Hackers could haunt global air traffic control: researcher

Air traffic control software used around the world could be exploited by hackers to unleash squadrons of ghost planes to befuddle those entrusted to keep the skies safe, a security researcher said Thursday.

Cyprus-based Andrei Costin demonstrated his findings at a Black Hat gathering of cyber defenders that ends Thursday in Las Vegas.

"This is for information only," Costin said as he outlined how someone with modest tech skills and about $2,000 worth of electronics could vex air traffic controllers or even stalk celebrities traveling in private jets.

"Everything you do is at your own risk."

Costin's target was an ADS-B system in place for aircraft to communicate with one another and with air traffic control systems at airports.

The system, which has been rolled out internationally in recent years in a multi-billion dollar upgrade, was designed to better track aircraft so airport traffic can flow more efficiently.

A perilous flaw is that the system is not designed to verify who is actually sending a message, meaning that those with malicious intent can impersonate aircraft either as pranks or to cause mayhem, according to Costin.

"There is no provision to make sure a message is genuine," he said.

"It is basically an inviting opportunity for any attacker with medium technical knowledge."

Air traffic controllers faced with a signal from a fake airplane resort to cross-checking flight plans, putting relevant portions of air space off limits while they work.

"Imagine you inject a million planes; you don't have that many people to cross-check," Costin said. "You can do a human resource version of a denial of service attack on an airport."

Denial of service attacks commonly used by hackers involve overwhelming websites with so many simultaneous online requests that they crash or slow to the point of being useless.

Aviation agencies are adept at identifying and locating "rogue transmitters" on the ground, but not at countering signals from drones or other robotic aircraft becoming more common and available, according to the researcher.

Another danger in the new-generation air traffic control system, according to Costin, is that position, velocity and other information broadcast by aircraft isn't encrypted and can be snatched from the air.

"Basically, you can buy or build yourself a device to capture this information from airplanes," Costin said.

He listed potential abuses including paparazzi being able to track private jets carrying celebrities or other famous people.

Costin showed how a friend was able to identify a plane broadcasting the identification numbers of Air Force One, the military jet used by the US president, and plot it on a map on an iPad.

"It can be a very profitable business model for criminals to invest a small amount of money in radios, place them around the world" and then sell jet tracking services or information about flights, the independent researcher said.

"If it was Air Force One, why does Air Force One show itself?" Costin wondered aloud. "It is a very high profile target and you don't want everyone to know it is flying over your house."

There are websites with databases matching aircraft registration numbers with listed owners.

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • A weekend of premium cars
    A weekend of premium cars

    Good news to all luxury car fanatics as PGA Cars, the exclusive importer and distributor of Audi, Porsche, Lamborghini and Bentley cars in the country, will be holding the PGA Cars Premium Festival from May 29 to May 31 at the PGA Center in Global City in Taguig. The 3-day event will showcase PGA’s latest […] The post A weekend of premium cars appeared first on Carmudi Philippines. …

  • APEC ministers to endorse Boracay Action Agenda
    APEC ministers to endorse Boracay Action Agenda

    Trade ministers at the Asia-Pacific Economic Cooperation (APEC) meeting in Boracay, Aklan agreed yesterday to endorse the proposed Boracay Action Agenda to the member countries’ leaders, presenting opportunities for global trade for micro, small and medium enterprises (MSMEs). In a press conference following the conclusion of the APEC Ministers Responsible for Trade Meeting, Trade Secretary Gregory Domingo, who also served as chairman, said ministers agreed to recommend the adoption of the …

  • Talks with China over sea row urged
    Talks with China over sea row urged

    The Philippines should engage China in bilateral talks in its efforts to maintain peace and order at the disputed West Philippine Sea, Sen. Francis Escudero said yesterday. Escudero supports the government’s move to bring the issue before international arbitration but also stressed the need for the Philippines to pursue talks with China. Escudero made the statement after UN Secretary General Ban Ki-moon on Friday called for a peaceful solution to territorial disputes in the South China Sea. …

  • House panel tackles bill on regular disaster drills
    House panel tackles bill on regular disaster drills

    The House committee on national defense is deliberating on a measure mandating the regular conduct of disaster risk reduction drills in educational institutions nationwide. Authored by Camarines Sur Rep. Rolando Andaya Jr., the bill mandates that risk reduction drills be held annually in all educational institutions throughout the country in coordination with the schools’ respective local government units. “The Philippines’ location along the Pacific Ring of Fire and close to the equator …

  • PCSO running out of funds
    PCSO running out of funds

    Philippine Charity Sweepstakes Office (PCSO) chairman Ireneo Maliksi has admitted that the revenue-generating agency is running out of funds as it continues with its mandate to provide financial assistance to indigent Filipinos. Aside from providing financial help to individual recipients, Maliksi cited at least 13 laws that mandates the PCSO to provide mandatory contribution to different government agencies. Just last week, PCSO released P100 million to the Commission on Higher Education as …

  • Cops receive mid-year bonus
    Cops receive mid-year bonus

    Active duty uniformed and non-uniformed personnel of the Philippine National Police (PNP)have received their mid-year bonuses. However, the bonus of personnel with pending administrative and criminal cases has been deferred as per administrative policy, according to PNP spokesman Senior Superintendent Bartolome Tobias. The PNP has released P1.9 billion for the mid-year bonus of the 155,000 active duty uniformed and non-uniformed personnel. …

  • Catholics organize to promote pope's climate change message

    NEW YORK (AP) — There will be prayer vigils and pilgrimages, policy briefings and seminars, and sermons in parishes from the U.S. to the Philippines. …

  • Forgotten for decades, fallen NY soldier finally honored
    Forgotten for decades, fallen NY soldier finally honored

    ALBANY, N.Y. (AP) — Carroll Heath didn't have it easy growing up in the Great Depression. His father wasn't around, his mother was a patient in a mental hospital and he kept largely to himself. Soon after graduating high school, he enlisted in the Army and wound up in the Philippines, where he's believed to have died sometime in 1942. …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options