The ever-evolving cyber-threat to PLANES

[Lite Beer]

ANALYSIS
The ever-evolving cyber-threat to PLANES
ERIC RANDOLPH
AGENCE FRANCE-PRESSE
PARIS

Hackers and cyber-terrorists present an ever-evolving threat to airlines, with experts constantly testing for new vulnerabilities - including the fear that drones could be used to throw a plane off course.

Most agree hacking a plane would be a near-impossible feat, but some professional hackers have claimed airline computer systems are riddled with weaknesses that could allow someone to break in, perhaps even through the in-flight entertainment system.

US computer security expert Chris Roberts recently claimed to have hacked into a plane's controls through the entertainment console and to have issued a "climb" command.

But speaking at the Paris Air Show this week, Alain Robic of Deloitte Consulting, an expert on cyber-security, said the claims were not credible.

Robic was working for Airbus in 2005 when a hacker showed them how he could penetrate the flight controls from a passenger seat while they were designing the new A380.

"The bosses were shocked. It was a revolutionary moment. They re-engineered everything to separate the systems so it could never happen again," said Robic.

But there are plenty of other risks - and although they are unlikely, companies such as Airbus and Boeing take them very seriously.

David Stupples, a professor of electronic and radio systems at City University in London who advises Airbus, said the latest threat he was exploring was whether a drone could be used to send radio signals to an aircraft and confuse its systems.

"If I could get a signal to the aircraft that caused it to become confused while it's on its final approach, could I cause an incident? My view is yes," said Stupples, adding that flying near to the plane could allow the drone to overpower signals from the ground.

Stopping this kind of activity means preventing drones from flying near airports - something which has only recently become possible with new forms of radar capable of spotting tiny aircraft.

The enemy within

Stupples said there was a greater threat of an employee with access to the computer data hubs uploading malware to an aircraft's systems.

"It could be a dissatisfied employee, or someone who has been bribed or who is doing it for a cause," he said.

Even this would be almost impossible, since airlines have highly complex, specially designed computing systems that only a handful of people know how to navigate.

"Between the probability of someone understanding what they're doing, the probability of getting the malware in and the probability of it acting like they want - the odds are pretty remote," said Stupples.

Even if all those factors came together perfectly, hackers would almost certainly not be able to take full control of the aircraft since pilots have manual overrides.

"But to crash, all you have to do is push the flight control systems into an unstable situation," said Stupples.

"I wouldn't say it's easy, but it's possible."

'Constantly probing'

While public concerns tend to focus on the terrorist risk, companies face a much more immediate and frequent threat from hackers trying to steal their commercial secrets.

Hacks can cost tens of millions of dollars to repair and could be used to extort money by planting threats.

As aviation goes increasingly digital, threats have adapted.

"A lot of data is now automatically uploaded to planes so they can remove the risk of human error as much as possible," said a pilot for a major airline, who was not allowed to give his name.

Many airlines now issue their pilots and cabin crew with iPads because they weigh less than piles of charts and passenger logs.

"The airlines are ultra-strict with us about the security of our iPads and everything else - much stricter than with passengers because they worry about coercion, that our family has been kidnapped or something," said the pilot.

Robic said it was time for the whole aeronautic industry to create a joint cybersecurity organisation to combine their efforts.

"There is a whole ecosystem of staff that needs to be secured. There are a great many actors from development to maintenance, which exposes airlines to cyber risks," he said.

"What they're doing at the moment is not sufficient."

Source: http://www.nationmultimedia.com/opinion/The-ever-evolving-cyber-threat-to-PLANES-30262706.html

-- The Nation 2015-06-20

[Chao Lao Beach]

It is facinating why people are so scared of a perceived threat, but happily go on Thai roads everyday where they have a very real chance of dieing.

[arjunadawn]

It is facinating why people are so scared of a perceived threat, but happily go on Thai roads everyday where they have a very real chance of dieing.

There is not so much a likelihood that a car on the BKK tollway would be taken and used to kill you while lying on the beach or at the massage place. I think this is the current fear, not general fear of flying stuff.

Yes, I think the greater concern beyond the individual concern of safety is of the planes being used as missiles.

[Seastallion]

It is facinating why people are so scared of a perceived threat, but happily go on Thai roads everyday where they have a very real chance of dieing.

There is not so much a likelihood that a car on the BKK tollway would be taken and used to kill you while lying on the beach or at the massage place. I think this is the current fear, not general fear of flying stuff.

Yes, I think the greater concern beyond the individual concern of safety is of the planes being used as missiles.

Used as missiles is so yesterday! 9/11 was over a decade ago. (Which doesn't mean it won't be revived).

It's the MH370 type scenario that flyers are scared of and which this potential software-based terrorism could facilitate...if the OP is to be believed at face value.

I don't think the possibility of precision flying into a target is considered here. It's crashing a plane, randomly, that is the worry.

[arjunadawn]

It is facinating why people are so scared of a perceived threat, but happily go on Thai roads everyday where they have a very real chance of dieing.

There is not so much a likelihood that a car on the BKK tollway would be taken and used to kill you while lying on the beach or at the massage place. I think this is the current fear, not general fear of flying stuff.

Yes, I think the greater concern beyond the individual concern of safety is of the planes being used as missiles.

Used as missiles is so yesterday! 9/11 was over a decade ago. (Which doesn't mean it won't be revived).

It's the MH370 type scenario that flyers are scared of and which this potential software-based terrorism could facilitate...if the OP is to be believed at face value.

I don't think the possibility of precision flying into a target is considered here. It's crashing a plane, randomly, that is the worry.

Fair enough. I think the earlier post is incorrectly used to contrast airline travel. It is widely stated that driving is so much safer than flying a plane, statistically. I assume it is this perspective that the previous poster comes from. However, the issue is basically sabotage and were a new back door discovered that could widely affect such a dire outcome we all pretty much agree it would be used. I disagree with the underlying premise that planes as missiles was so yesterday, whatever that means. Following that logic America should never have added air defenses to the mainland because the attack on Hawaii was so yesterday, etc. Its a valid concern where continued vigilance is always required because a failure here would have greater value for attackers than simply the act itself; it would demonstrate a consistent ability to strike irrespective of defense, a wholly demoralizing scenario.

But sure, crashing the plane is equally a threat and quite possibly the next simplest scenario to act out sensational terror.

[Seastallion]

We're on the same page.

It's "so yesterday" (under-40's speak for out of fashion) because security is such now that (physical) hijacking is nigh on impossible. To be used as a missile, the plane needs to be piloted.

The underwear bomber and the shoe bomber were hoping only for a crash.

Prior to 9/11, hijackings did occur all around the world, and for various reasons, every now and then. Since 9/11, how many hijackings have occurred, globally?

The reduction to zero of hijackings is the one and only thing I'm grateful to George Dubbya Bush's post-9/11 measures for.

[Srikcir]

A drone carrying a non-nuclear electromagnetic pulse generator might be used to short out most of an aircraft's critical avionics. Manual overrides may not be useful if the aircraft is mostly fly by-wire-technology.