Automatic-dependent surveillance-broadcast (ADS-B) is a cornerstone of the next-generation digital sky and is now mandated in several countries. However, there have been many reports of serious security vulnerabilities in the ADS-B architecture. In this article, we demonstrate and evaluate the impact of multiple cyberattacks on ADS-B via remote radio frequency links that affected various network, processing, and display subsystems used within the ADS-B ecosystem. Overall we implemented and tested 12 cyberattacks on ADS-B in a controlled environment, out of which 5 attacks were presented or implemented for the first time. For all these attacks, we developed a unique testbed that consists of 36 tested configurations. Each of the attacks was successful on various subsets of the tested configurations. In some attacks, we discovered wide qualitative variations and discrepancies in how particular configurations react to and treat ADS-B inputs that contain errors or contradicting flight information, with the main culprit almost always being the software implementation. In some other attacks, we managed to cause denial of service by remotely crashing/impacting more than 50% of the test set that corresponded to those attacks. We also implemented, and report some practical countermeasures to these attacks. We demonstrated that the strong relationship between the received signal strength and the distance-to-emitter might help verify the aircraft.s advertised ADS-B position and distance. For example, our best machine learning models achieved 90% accuracy in detecting attackers' spoofed ADS-B signals.


    Access

    Download


    Export, share and cite



    Title :

    Cybersecurity Attacks on Software Logic and Error Handling Within ADS-B Implementations: Systematic Testing of Resilience and Countermeasures


    Contributors:


    Publication date :

    2022-08-01


    Size :

    4879110 byte




    Type of media :

    Article (Journal)


    Type of material :

    Electronic Resource


    Language :

    English




    Cybersecurity and Cyber Resilience

    Marshall, Douglas M | Wiley | 2022


    Cybersecurity and Countermeasures at the Time of Pandemic

    Rabie A. Ramadan / Bassam W. Aboshosha / Jalawi Sulaiman Alshudukhi et al. | DOAJ | 2021

    Free access

    Cybersecurity Testing and Validation

    Ward, David / Wooderson, Paul | SAE Technical Papers | 2017


    Understanding and investigating adversary threats and countermeasures in the context of space cybersecurity

    Thangavel, Kathiravan / Plotnek, Jordan Joseph / Gardi, Alessandro et al. | IEEE | 2022


    Cybersecurity Attacks in Vehicle-to-Infrastructure Applications and Their Prevention

    Islam, Mhafuzul / Chowdhury, Mashrur / Li, Hongda et al. | Transportation Research Record | 2018