Subscribe free to our newsletters via your
. 24/7 Space News .




AEROSPACE
Hackers could haunt global air traffic control: researcher
by Staff Writers
Las Vegas (AFP) July 26, 2012


Air traffic control software used around the world could be exploited by hackers to unleash squadrons of ghost planes to befuddle those entrusted to keep the skies safe, a security researcher said Thursday.

Cyprus-based Andrei Costin demonstrated his findings at a Black Hat gathering of cyber defenders that ends Thursday in Las Vegas.

"This is for information only," Costin said as he outlined how someone with modest tech skills and about $2,000 worth of electronics could vex air traffic controllers or even stalk celebrities traveling in private jets.

"Everything you do is at your own risk."

Costin's target was an ADS-B system in place for aircraft to communicate with one another and with air traffic control systems at airports.

The system, which has been rolled out internationally in recent years in a multi-billion dollar upgrade, was designed to better track aircraft so airport traffic can flow more efficiently.

A perilous flaw is that the system is not designed to verify who is actually sending a message, meaning that those with malicious intent can impersonate aircraft either as pranks or to cause mayhem, according to Costin.

"There is no provision to make sure a message is genuine," he said.

"It is basically an inviting opportunity for any attacker with medium technical knowledge."

Air traffic controllers faced with a signal from a fake airplane resort to cross-checking flight plans, putting relevant portions of air space off limits while they work.

"Imagine you inject a million planes; you don't have that many people to cross-check," Costin said. "You can do a human resource version of a denial of service attack on an airport."

Denial of service attacks commonly used by hackers involve overwhelming websites with so many simultaneous online requests that they crash or slow to the point of being useless.

Aviation agencies are adept at identifying and locating "rogue transmitters" on the ground, but not at countering signals from drones or other robotic aircraft becoming more common and available, according to the researcher.

Another danger in the new-generation air traffic control system, according to Costin, is that position, velocity and other information broadcast by aircraft isn't encrypted and can be snatched from the air.

"Basically, you can buy or build yourself a device to capture this information from airplanes," Costin said.

He listed potential abuses including paparazzi being able to track private jets carrying celebrities or other famous people.

Costin showed how a friend was able to identify a plane broadcasting the identification numbers of Air Force One, the military jet used by the US president, and plot it on a map on an iPad.

"It can be a very profitable business model for criminals to invest a small amount of money in radios, place them around the world" and then sell jet tracking services or information about flights, the independent researcher said.

"If it was Air Force One, why does Air Force One show itself?" Costin wondered aloud. "It is a very high profile target and you don't want everyone to know it is flying over your house."

There are websites with databases matching aircraft registration numbers with listed owners.

.


Related Links
Aerospace News at SpaceMart.com






Comment on this article via your Facebook, Yahoo, AOL, Hotmail login.

Share this article via these popular social media networks
del.icio.usdel.icio.us DiggDigg RedditReddit GoogleGoogle








AEROSPACE
Clemson researchers transform machine to make runways safer
Clemson SC (SPX) Jul 27, 2012
Clemson researchers redesigned and modified a mobile drill press to retrofit a section of a runway that halts overrun aircraft, ultimately minimizing aircraft damage and passenger injury. The process of retrofitting the end of a runway at Greenville Downtown Airport required more than 80,000 holes to be drilled in the concrete. Pace Pavement Technologies recognized that manually drilling the hol ... read more


AEROSPACE
Another Small Step for Mankind

Russia starts building Moon spaceship, eyes Lunar base

Plans to revisit Moon impeded by financial difficulties

Russia says no manned moon shots till 2018

AEROSPACE
Mars Orbiter Repositioned to Phone Home Mars Landing

Opportunity Picks up the Pace With Several Drives This Week

Taking the Heat Lockheed Martin Aeroshell Will Protect Mars Science Lab Descent

Mystery of missing Mars signals solved

AEROSPACE
XCOR Releases Payload Users Guide for Lynx Suborbital Vehicle

NASA Offers Condolences on the Passing of Pioneering Astronaut Sally Ride

Sally Ride, first US woman in space dead at 61

America Invents Act is a game changer

AEROSPACE
Looking Forward to Shenzhou 10

Argentina, China ink space cooperation deal

Looking Forward to Shenzhou 10

Astronauts in good shape after return

AEROSPACE
Another Progress Freighter Re-Docking Attempt Set for July 29

Japanese cargo craft docks with ISS

White Stork Delivers New Research and Technology Investigations to ISS

Russian cargo ship fails to dock at ISS: NASA

AEROSPACE
The Intelsat 20 integrated on to Ariane 5 for upcoming flight

Arianespace's Ariane 5 receives its HYLAS 2 payload

Initial build-up is underway for Arianespace's fifth Ariane 5 launch in 2012

U.S. Bank Helps Fuel Future Space Flight as Bank behind SpaceX

AEROSPACE
RIT Leads Development of Next-generation Infrared Detectors

UCF Discovers Exoplanet Neighbor

Can Astronomers Detect Exoplanet Oceans

The Mysterious Case of the Disappearing Dust

AEROSPACE
Apple pitches gadget security to hacker crowd

Bolivian satellite operators to be trained in China

Scientists create artificial mother of pearl

Google seeks to close book in author copyright case




The content herein, unless otherwise known to be public domain, are Copyright 1995-2014 - Space Media Network. AFP, UPI and IANS news wire stories are copyright Agence France-Presse, United Press International and Indo-Asia News Service. ESA Portal Reports are copyright European Space Agency. All NASA sourced material is public domain. Additional copyrights may apply in whole or part to other bona fide parties. Advertising does not imply endorsement,agreement or approval of any opinions, statements or information provided by Space Media Network on any Web page published or hosted by Space Media Network. Privacy Statement