Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror

Slashdot videos: Now with more Slashdot!

  • View

  • Discuss

  • Share

We've improved Slashdot's video section; now you can view our video interviews, product close-ups and site visits with all the usual Slashdot options to comment, share, etc. No more walled garden! It's a work in progress -- we hope you'll check it out (Learn more about the recent updates).

×
Government Security IT Your Rights Online

Researcher Finds Security Holes In FAA's New Flight Control System 60

Posted by samzenpus
from the blue-screen-and-sky dept.
gManZboy writes "A key component of the FAA's emerging 'Next Gen' air traffic control system is fundamentally insecure and ripe for manipulation and attack, security researcher Andrei Costin said in a presentation Wednesday at Black Hat 2012. Costin outlined a series of issues related to the Automatic Dependent Surveillance-Broadcast (ADS-B) system, a replacement to the decades-old ground radar system used to guide airplanes through the sky and on the ground at airports. Among the threats to ADS-B: The system lacks a capability for message authentication. 'Any attacker can pretend to be an aircraft' by injecting a message into the system, Costin said. There's also no mechanism in ADS-B for encrypting messages. One example problem related to the lack of encryption: Costin showed a screen capture showing the location of Air Force One — or that someone had spoofed the system."
This discussion has been archived. No new comments can be posted.

Researcher Finds Security Holes In FAA's New Flight Control System

Comments Filter:
  • by capedgirardeau (531367) on Friday July 27, 2012 @08:40AM (#40789069)

    There is a reason this info is not encrypted: People need to know where airplanes are in the sky, especially other planes, including private aircraft.

    You don't really want airplanes location in the sky to be a secret or you literally run in to serious trouble.

  • by Anonymous Coward on Friday July 27, 2012 @09:16AM (#40789321)

    True, but since ATC's DO provide info to FCS's,

    No they don't. Period. ATC NEVER provides direct control to planes. PILOTS provide information to FCS, which may or may not be provided via ATC, which may or may not be at least partially based on ADS. Its also worth noting that ADS is not intended to replace radar in high traffic areas, which are in fact the areas most likely targeted for tom foolery.

How can you work when the system's so crowded?

Working...