: Association for Information Systems, 2021.

———. “Cybersecurity Maturity Model Capability in Aviation and Railway Industry.” In ACIS 2022 - Australasian Conference on Information Systems, Proceedings, 1–8. Brisbane, Australia: Association for Information Systems, 2022.

Malik, Haroon, Shahzaib Tahir, Hasan Tahir, Musfirah Ihtasham, and Fawad Khan. “A Homomorphic Approach for Security and Privacy Preservation of Smart Airports.” Future Generation Computer Systems 141 (April 2023): 500–513. https://doi.org/10.1016/j.future.2022.12.005.

Manitra, Ramalina Ranaivo Mikea, Callista Putri Bourdeau, Kylatifa Ghaniya Aristi, and Muhammad Hazel Nailah Akbar. “Vanishing Universal Norms? Rethinking Erga Omnes in International Humanitarian Law Principles.” Brawijaya Law Journal 12, no. 2 (October 2025): 257–81. https://doi.org/10.21776/ub.blj.2025.012.02.04.

Manitra, Ramalina Ranaivo Mikea, and Adya Paramita Prabandari. “AI in Hybrid Conflicts: Towards a Legal Framework for Cognitive Warfare.” Cogent Social Sciences 12, no. 1 (December 2026): 1–24. https://doi.org/10.1080/23311886.2026.2681304.

Marketing-Interactive. “Details of 45m Batik Air Customers Leaked in 2019 Reportedly Resurface Online.” Marekting-Interactive, September 2022.

Maurer, Nils, Thomas Graupl, Corinna Schmitt, and Gabi Dreo Rodosek. “PMAKE: Physical Unclonable Function-Based Mutual Authentication Key Exchange Scheme for Digital Aeronautical Communications.” In Proceedings of the IM 2021 - 2021 IFIP/IEEE International Symposium on Integrated Network Management, edited by Ahmed T., Festor O., Ghamri-Doudane Y., Kang J.-M., Schaeffer-Filho A.E., Lahmadi A., and Madeira E., 206–14. Wessling, Germany: Institute of Electrical and Electronics Engineers Inc., 2021.

Maurer, Nils, and Corinna Schmitt. “Towards Successful Realization of the LDACS Cybersecurity Architecture: An Updated Datalink Security Threat- And Risk Analysis.” In 2019 Integrated Communications, Navigation and Surveillance Conference (ICNS), 2019-April:1–13. Germany: IEEE, 2019. https://doi.org/10.1109/ICNSURV.2019.8735139.

Ministry of Transportation - Republic of Indonesia. “National Aviation Safety Plan 2024-2026.” ICAO, 2024.

Mizrak, Filiz, and Gonca Reyhan Akkartal. “Prioritizing Cybersecurity Initiatives in Aviation: A Dematel-QSFS Methodology.” Heliyon 10, no. 16 (August 2024): e35487. https://doi.org/10.1016/j.heliyon.2024.e35487.

Niraula, Madhu. “Cybersecurity and Interoperability of Aviation Safety Service Ecosystem.” In Integrated Communication, Navigation and Surveillance Conference (ICNS), April:1–12. United States: IEEE, 2022. https://doi.org/10.1109/ICNS54818.2022.9771482.

Nobles, Calvin. “Cyber Threats in Civil Aviation.” In Security Solutions for Hyperconnectivity and the Internet of Things, 272–301. United States Navy, Independent Researcher, United States: IGI Global, 2017. https://doi.org/10.4018/978-1-5225-0741-3.ch011.

———. “Cyber Threats in Civil Aviation.” In Emergency and Disaster Management, 1–3:119–41. United States: IGI Global, 2019. https://doi.org/10.4018/978-1-5225-6195-8.ch007.

Omolara, Abiodun Esther, Moatsum Alawida, and Oludare Isaac Abiodun. “Drone Cybersecurity Issues, Solutions, Trend Insights and Future Perspectives: A Survey.” Neural Computing and Applications 35, no. 31 (November 2023): 23063–101. https://doi.org/10.1007/s00521-023-08857-7.

Oz, Tuncel. “Cybersecurity as a Strategic Lever for Innovation in Smart Aviation Ecosystems: A Review of Emerging Trends.” In Utilizing Cybersecurity to Foster Business Innovation and Resiliency, edited by Filiz Mızrak, 103–22. Istanbul Ticaret University, Turkey: IGI Global, 2025. https://doi.org/10.4018/979-8-3693-6417-8.ch005.

Pearce, Hammond. “Counterfeits and Kill Switches.” In Futureshock, 154–72. Boca Raton: CRC Press, 2025. https://doi.org/10.1201/9781032702797-8.

Prabandari, Adya Paramita, and Ramalina Ranaivo Mikea Manitra. “Need of A Global Aviation Standard Compliance? Air Passenger Rights in Indonesia and Madagascar.” Jurnal Hukum IUS QUIA IUSTUM 32, no. 1 (January 2025): 207–38. https://doi.org/10.20885/iustum.vol32.iss1.art9.

Prabandari, Adya Paramita, and Efrema Ardratya Prakasita Puteri. “Standardization of Private Aircraft: Implications of Climate Change.” In IOP Conference Series: Earth and Environmental Science, 1270:012028. Indonesia: Institute of Physics, 2023. https://doi.org/10.1088/1755-1315/1270/1/012028.

Praditya, Editha, Syamsul Maarif, Yusuf Ali, Herlina Juni Risma Saragih, Rui Duarte, Firre An Suprapto, and Riant Nugroho. “National Cybersecurity Policy Analysis for Effective Decision-Making in the Age of Artificial Intelligence.” Journal of Human Security 19, no. 2 (2023): 91–106. https://doi.org/10.12924/johs2023.19020012.

