Hacking into airliner systems
Moderators: North Shore, sky's the limit, sepia, Sulako, lilfssister, I WAS Birddog
Hacking into airliner systems
I was thinking about this today. Do you think it`s possible to hack into an airline system from a passenger seat? I don`t know of anything wireless on the B737- maintenance always needs a hard connection. I`m not sure about newer airplanes. ACARS is wireless, but I don`t think there would be a way to get data from the ACARS to some other systems. Maybe delete a flight plan, but that`s about it and even that`s a real long shot. I definitely don`t think you could hack into an FCC or ECU.
-
- Top Poster
- Posts: 8133
- Joined: Tue Apr 15, 2008 12:25 pm
- Location: Winterfell...
Re: Hacking into airliner systems
I would imagine that there are certification standards that demand robust partitions of flight critical software from non flight critical ones... if not actual physical partitions.
I think it would be easier to pull floorboards up and start messing with control cables than to 'hack' an airliner.
I think it would be easier to pull floorboards up and start messing with control cables than to 'hack' an airliner.
Geez did I say that....? Or just think it....?
-
- Rank 10
- Posts: 2577
- Joined: Wed Mar 16, 2005 11:07 pm
- Location: Negative sequencial vortex
Re: Hacking into airliner systems
I don't think so. There was a "scientist" of some stripe a couple of years ago who was fear-mongering on the subject when the Boeing 787 control system was being talked about for some reason. I'm sorry I don't remember the specifics but at the time I did some research and basically found out he was full of crap. I wish I could remember more. Basically he was saying that you could use the plane's wifi entertainment system to hack into the control system, or to fiddle with the navigation information in a way that would make the plane "think" it was following the flight plan but was actually doing the evil-doer's bidding. There were two levels of B.S. to his basic premise- he thought the entertainment system and the flight control system were the same "computer", and also he sort of seemed to forget that there are still two guys and a bunch of windows up there, along with conventional ADF and VOR type things that can't really be "hacked" into. I'm sure someone would notice some discrepancies if the plane started following a phoney signal from one of its nav sources.
Seemed kind of like basic fear-mongering and attention-seeking to me anyway. I figure somebody had been watching "Die Hard" too many times.
Seemed kind of like basic fear-mongering and attention-seeking to me anyway. I figure somebody had been watching "Die Hard" too many times.

If I'd known I was going to live this long, I'd have taken better care of myself
- mdscientist61
- Rank 2
- Posts: 89
- Joined: Tue Dec 09, 2008 2:25 pm
Re: Hacking into airliner systems
Is this the researcher you are thinking of? He has had quite a busy week.
His first adventure reported on 2015-April-18
https://www.eff.org/deeplinks/2015/04/u ... k-security
His second adventure reported on 2015-April-19
http://www.cnet.com/news/twitter-joking ... wyer-says/
Hmmm, if this guys keeps up with this act of his then he might end up having to walk home..
His first adventure reported on 2015-April-18
https://www.eff.org/deeplinks/2015/04/u ... k-security
His second adventure reported on 2015-April-19
http://www.cnet.com/news/twitter-joking ... wyer-says/
Hmmm, if this guys keeps up with this act of his then he might end up having to walk home..

Re: Hacking into airliner systems
Most aircraft flying today are immune from passenger tampering via computer. Any IFE including WLAN networks are independent and only connected to the aircraft systems via a one-way (read only) data connection.
Some newer aircraft have bi-directional interfaces to aircraft databuses but there are security protocols that must be followed to prevent any tampering. You'd have a better chance if you could connect to a CAIMS connector with your laptop. That would be scary.
ACARS is broadcast via VHF or HF datalink or SATCOM. It doesn't contain any command data, just information. Many operators tweak the ACARS data codes making them difficult for others to decode the messages. I don't know of any way to screw much up with ACARS data.
Some newer aircraft have bi-directional interfaces to aircraft databuses but there are security protocols that must be followed to prevent any tampering. You'd have a better chance if you could connect to a CAIMS connector with your laptop. That would be scary.
ACARS is broadcast via VHF or HF datalink or SATCOM. It doesn't contain any command data, just information. Many operators tweak the ACARS data codes making them difficult for others to decode the messages. I don't know of any way to screw much up with ACARS data.
