FBI warns on airline hacking threat following tweet
- Published
An increasing number of airlines are offering onboard wi-fi to customers
The US Federal Bureau of Investigation (FBI) has issued a formal alert telling airlines to be on the lookout for hackers.
It follows an onboard tweet from security expert Chris Roberts, who joked about being able to hack into a United Airlines plane's wi-fi network.
A terrorist could theoretically take over systems that fly a plane by compromising equipment at their seat.
United Airlines has now banned Mr Roberts from all its flights.
The FBI and the US Transportation Security Administration (TSA) said they had no information to support claims a plane's navigation system could be interfered via its onboard wi-fi kit, but added that they were evaluating the evidence.
In a private industry notification posted on its website and , the FBI advised airlines to:
report any suspicious activity involving travellers connecting unknown cables or wires to the in-flight entertainment (IFE) system
report any evidence of suspicious behaviour following a flight, such as IFE systems that show evidence of tampering or the forced removal of covers to network connection ports
report any evidence of suspicious behaviour concerning aviation wireless signals, including social media messages with threatening references to onboard network systems, automatic dependent surveillance systems (ADS-B), aircraft communications addressing and reporting systems (ACARS) and air traffic control networks
review network logs from aircraft to ensure any suspicious activity, such as network scanning or intrusion attempts, would be captured for further analysis
In his tweet, Mr Roberts suggested that he might be able to deploy the oxygen masks on the flight.
Chris Roberts's tweet:
"Find myself on a 737/800, lets see Box-IFE-ICE-SATCOM, ? Shall we start playing with EICAS messages? "PASS OXYGEN ON" Anyone ? :)"
(EICAS refers to the engine indicating and crew alerting system)
On arrival at Syracuse airport, Mr Roberts - who is co-founder of security company One World Labs - was taken in for questioning by the FBI, and his laptop and other devices were seized.
A few days later, he was prevented from boarding a flight to California.
He had previously given a number of interviews, explaining the possible weak points in airline systems, under his seat to view data from the aircraft's engines, fuel and flight-management systems.
Single network
Security experts have warned for some years that airlines are a possible target for hackers.
Planes including the Boeing 787 Dreamliner and the Airbus 350 and A380 have a single network that is used by both pilots to fly the plane and by passengers for their wi-fi connections.
"The risk is that a hacker sitting in the back of a plane, or even one on the ground, could use the wi-fi connection to hack into the avionics and then remotely fly the plane," explained security expert Bruce Schneier
Although there were currently no publicly known vulnerabilities that a hacker could exploit, such an attack remained "theoretically possible" because all networks were inherently insecure, he said.
"In the scheme of internet risks I worry about, it's not very high," he added.
Wi-fi is now common on many airlines, and most have relaxed the rules surrounding the use of gadgets during flights.
- Published20 April 2015
- Published28 October 2014
