Hackers could haunt global air traffic control: researcher

Air traffic control software used around the world could be exploited by hackers to unleash squadrons of ghost planes to befuddle those entrusted to keep the skies safe, a security researcher said Thursday.

Cyprus-based Andrei Costin demonstrated his findings at a Black Hat gathering of cyber defenders that ends Thursday in Las Vegas.

"This is for information only," Costin said as he outlined how someone with modest tech skills and about $2,000 worth of electronics could vex air traffic controllers or even stalk celebrities traveling in private jets.

"Everything you do is at your own risk."

Costin's target was an ADS-B system in place for aircraft to communicate with one another and with air traffic control systems at airports.

The system, which has been rolled out internationally in recent years in a multi-billion dollar upgrade, was designed to better track aircraft so airport traffic can flow more efficiently.

A perilous flaw is that the system is not designed to verify who is actually sending a message, meaning that those with malicious intent can impersonate aircraft either as pranks or to cause mayhem, according to Costin.

"There is no provision to make sure a message is genuine," he said.

"It is basically an inviting opportunity for any attacker with medium technical knowledge."

Air traffic controllers faced with a signal from a fake airplane resort to cross-checking flight plans, putting relevant portions of air space off limits while they work.

"Imagine you inject a million planes; you don't have that many people to cross-check," Costin said. "You can do a human resource version of a denial of service attack on an airport."

Denial of service attacks commonly used by hackers involve overwhelming websites with so many simultaneous online requests that they crash or slow to the point of being useless.

Aviation agencies are adept at identifying and locating "rogue transmitters" on the ground, but not at countering signals from drones or other robotic aircraft becoming more common and available, according to the researcher.

Another danger in the new-generation air traffic control system, according to Costin, is that position, velocity and other information broadcast by aircraft isn't encrypted and can be snatched from the air.

"Basically, you can buy or build yourself a device to capture this information from airplanes," Costin said.

He listed potential abuses including paparazzi being able to track private jets carrying celebrities or other famous people.

Costin showed how a friend was able to identify a plane broadcasting the identification numbers of Air Force One, the military jet used by the US president, and plot it on a map on an iPad.

"It can be a very profitable business model for criminals to invest a small amount of money in radios, place them around the world" and then sell jet tracking services or information about flights, the independent researcher said.

"If it was Air Force One, why does Air Force One show itself?" Costin wondered aloud. "It is a very high profile target and you don't want everyone to know it is flying over your house."

There are websites with databases matching aircraft registration numbers with listed owners.

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • Sy moves up, Villar enters Forbes list of billionaires
    Sy moves up, Villar enters Forbes list of billionaires

    Eleven Filipinos are included in Forbes’ 2015 list of richest people in the world. Filipino-Chinese tycoon Henry Sy Sr. continues to be the wealthiest man in the Philippines. The 90-year-old SM supermalls, banking and property tycoon ranked 73rd among the world’s richest with an increased net worth of $14.2 billion from $11.4 billion last year. Sy’s net worth was attributed to the continued growth of his SM Investments Corp. and his more recent venture, the City of Dreams Manila resort and …

  • US ambassador slashed and bloodied in Seoul attack
    US ambassador slashed and bloodied in Seoul attack

    The US ambassador to South Korea, Mark Lippert, was slashed on his face and arm in Seoul on Thursday by a lone, blade-wielding activist opposed to ongoing US-Korean military drills. The United States condemned the "act of violence" which left the ambassador bleeding profusely from a deep wound on his right cheek and saw him rushed to hospital where his condition was described as stable. Witnesses described how a man with a blade concealed in his right hand had lunged across a table at Lippert …

  • US billionaire says WWII Japanese ship found in Philippines
    US billionaire says WWII Japanese ship found in Philippines

    Microsoft co-founder Paul Allen said Wednesday he had found one of Japan's biggest and most famous battleships on a Philippine seabed, some 70 years after American forces sank it during World War II. Excited historians likened the discovery, if verified, to finding the Titanic, as they hailed the American billionaire for his high-tech mission that apparently succeeded after so many failed search attempts by others. Allen posted photos and video online of parts of what he said was the …

  • World's oldest person wonders about secret to longevity too
    World's oldest person wonders about secret to longevity too

    TOKYO (AP) — The world's oldest person says 117 years doesn't seem like such a long time. …

  • New Moro rebel group emerges
    New Moro rebel group emerges

    A radical Muslim cleric trained in the Middle East and considered one of the leaders of the Bangsamoro Islamic Freedom Fighters (BIFF) has broken away from the terror group to form his own band of jihadists who are now reportedly providing sanctuary to bomb expert Basit Usman and at least five foreign militants, the military said yesterday. Armed Forces of the Philippines (AFP) spokesman Col. Restituto Padilla, citing reports from the field, said the Justice for Islamic Movement (JIM) was …

  • Pacquiao big hit so far in Vegas sports books vs Mayweather

    LAS VEGAS (AP) — Manny Pacquiao has always believed he can do what 47 other fighters before him have failed to do — beat Floyd Mayweather Jr. in the ring. …

  • Australian drug smugglers being taken to Indonesian island for execution - media
    Australian drug smugglers being taken to Indonesian island for execution - media

    By Jane Wardell and Beawiharta SYDNEY/DENPASAR, Indonesia (Reuters) - Two convicted Australian drug smugglers were removed from a prison in Bali on Wednesday to be taken to an Indonesian island where they will be shot by firing squad, Australian media reported. The planned executions of Myuran Sukumaran, 33, and Andrew Chan, 31, have ratcheted up diplomatic tensions amid repeated pleas of mercy for the pair from Australia and thrown a spotlight on Indonesia's increasing use of the death …

  • Jolo apologizes to Bong in visit
    Jolo apologizes to Bong in visit

    Cavite Vice Gov. Jolo Revilla wept and embraced his father as he apologized for the “accidental” shooting incident in their Ayala Alabang residence, the family’s spokesman said yesterday. Lawyer Raymund Fortun came out of the private room at the Asian Hospital and Medical Center in Muntinlupa City to speak to reporters, who were barred from entering the hospital compound during the visit of Sen. Ramon “Bong” Revilla Jr. …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options