Re: Hacking into airliner systems
Unless you strictly use fiber optics or shielded databuses/computers, there are always theoratical ways of reading/modifying inputs/outputs.
Going for the deck at corner
Re: Hacking into airliner systems
I know a few of the Engineers who sign their names to Type Certificate Data Sheets for these planes. They have these risks figured already. But, proving this security is making certification testing more involved and expensive!
-
- Rank 11
- Posts: 4722
- Joined: Mon Feb 16, 2004 2:33 am
- Location: YYC 230 degree radial at about 10 DME
Re: Hacking into airliner systems
Doesn't it usually take a bored 12 year old in his mom's basement to find security flaws in computer systems and point them out?
Re: Hacking into airliner systems
From a airplane seat? Try the comfort of their own home using a cell phone.
http://www.bloomberg.com/bw/articles/20 ... roid-phone
http://www.bloomberg.com/bw/articles/20 ... roid-phone
-
- Rank 10
- Posts: 2577
- Joined: Wed Mar 16, 2005 11:07 pm
- Location: Negative sequencial vortex
Re: Hacking into airliner systems
...all you basically need to know right there, chaps. These people are having a good time making a fuss, and taking advantage of the fact that most people still don't know how aeroplanes work. Even if a "hacker" was able to fiddle with navigation information, there's still ATC watching the plane's course, and let's try and remember the red button on the control column, I can't think of any way a "hacker" can influence what that does...“The described technique cannot engage or control the aircraft’s autopilot system using the FMS or prevent a pilot from overriding the autopilot,” said Dorr.
Again, people watching too much "die hard".
'Course, with this remote-controlled drone airliner of the future issue, I suppose all bets are off.
If I'd known I was going to live this long, I'd have taken better care of myself
Re: Hacking into airliner systems
I have always wondered how hard it would be to create a fake VOR / DME / NDB signal from inside the plane to guide the plane wherever you want, assuming it is tracking said beacon.
You are only a few meters away from the antenna, where as the actual beacon is almost always miles away. Especially the NDB one shouldn't be too hard. A strong signal, walk around in the plane and you can send it wherever you want if you take your time.
You are only a few meters away from the antenna, where as the actual beacon is almost always miles away. Especially the NDB one shouldn't be too hard. A strong signal, walk around in the plane and you can send it wherever you want if you take your time.
As an AvCanada discussion grows longer:
-the probability of 'entitlement' being mentioned, approaches 1
-one will be accused of using bad airmanship
-the probability of 'entitlement' being mentioned, approaches 1
-one will be accused of using bad airmanship
Re: Hacking into airliner systems

I think that one is pretty unrealistic.
-
- Rank 7
- Posts: 650
- Joined: Sat May 09, 2009 6:16 pm
Re: Hacking into airliner systems
An NDB beacon would be hard to spoof from inside an aircraft. While you could easily transmit on the correct frequency, the signal would not be interpreted properly by the ADF receiver since you are in the near field and the orientation to the antennas is all wrong. An NDB should be in the far field (at least 10 wavelengths away but preferably more) to be tracked by an ADF. A VOR signal would be a little bit easier to do since it's higher frequency. The wavelength is less than 3 m so you could be close to the far field in a larger aircraft. The receiver also doesn't care about which direction the signal is coming from, just the phase difference of the two signals.digits_ wrote:I have always wondered how hard it would be to create a fake VOR / DME / NDB signal from inside the plane to guide the plane wherever you want, assuming it is tracking said beacon.
"People who say it cannot be done should not interrupt those who are doing it." -George Bernard Shaw
Re: Hacking into airliner systems
In die hard they hacked into the ground based ils from the church to try and crash an airliner, also spoofing communications and taking out the lights. Luckily John mclean had a lighter for his smokes and blew up the escaping terrorists while also creating a great visual aid. Yippy ky yay motha*%$%^&!
Re: Hacking into airliner systems
I'm pretty sure I saw somewhere where a guy was able to manipulate the in-flight entertainment system using the USB connector. I don't know if it was true but worst case scenario would be for everyone to watch a movie with subliminal messages I guess
like Fight Club!
