Hackers could haunt global air traffic control: researcher

Air traffic control software used around the world could be exploited by hackers to unleash squadrons of ghost planes to befuddle those entrusted to keep the skies safe, a security researcher said Thursday.

Cyprus-based Andrei Costin demonstrated his findings at a Black Hat gathering of cyber defenders that ends Thursday in Las Vegas.

"This is for information only," Costin said as he outlined how someone with modest tech skills and about $2,000 worth of electronics could vex air traffic controllers or even stalk celebrities traveling in private jets.

"Everything you do is at your own risk."

Costin's target was an ADS-B system in place for aircraft to communicate with one another and with air traffic control systems at airports.

The system, which has been rolled out internationally in recent years in a multi-billion dollar upgrade, was designed to better track aircraft so airport traffic can flow more efficiently.

A perilous flaw is that the system is not designed to verify who is actually sending a message, meaning that those with malicious intent can impersonate aircraft either as pranks or to cause mayhem, according to Costin.

"There is no provision to make sure a message is genuine," he said.

"It is basically an inviting opportunity for any attacker with medium technical knowledge."

Air traffic controllers faced with a signal from a fake airplane resort to cross-checking flight plans, putting relevant portions of air space off limits while they work.

"Imagine you inject a million planes; you don't have that many people to cross-check," Costin said. "You can do a human resource version of a denial of service attack on an airport."

Denial of service attacks commonly used by hackers involve overwhelming websites with so many simultaneous online requests that they crash or slow to the point of being useless.

Aviation agencies are adept at identifying and locating "rogue transmitters" on the ground, but not at countering signals from drones or other robotic aircraft becoming more common and available, according to the researcher.

Another danger in the new-generation air traffic control system, according to Costin, is that position, velocity and other information broadcast by aircraft isn't encrypted and can be snatched from the air.

"Basically, you can buy or build yourself a device to capture this information from airplanes," Costin said.

He listed potential abuses including paparazzi being able to track private jets carrying celebrities or other famous people.

Costin showed how a friend was able to identify a plane broadcasting the identification numbers of Air Force One, the military jet used by the US president, and plot it on a map on an iPad.

"It can be a very profitable business model for criminals to invest a small amount of money in radios, place them around the world" and then sell jet tracking services or information about flights, the independent researcher said.

"If it was Air Force One, why does Air Force One show itself?" Costin wondered aloud. "It is a very high profile target and you don't want everyone to know it is flying over your house."

There are websites with databases matching aircraft registration numbers with listed owners.

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • ‘Next leader must not be newbie’
    ‘Next leader must not be newbie’

    Vice President Jejomar Binay believes the next president of the Philippines must have vast experience and a long track record in governance and in dealing with crises. “I am very much convinced that the local government is the best training ground for those who want to run for national government positions,” he said. Binay said he is determined to run for president in 2016 on the strength of his competence and track record. …

  • Massacre suspect tests negative for poisoning
    Massacre suspect tests negative for poisoning

    A suspect in the Maguindanao massacre case who had been examined at the Philippine General Hospital (PGH) tested negative for poisoning, medical records released yesterday showed. However, the Quezon City court handling the multiple murder case resolved to isolate Police Officer 1 Pia Kamidon from the rest of the accused detained at Camp Bagong Diwa in Taguig for his safety. In a two-page order, Regional Trial Court Branch 221 assisting Judge Genie Gapas-Agbada ordered jail officials to …

  • ‘Homework first before Facebook’
    ‘Homework first before Facebook’

    President Aquino elicited laughter from students here as he reminded them to open books first before Facebook. “Finish your assignments first before making a raid in the Clash of Clans,” Aquino said, referring to a popular online game. In a speech during the turnover yesterday of two new three-story buildings at the Tarlac National High School, he said the government could only provide opportunities for learning but the rest of the work would be up to the students. The new school buildings …

  • Espina resignation confirmed; Noy looks for replacement
    Espina resignation confirmed; Noy looks for replacement

    President Aquino ended speculations yesterday and confirmed that Deputy Director General Leonardo Espina had indeed resigned as officer-in-charge of the Philippine National Police. As of this time, we are conducting various interviews and checks on the various candidates,” Aquino told reporters at the Tarlac National High School in Tarlac City. Aquino had kind words for Espina, saying that he stood by and defended the 44 slain police Special Action Force (SAF) commandos in the operation in …

  • Palace welcomes G7 concern over sea reclamation
    Palace welcomes G7 concern over sea reclamation

    President Aquino welcomed yesterday the Group of Seven industrialized countries’ expression of concern over rising tension in the West Philippine Sea and South China Sea, calling it a clear indication of the global scope of the problem ramped up by China’s massive reclamation activities in disputed waters. In Tarlac City where he led the turnover of new classrooms, Aquino told reporters that goodwill and not tension must prevail in the West Philippine Sea and South China Sea, where territorial …

  • DepEd, TESDA tie up for K to 12
    DepEd, TESDA tie up for K to 12

    The Department of Education (DepEd) has partnered with the Technical Education and Skills Development Authority (TESDA) in the first two years of implementation of the K to 12 program. “We will use TESDA centers as technical-vocational laboratories for senior high school,” DepEd Secretary Armin Luistro said during the inauguration of 30 new classrooms at the Tarlac National High School yesterday. The classrooms were constructed in partnership with the Philippine Amusement and Gaming Corp. …

  • SE Asia Stocks-Philippine falls on foreign selling; others flat to weaker

    BANGKOK, April 17 (Reuters) - Southeast Asian stock markets ended flat to weaker on Friday as Philippine stocks slid on selling led by foreign funds and Singapore shares extended losses with investors ... …

  • Philippine Airlines parent says back in black
    Philippine Airlines parent says back in black

    Philippine Airlines' parent firm said it had returned to profitability, the first time in three years either entity reported being in the black for an entire year. In a filing with the Philippine Stock Exchange Thursday, PAL Holdings reported an after-tax net profit of 129.74 million pesos ($2.93 million) in its fiscal year to December 31. …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options