Airborne WiFi: Rogue Waves in the Sky
Investigates in-flight commercial airline Wi-Fi infrastructure and Evil Twin rogue access points, detailing SOC analyst detection strategies using ADS-B telemetry.
Summary
The Architecture of In-Flight Airline Wi-Fi
Commercial airliners integrate on-wing satellite radomes, cellular air-to-ground antennas, and cabin wireless access points to provide passenger in-flight internet access.
Evil Twin Rogue Access Points in the Cabin
m0nkeydrag0n recounts real-world discoveries of Evil Twin captive portal attacks deployed aboard commercial passenger flights to harvest passenger credentials mid-flight.
Correlating Cabin Network Telemetry with ADS-B Data
SOC analysts hunting airborne threats must correlate onboard gateway logs, captive portal redirects, and flight telemetry (ADS-B / satellite logs) to pinpoint rogue access points.
Investigative Playbooks for Aviation Cyber Defense
Developing detection heuristics for in-flight networks empowers security analysts to identify deceptive browser portals and protect travelers against airborne cyber attacks.
Related talks
RF Village·25 min
Matthew Thomassen · Sean McKeever
Presents aerial Wi-Fi scanning research from a Cessna aircraft, analyzing antenna configurations, altitude effects, and thousands of captured airborne access points.
Wireless Village·23 min
Eric Escobar
Explores defensive techniques and sensor architectures for detecting rogue access points, evil twins, and wireless intrusions.
Blacks in Cybersecurity Village·37 min
Malachi Walker
Introduces Domain Intelligence Analysis, leveraging proactive DNS artifacts and registration telemetry to detect adversary infrastructure before public IOC disclosures.