Air Traffic Control Insecurity 2.0
Righter Kunkel - Air Traffic Control Insecurity 2.
Summary
Architecture and Background
Righter Kunkel - Air Traffic Control Insecurity 2.0 This presentation will be a follow up to my "Air Traffic Control: Insecurity and ADS-B" talk last year. I will give a quick overview of what has changed since last year.
Vulnerability Analysis
I will cover a few insecurity's today. How bad is your network when the FAA requires firewalls between critical flight systems and passengers surfing the web on the new 787 plane.
Exploitation and Demonstrations
I give a caution to all the executive jet owners that it will be much easier to track flights. As always, I want to open peoples eyes to the insecurity of the ATC system.
Remediation and Defensive Strategies
Righter Kunkel (CISA, CISSP, CISM) is a security researcher. He is a private pilot with about 230 hours of flight time. Righter's background includes positions as global education manager and senior network security consultant at CyberGuard Corporation. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·21 min
K Miltenberger · N Fredericksen
Examines cyber and physical attack surfaces across global maritime logistics, cargo container cranes, and automated port terminals.
Main Stage·36 min
Tom Tervoort
Discloses severe cryptographic implementation flaws in the OPC UA industrial communication standard, allowing adversaries to bypass encryption and spoof OT commands.
Main Stage·43 min
David Meléndez · Gabriela Garcia
Practical exploitation of legacy railroad track signaling protocols and physical infrastructure using low-cost hardware.