Skip to content

Analyzing the Security of Satellite-Based Air Traffic Control

Martin Strohmeier

Presents an in-depth security analysis of the satellite ADS-C aviation protocol, demonstrating message injection and position tampering using SDRs.

Summary

Role of ADS-C in Oceanic Air Traffic

Automatic Dependent Surveillance–Contract (ADS-C) is a satellite datalink protocol utilized by air traffic control to monitor aircraft operating over oceanic and remote regions where terrestrial radar is unavailable.

Capturing and Decoding Satellite Telemetry

Using custom software-defined radio (SDR) receivers, researchers captured and decoded over 120,000 real-world ADS-C satellite messages, evaluating protocol structure and security properties.

Transmitter Implementation and Injection Attacks

Because ADS-C lacks cryptographic authentication, researchers constructed an SDR-based transmitter capable of crafting arbitrary uplink and downlink messages, altering reported aircraft positions, and forging flight contracts.

Assessment of Mitigations for Satellite Avionics

Evaluating potential countermeasures highlights the urgent need to introduce message authentication and encryption standards across satellite-based air traffic management networks.

Related talks