The Engineer Who Saw the Human Gap in Aviation Cybersecurity, And Built the Platform to Close It
When security researchers talk about vulnerabilities in aviation systems, the conversation tends to focus on infrastructure. Firewalls. Network perimeters. Software patches. The assumption embedded in most threat models is that if the technology is hardened, the system is safe.
Omolayo Ifeoluwa Success spent years working inside Nigerian Air Force communication environments. He knows that assumption is wrong.
"The systems can be perfectly configured," he said last Thursday. "But if the person operating that system does not recognise what an anomaly looks like, the configuration means very little."
That observation, drawn from years of working in high-stakes, high-consequence air-ground communication security, is what eventually led him to build SkyShield Edu, a cybersecurity simulation platform that is quietly redefining how aviation personnel are trained to respond to digital threats.
A Problem Hidden in Plain Sight
Aviation has one of the most rigorous safety cultures of any industry in the world. Checklists, redundancy systems, mandatory reporting protocols, the operational discipline is exceptional.
But cybersecurity readiness tells a different story.
Across both military and civil aviation environments, personnel are trained extensively in physical and procedural safety. What they rarely receive is practical, scenario-based exposure to cyber incidents, the kind of training that builds instinct rather than just awareness.
The consequences of that gap are not theoretical. As aviation systems become increasingly digital and interconnected, the attack surface is expanding rapidly. Communication systems, navigation infrastructure, and base operations platforms are all potential entry points for threat actors who understand that the human operator is often the weakest link in an otherwise fortified chain.
Industry analysts have pointed to this as one of the most underprepared areas in critical infrastructure security globally. In the African context specifically, where aviation digitalisation is accelerating without a corresponding investment in cybersecurity training, the exposure is particularly acute.
Ifeoluwa saw this gap forming years before it became a mainstream conversation.
Building the Answer From First Principles
SkyShield Edu is not a repackaged version of generic cybersecurity training content. That distinction matters, and it is one Ifeoluwa is deliberate about.
"Most existing platforms were built for corporate IT environments," he explained. "The threat scenarios, the language, the decision frameworks, none of it maps to what an air traffic controller or a communication officer actually experiences on the job."
What he built instead is a platform architected around operational realism. Users are not presented with abstract modules about phishing or social engineering. They are placed inside simulated environments that mirror the specific conditions of aviation communication systems, complete with timed decisions, cascading consequences, and scenario complexity that adapts based on how the user performs.
The platform's scenario library covers ten distinct incident types drawn directly from real threat intelligence relevant to aviation environments. These include communication jamming, GPS spoofing, unauthorised access attempts on air traffic control consoles, data corruption events, and ransomware scenarios targeting base operations infrastructure.
What makes the architecture technically distinctive is its adaptive learning engine. Rather than progressing users through a fixed curriculum, SkyShield Edu analyses response patterns, how quickly a user reacts, how accurately they identify the nature of a threat, how consistently they apply the correct escalation protocol, and adjusts the difficulty and complexity of subsequent scenarios accordingly.
"The goal was to build something that gets harder as you get better," Ifeoluwa said. "Because in a real incident, the threat does not pause while you catch up."
The Architecture Behind the Platform
Under the hood, SkyShield Edu reflects the kind of technical rigour that comes from someone who has built systems where failure is not an option.
The platform runs on a microservices backend, a scenario engine and an adaptive learning service operating independently, which allows the simulation layer to scale without degrading the analytics performance. User session data, decision logs, and performance scores are stored in PostgreSQL, while Redis handles real-time session caching to keep the scoring engine responsive during live simulations.
The adaptive difficulty model uses a reinforcement learning approach, with behavioural clustering applied to identify user patterns that indicate readiness for increased complexity. Supervisors and training administrators access a dedicated dashboard that surfaces performance trends, flags users who may need additional support, and generates exportable training reports.
For an institution managing the cybersecurity readiness of dozens or hundreds of personnel, that visibility is operationally significant. It moves cybersecurity training from an event, a once-a-year compliance checkbox, into a continuous, measurable capability development process.
The Broader Signal for African Aviation Security
Ifeoluwa's work does not exist in isolation from the wider fintech and digital infrastructure security conversation happening across Nigeria and the continent. His engineering work at SABO Finance, a digital FX and financial platform, has given him direct exposure to how digital platforms fail under security pressure, and how reliability engineering disciplines can be applied to prevent those failures before they occur.
That dual experience, air-ground communication security on one side, live fintech platform reliability on the other, gives his perspective on SkyShield Edu a credibility that purely academic or research-based approaches to the problem cannot replicate.
He is not theorising about what aviation personnel need. He has operated in the environments where those needs originate.
What Comes Next
Ifeoluwa is clear that SkyShield Edu is built for scale. The architecture was deliberately designed to support institutional deployment, military training commands, civil aviation authorities, and private aviation operators who need a cost-effective, evidence-based solution to a problem that is only going to grow.
"The systems are only as strong as the people operating them," Ifeoluwa said. "If we can close that human gap, we change the security equation entirely."