Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen....
Transcript of Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen....
![Page 1: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/1.jpg)
Ahmed Abdel Wahab El MaradySenior Air Navigation Inspector, CNS/ATM, Egyptian Civil Aviation AuthorityMember of ICAO Secretariat Study Group on Cyber security, sub-group on Air Navigation [email protected]
Assessment of Potential Cyber Threats in Next Generation Air Traffic Surveillance Systems and Mitigations Techniques.
![Page 2: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/2.jpg)
Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences of security threats in ADS-B Mitigations techniques
1. Comparison between ADS-B and other Surveillance sensors (WAM)2. Data Fusion with consistency check3. Velocity/ position prediction4. AoA and sector antenna5. Received Power strength vs range correlation 6. TDoA vs Range Correlation
7. Artificial intelligent and machine learning
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 2
![Page 3: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/3.jpg)
Role of Surveillance
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 3
7.3 billion passengers are expected by 2034: require accurate surveillance
Source: IATA forecasts passenger demand to double over 20 years. [Online]. Available: www.iata.org/passenger-forecast.
![Page 4: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/4.jpg)
Role of Surveillance
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 4
• Ability to accurately determine, track and update the position of aircraft
• An indication of any unexpected aircraft movements
Separation standard How efficiently air space can be utilized
![Page 5: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/5.jpg)
Surveillance
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 5
Primary Surveillance Radar (PSR)Secondary Surveillance Radar
(SSR)Multilateration (MLAT)Automatic Dependent
Surveillance – Broadcast (ADS-B)
![Page 6: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/6.jpg)
Next gen. Air traffic surveillance (ADS-B)
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 6
• Low cost receivers• Extremely Accurate• High update rate • Can Reduce min separation • More Information
– Identity of the aircraft– Can provide heading,
speed
![Page 7: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/7.jpg)
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 7
Type Comparison
Cost Accuracy Update rate
Security
ADS-BVery Low
High High LowSpoofing
EavesdroppingJamming
![Page 8: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/8.jpg)
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 8
1090 MHZ
Potential Security threats in ADS-B
![Page 9: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/9.jpg)
Potential Security threats in ADS-B
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 9
Jamming
Spoofing (adding fake targets,
modification of real messages)
![Page 10: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/10.jpg)
Hazard/ Consequences of security threats in ADS-B
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 10
Hazard Worst case consequences
Jamming
Spoofing
Partial/full loss of traffic picture
“fake” tracks.Increases Air Traffic Controller (ATCO) workload
![Page 11: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/11.jpg)
1. Comparison between ADS-B and other Surveillance sensors (WAM)
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 11
Accept
ADS-B message report
WAM message report Reject
ADS-B message report
WAM message reportDisadvantages
![Page 12: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/12.jpg)
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 12
Correlation
ADS-B signal
MLAT signal
YesNo spoofing is detected
No
Spoofing is detected
MLAT/ADS-B data fusion
49 %
Source: Enhancing accuracy and security of ADSB via MLAT assisted-flight information system, in: 2017 12th International Conference on Computer Engineering and Systems (ICCES)
2. Data Fusion with Consistency check
Disadvantages
![Page 13: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/13.jpg)
3. Velocity/ position prediction
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 13
RejectPrior locations
ADS-B message report
Predicted location
AcceptADS-B message report
![Page 14: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/14.jpg)
3. Velocity/ position predictionFrog Boiling attack
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 14
Prior locations
Accept
Actual Trajectory
Fake ADS-B trajectory
![Page 15: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/15.jpg)
4. AoA, Sector Antenna
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 15
![Page 16: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/16.jpg)
4. AoA, sector antenna
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 16
AcceptADS-B message report
RejectADS-B message report
Disadvantages
![Page 17: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/17.jpg)
5. Received Power strength vs range correlation
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 17
Rx 2
Rx 1
Rx 3
Rx 4
P2
P1 P4
P3
ADS-B message report
Position estimated from received power
?
Reject
Accept
Disadvantages
![Page 18: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/18.jpg)
6. TDoA vs Range Correlation
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 18
Rx 2
Rx 1
Rx 3
Rx 4
t2
t1 t4
t3
ADS-B message report
Position estimated from TDoA
?
Reject
Accept
![Page 19: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/19.jpg)
6. TDoA vs Range Correlation
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 19
Disadvantages
Synchronization
Multi-path environment
Low Accuracy
Rx 1
![Page 20: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/20.jpg)
7. Artificial intelligent and machine learning
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 20
Long
itude
Fingerprint Map
Latitude
Offline training phase
![Page 21: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/21.jpg)
7. Artificial intelligent and machine learning
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 21
Area of Interest
Online localization phase
Determine the best location matches Incoming fingerprint
![Page 22: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/22.jpg)
7. Artificial intelligent and machine learning
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 22
Advantages
Determining location of aircraft regardless ADS-B massage report
Works well in less Synchronization
Works well in Multi-path environment
High localization Accuracy
![Page 23: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/23.jpg)
Conclusion
Cybersecurity and resilience Symposium - Amman- Jordan, 15-17 October 2019 23
Coverage
Accuracy
Reliability
Availability
Quality of service
TrustHow to measure it
How to enhance it
CommunicationNavigationSurveillance
![Page 24: Assessment of Potential Cyber Threats in Next Generation Air … · 2019-10-30 · Agenda Next gen. Air traffic surveillance (ADS-B) Potential Security threats in ADS-B Hazard / Consequences](https://reader034.fdocuments.us/reader034/viewer/2022042101/5e7dfc3ef3fb2070af433576/html5/thumbnails/24.jpg)