A Cybersecurity Framework for Seaplane Operations

As seaplane services develop into a component of Greece’s national transport network, the aircraft, the docks and the energy infrastructure that supports them increasingly depend on connected digital systems. This connectivity enables efficient operations, and it also introduces exposure to cyber threats. Sea Plane Fortress (SPF) is the Horizon Europe subproject established to address that exposure, with Parity Platform serving as subproject lead.

The problem SPF addresses

A seaplane operation comprises a chain of interconnected systems that must communicate in real time: telemetry from the aircraft, charging and refueling control at the dock, a cloud monitoring back end and a digital twin that mirrors the operating environment. Each of these data flows represents a potential point at which an adversary could interfere with operations, manipulate readings or disrupt energy delivery.

SPF treats this chain as critical infrastructure and protects it accordingly. The subproject delivers a cybersecurity framework developed specifically for the digital twin and the cloud monitoring back end used across both electric and conventional seaplane operations. The objective is to maintain the integrity of every real-time data flow, from sensor measurement to operator action.

Built on proven foundations

SPF builds directly on two applications that Parity Platform already operates in the field, EV Loader and EV Safe. Both were designed to manage and secure charging infrastructure, a domain closely related to the recharging and refueling systems on which a seaplane network depends.

The disciplines that protect an electric vehicle charging point apply equally to a seaplane dock:

• Hardening the communication protocols that carry control commands and telemetry, including OCPP, MQTT and REST.
• Securing the real-time data paths for telemetry, charging and refueling control through hardened OCPP and REST interfaces.
• Aligning the architecture with the EUDOROS reference model, so the toolset conforms to an established security blueprint.

The framework produces an operator dashboard and an edge and cloud deployment of the SPF toolset suitable for use on operational infrastructure rather than in a laboratory setting alone.

Validation approach

The SPF toolset is validated through three complementary methods:

• Penetration testing to identify weaknesses from an adversarial perspective.
• Attack simulations that reproduce realistic cyber-attack scenarios against the recharging and refueling infrastructure.
• A pilot deployment on live infrastructure, which evaluates the toolset under operational conditions.

Together, these methods assess the framework against both isolated vulnerabilities and coordinated attacks, and confirm its performance outside controlled environments.

Partner responsibilities

The subproject brings together three complementary partners, with responsibilities clearly divided.

Parity Platform (PARITY) serves as subproject lead and application developer. As a Greek SME developing secure charging infrastructure software, Parity adapts its EV Loader monitoring platform, introduces the cybersecurity toolset for seaplane recharging and refueling, hardens the communication protocols, and delivers both the operator dashboards and the edge and cloud deployment.

The University of Patras (UPATRAS) provides the research foundation. Through the Cyber-Physical Energy Systems team within the Power Systems, Renewable and Distributed Generation Laboratory, UPATRAS develops anomaly detection and resilient control algorithms for the recharging and refueling infrastructure. The team also employs its real-time digital simulation facilities to model cyber-attack scenarios and integrate them directly with the SPF toolset, enabling attacks to be analysed before they reach operational systems.

Hellenic Seaplanes (HSP) participates as the priority entity and end user. As a transport operator developing a nationwide seaplane network, HSP supplies the operational requirements, provides real-world recharging and refueling infrastructure and operational data, hosts the pilot deployment, and leads end-user validation of the toolset.

Relevance beyond seaplanes

While SPF concerns seaplane operations specifically, the approach it establishes has wider application. Electric and conventional transport increasingly share a common digital backbone of connected energy delivery, real-time telemetry and cloud monitoring centred on a digital twin. Securing that backbone for seaplanes yields methods, tools and protocol hardening that transfer to other energy-intensive transport modes.

For Parity Platform, SPF demonstrates how expertise in charging infrastructure software extends into adjacent critical infrastructure. The operating environment differs and the protocols vary in application, but the central requirement remains constant: preserving the integrity of data and the trustworthiness of control systems.

As seaplane networks expand across Greece and elsewhere, the operations that support them will continue to grow in complexity and connectivity. Sea Plane Fortress is intended to ensure that this connectivity is delivered securely.

For further information, visit the official Sea Plane Fortress project site or review Parity Platform’s wider cybersecurity activities.