A Deeper Dive into ILS and ADS-B Spoofing
Examines the fundamental protocol weaknesses that enable RF spoofing attacks against Instrument Landing Systems and ADS-B broadcasts.
Summary
Reliance on Unauthenticated Aviation Wireless Protocols
Civil aviation navigation and surveillance protocols were designed decades ago with a focus on signal reliability and availability, omitting modern cryptographic protections.
Mechanics of Instrument Landing System Spoofing
The Instrument Landing System (ILS) utilizes amplitude-modulated VHF and UHF directional radio beams to guide approaching aircraft along the runway localizer and glide path.
Injecting Ghost Aircraft via ADS-B
Because Automatic Dependent Surveillance-Broadcast (ADS-B) transmissions lack sender authentication, software-defined radios can inject false aircraft tracks with deceptive speeds, altitudes, and callsigns.
Addressing Fundamental Wireless Deficiencies
Mitigating wireless spoofing requires sensor fusion on the aircraft, cross-verifying radio navigation coordinates with optical sensors and radar, and integrating cryptographic message verification.
Related talks
Aerospace Village·10 min
Alex Lomas
Demonstrates how spoofed TCAS and ILS signals can induce automated autopilot climb or descent responses on commercial aircraft.
Aerospace Village·24 min
Rick Hansen
Explores the application of software-defined radios for analyzing and testing RF communications across aerospace cyber environments.
Aerospace Village·23 min
Harshad Sathaye
Explains the principles of GPS signal manipulation and reviews hands-on spoofing attack scenarios and receiver mitigation techniques.