Cybersecurity risk assessment for aerospace-aviation networks using a Pythagorean fuzzy multi-criteria framework

Rapid digitalization in aerospace-aviation defense networks has significantly enhanced operational capabilities but simultaneously exposed these trust-based networks to advanced cybersecurity threats. Traditional defense mechanisms often fall short in identifying and mitigating increasingly sophisticated cyberattacks targeting interconnected aviation systems. This paper introduces a novel cybersecurity risk assessment framework, the Pythagorean Fuzzy Cybersecurity Risk Assessment (PFCRA), specifically designed to identify and prioritize cybersecurity threats in trust-based aerospace-aviation networks. PFCRA integrates well-established methodologies such as Failure Modes and Effects Analysis (FMEA), Fine-Kinney, and DREAD within a multi-criteria decision-making (MCDM) structure enhanced by Pythagorean Fuzzy Stepwise Weight Assessment Ratio Analysis (PF-SWARA) and Pythagorean Fuzzy Evaluation based on Distance from Average Solution (PF-EDAS). A real-world case study conducted within the Turkish defense aviation sector reveals and prioritizes 35 critical cybersecurity risks, emphasizing vulnerabilities such as inadequate authentication, sophisticated social engineering attacks, ransomware threats, and weaknesses in encryption control management. Sensitivity analyses across various scenarios demonstrate the robustness and adaptability of the proposed framework. Findings underscore the necessity of adopting proactive cybersecurity measures, including advanced multi-factor authentication, continuous security training, robust encryption practices, and building comprehensive cybersecurity awareness among personnel. The presented framework provides aviation stakeholders with an advanced, structured, and intelligence-based method to enhance cybersecurity defenses in trust-based aviation networks, significantly improving network resilience against emerging cyber threats.