Demonstrating ADS-B AND CPDLC Attacks with Software-Defined Radio

Abstract

Several studies have shown insufficient security in air traffic communication. Controller-Pilot Datalink Communications (CPDLC) is used to communicate in text over the VHF data link, and Automatic Dependent Surveillance – Broadcast (ADS-B) determines the position of an aircraft. The vulnerability of air data communication was confirmed by successful experiments using Software-Defined Radio, where both CPDLC and ADS-B messages were transmitted in a safe environment. Neither ADS-B messages nor CPDLC messages are encrypted during transmission. The encoding of FANS-1/A messages was demonstrated, and the experiments showed that it is possible to send such messages with relatively inexpensive technology.