What I Learned Trying to Hack a 737
Examines the architecture and security design of Boeing 737 Communication Management Units through embedded reverse engineering.
Summary
Reverse Engineering Avionics Hardware
Communication Management Units (CMUs) aboard Boeing 737 aircraft handle critical communications and operational telemetry between flight systems and ground networks. Reverse engineering two separate CMU models reveals unique hardware architectures distinct from standard commercial embedded systems.
Certification and Design Assurance Levels
Avionics systems require certification to strict Design Assurance Level (DAL) safety criteria under FAA and international airworthiness standards. These safety baselines prevent faults from propagating into flight control systems or disrupting cockpit communication channels.
Balancing Safety with Custom Airline Software
Commercial airlines routinely require custom airline operational communications (AOC) applications to manage passenger logistics, flight dispatching, and engine health reporting. Aircraft manufacturers address these competing needs by isolating certified baseline firmware from airline-specific software environments.
Embedded Architecture and Flight Isolation
An examination of 737 CMU internal architectures demonstrates how systems partition network domains, manage shared bus lines, and enforce strict boundary controls across operational avionics.
Related talks
Aerospace Village·25 min
Alex Lomas · Ken Munro
Tours a decommissioned Boeing 747 airframe to examine cockpit systems, avionics bays, and physical attack surfaces.
Aerospace Village·24 min
Michael Vanguardia
Outlines Boeing's product security framework for integrating cyber resiliency into commercial airplane design and verification.
Aerospace Village·27 min
Javad Dadgar · Mohammad-Reza Zamiri · Reza Dorosti
Uses reverse engineering to uncover vulnerabilities in flight management computers and demonstrates manipulation of navigation data.