Rakotoarisoa, Maminirina Fenitra, Heni Kurniasih, and Mikea Manitra Ramalina Ranaivo. “Advancing Regional Cooperation to Combat Marine Debris and Enhance Livelihoods in Indonesia: Translating Global Agendas into Local Action.” Marine Pollution Bulletin 224 (March 2026): 119097. https://doi.org/10.1016/j.marpolbul.2025.119097.

Republic of indonesia. “Enhancing Cybersecurity in Civil Aviation through National and International Collaboration.” ICAO, 2025.

Sabillon, Regner, and Juan Ramon Bermejo Higuera. “The Importance of Cybersecurity Awareness Training in the Aviation Industry for Early Detection of Cyberthreats and Vulnerabilities.” In Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), edited by Degen H., Ntoa S., and Moallem A., 14059 LNCS:461–79. Logroño, Spain: Springer Science and Business Media Deutschland GmbH, 2023. https://doi.org/10.1007/978-3-031-48057-7_29.

Saputra, Pradipta Nindyan, Arfin Sudirman, Obsatar Sinaga Sinaga, Wahyu Wardhana, and Nurul Hayana. “Addressing Indonesia’s Cyber Security through Public-Private Partnership (PPP).” Central European Journal of International and Security Studies 13, no. 4 (2019): 104–20.

Shah, Imdad Ali, N. Z. Jhanjhi, and Sarfraz Brohi. “Cybersecurity Issues and Challenges in Civil Aviation Security.” In Cybersecurity in the Transportation Industry, edited by Imdad Ali Shah and Noor Zaman Jhanjhi, 1–23. Kuala Lumpur, Malaysia: wiley, 2024. https://doi.org/10.1002/9781394204472.ch1.

Sheh, Raymond, Donald Harriss, and Karen Geappen. “Autonomous Aerial Drones Connecting Public Safety: Opportunities and Challenges for the Future.” In AUVSI XPONENTIAL, 1–26. United States: Association for Unmanned Vehicle Systems International, 2024.

Shueb, Masladdin M., Chuyang Yang, and Xiaongdon Che. “An Innovative Design for Improving U.S. Airports’ Cybersecurity Based on Blockchain Technology.” In 2024 Systems and Information Engineering Design Symposium, SIEDS 2024, 232–37. United States: Institute of Electrical and Electronics Engineers Inc., 2024. https://doi.org/10.1109/SIEDS61124.2024.10534684.

Sitabuana, Tundjung Herning, Ramalina Ranaivo Mikea Manitra, Dixon Sanjaya, Ibra Fulenzi Amri, and Nethan. “The Urgency of Artificial Intelligence Code of Ethics.” Indonesia Law Review 14, no. 3 (December 2024): 101–23. https://doi.org/10.15742/ilrev.v14n3.6.

Soesabdo, Hendronoto, Kurnia Toha, Ramalina Ranaivo Mikea Manitra, and Mevy Adine. “Global Competition Law Beyond Treaties: The Rise and Limits of Networks.” Juridical Tribune-Review of Comparative & International Law 16, no. 2 (2026): 204–23.

Sudarto, Lidia Rina Dyahtaryani, and Nanang Trianto. “Analysis of Defense and Cyber Security in Airspace Management in Indonesia.” LEX LAGUENS: Jurnal Kajian Hukum Dan Keadilan 2, no. 2 (2024): 1–10.

Taufik, A Fathan. “Indonesia’s Cyber Diplomacy Strategy as a Deterrence Means to Face the Threat in the Indo-Pacific Region.” Journal of Physics: Conference Series 1721, no. 1 (January 2021): 012048. https://doi.org/10.1088/1742-6596/1721/1/012048.

Torens, Christoph. “Safety versus Security in Aviation, Comparing Do-178c with Security Standards.” In AIAA Scitech 2020 Forum, 1 PartF:1–12. Braunschweig, Germany: American Institute of Aeronautics and Astronautics Inc, AIAA, 2020. https://doi.org/10.2514/6.2020-0242.

Ukwandu, Elochukwu, Mohamed Amine Ben-Farah, Hanan Hindy, Miroslav Bures, Robert Atkinson, Christos Tachtatzis, Ivan Andonovic, and Xavier Bellekens. “Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends.” Information 13, no. 3 (March 2022): 1–22. https://doi.org/10.3390/info13030146.

Utari, Indah Sri, Diandra Preludio Ramada, Ubaidillah Kamal, Ratih Damayanti, and Nizamuddin Alias. “The Digital Sanctuary: Forging Legal And Ethical Frameworks For Interfaith Coexistence Online.” Contemporary Issues on Interfaith Law and Society 4, no. 2 (2025). https://doi.org/10.15294/ciils.v4i2.35309.

Wahidah, Baiq Farhatul, Rizkiati Khasanah, and Fadly Husain. “Anatomical Traits and Economic Potential of Amorphophallus Variabilis and Conservation Implications in Selo Arjuno Forest, Central Java, Indonesia.” Biodiversitas 27, no. 2 (2026). https://doi.org/10.13057/biodiv/d270213.

Weiland, LV, and G Wei. “Evaluating the Impact of NextGen’s Air Traffic System on Aviation Security.” In MATEC Web of Conferences, edited by Nader Asnafi, 189:10030. Embry Riddle Aeronautical University, United States: EDP Sciences, 2018. https://doi.org/10.1051/matecconf/201818910030.

Wilis, Rakha, and Jeckson Sidabutar. “How Can Gov-CSIRT Indonesia Maintain National Cybersecurity in the Future?” In 2024 16th International Conference on Information Technology and Electrical Engineering (ICITEE), 440–45. Bogor, Indonesia: IEEE, 2024. https://doi.org/10.1109/ICITEE62483.2024.10808204.