Skip to content

Breakdown of the FAA Privacy ICAO Address Program

Gui Michel

Analyzes the effectiveness of the FAA's Privacy ICAO Address program against crowdsourced ADS-B aircraft tracking networks.

Summary

The FAA Privacy ICAO Address Program

In January 2020, the Federal Aviation Administration introduced the Privacy ICAO Address (PIA) program to allow general aviation aircraft operators to mask their identity by using temporary randomized hex codes.

Bypassing Masked Identifiers with ADS-B Networks

Despite using randomized ICAO addresses, crowdsourced ADS-B receiver networks can correlate departure airports, flight trajectories, and secondary radio transponder emissions to deanonymize enrolled aircraft.

Quantifying Privacy Loss Through Simulation

A custom privacy simulator models aircraft movements over time, demonstrating that even with expanded operator enrollment, persistent sensor coverage allows adversaries to reconstruct flight histories.

Architectural Solutions for Aviation Privacy

Enhancing the PIA program requires technical modifications, including synchronized dynamic address rotation and cryptographic flight plan authentication to prevent multi-point sensor tracking.

Related talks

Main Stage·44 min

  • DEF CON
  • Privacy
  • Date: Aug 2026
  • Location: Las Vegas

Cybertiger · Colonel Panic · The Wrew

Cybertiger, Colonel Panic, and The Wrew introduce low-cost counter-surveillance hardware built around the ESP32 to detect tracking devices.

surveillanceesp32hardware-hacking+3