On a side note, Boeing has some patents out for technology where ground ops can effectively lock out the cockpit crew and take over an airplane when a hijack etc is suspected. I don't think the technology is out there yet but I can see it being implemented with the whole one crew cockpit push by companies like Embrear.
My personal though on that one is, if there's a will there's a way. Like most modern computer attacks in recent memory, you don't need to actually get into a system to create havoc. DDoS attacks come to mind.

On a side note, Boeing has some patents out for technology where ground ops can effectively lock out the cockpit crew and take over an airplane when a hijack etc is suspected. I don't think the technology is out there yet but I can see it being implemented with the whole one crew cockpit push by companies like Embrear.
My personal though on that one is, if there's a will there's a way. Like most modern computer attacks in recent memory, you don't need to actually get into a system to create havoc. DDoS attacks come to mind.
Every war when it comes, or before it comes, is represented not as a war but as an act of self-defense against a homicidal maniac. George Orwell
Disclaimer: The above post was not meant to offend anyone.
Disclaimer: The above post was not meant to offend anyone.
Re: Hacking into airliner systems
You're correct in stating that it would be impossible to spoof from inside. That's because of the nature of the signal. The ADF looks at the direction the signal waves are coming from and to make matters worse, it really doesn't matter because you can't couple an AFCS to the ADF. The worst thing you can do is interrupt the ball game for the pilots or maybe (big maybe) interfere with the marker on an approach. (In Canada anyway)An NDB beacon would be hard to spoof from inside an aircraft. While you could easily transmit on the correct frequency, the signal would not be interpreted properly by the ADF receiver since you are in the near field and the orientation to the antennas is all wrong. An NDB should be in the far field (at least 10 wavelengths away but preferably more) to be tracked by an ADF. A VOR signal would be a little bit easier to do since it's higher frequency. The wavelength is less than 3 m so you could be close to the far field in a larger aircraft. The receiver also doesn't care about which direction the signal is coming from, just the phase difference of the two signals.
You are also correct in that a VOR is easy to spoof but again, not for the reason stated. A VOR signal carries all the intelligence for a receiver to determine the bearing to the station. Techs use VOR ramp test sets all the time in this manner. The bearing is adjusted by changing the phase relationship between the transmitted reference and variable frequencies.
There aren't many other radios that you can spoof unless you include VHF COM. There are instances of people giving false ATC instructions to aircraft. GPS, DME, MB are pretty tough. ACARS can be received and decoded by anyone with a VHF airband receiver and a $2 smartphone APP.
Regardless, spoofing the radios are no more severe that a failure of any of those systems. There are plenty of checks and balances to prevent people from brining such devices on board and to identify failures of the equipment and correct.
Re: Hacking into airliner systems
A question you guys should know the answer to:
Is it really possible, and have there been known cases where cell phone signals or other broadcasting signals have actually interfered with onboard navigation equipment? Or is it a case of "better safe than sorry" until proven otherwise?
Is it really possible, and have there been known cases where cell phone signals or other broadcasting signals have actually interfered with onboard navigation equipment? Or is it a case of "better safe than sorry" until proven otherwise?
Re: Hacking into airliner systems
It almost made me fly into a church tower. First few hours on a glass cockpit avidyne system in a PA28. After take-off the speed was underreading. So instincitvely you lower the nose. Untill you look outside (yes I should have done that sooner, inexperienced and fany new toys in the plane many years ago). GPS failed as well en route.Rockie wrote:A question you guys should know the answer to:
Is it really possible, and have there been known cases where cell phone signals or other broadcasting signals have actually interfered with onboard navigation equipment? Or is it a case of "better safe than sorry" until proven otherwise?
I switched off my cellphone and everything came back to life. Turned it back on and off 3 more times in the next 5 flying hours and the problems always appeared / disappeared as expected. Probably something wrong with the wiring, as it shouldn't happen. But it did.
So in the swiss cheese model: yes it makes a difference.
As an AvCanada discussion grows longer:
-the probability of 'entitlement' being mentioned, approaches 1
-one will be accused of using bad airmanship
-the probability of 'entitlement' being mentioned, approaches 1
-one will be accused of using bad airmanship