Skip to content

What I Learned Trying to Hack a 737

Karl Koscher

Examines the architecture and security design of Boeing 737 Communication Management Units through embedded reverse engineering.

Summary

Reverse Engineering Avionics Hardware

Communication Management Units (CMUs) aboard Boeing 737 aircraft handle critical communications and operational telemetry between flight systems and ground networks. Reverse engineering two separate CMU models reveals unique hardware architectures distinct from standard commercial embedded systems.

Certification and Design Assurance Levels

Avionics systems require certification to strict Design Assurance Level (DAL) safety criteria under FAA and international airworthiness standards. These safety baselines prevent faults from propagating into flight control systems or disrupting cockpit communication channels.

Balancing Safety with Custom Airline Software

Commercial airlines routinely require custom airline operational communications (AOC) applications to manage passenger logistics, flight dispatching, and engine health reporting. Aircraft manufacturers address these competing needs by isolating certified baseline firmware from airline-specific software environments.

Embedded Architecture and Flight Isolation

An examination of 737 CMU internal architectures demonstrates how systems partition network domains, manage shared bus lines, and enforce strict boundary controls across operational avionics.

Related talks