The Challenge
Automatic Dependent Surveillance-Broadcast (ADS-B) is a technology that allows aircraft to determine their precise position using GPS and then broadcast this information for use in safety-critical applications such as air traffic control and collision avoidance. Unlike traditional radar systems, which have limitations in coverage, update rate and accuracy, ADS-B provides airspace surveillance that meets the requirements of future air traffic. Global regulators have launched a number of initiatives to upgrade their aging systems and leverage the potential of ADS-B. However, while ADS-B offers numerous benefits, it lacks fundamental security measures such as integrity and authentication, rendering it susceptible to spoofing and jamming. Moreover, due to its reliance on GPS, it inherits additional vulnerabilities related to GPS jamming and spoofing.
In March 2021, SeRo’s partner, Nexteon Technologies, signed a Cooperative Research and Development Agreement (CRADA) with the Federal Aviation Administration (FAA) to determine whether SecureTrack technology could meet the stringent performance and security requirements necessary to harness the benefits of ADS-B for the NextGen air traffic management system. The challenge was significant — ensuring the cybersecurity and reliability of aviation data in an era where cyberattacks are an ever-present threat.
The Challenge
Automatic Dependent Surveillance-Broadcast (ADS-B) is a technology that allows aircraft to determine their precise position using GPS and then broadcast this information for use in safety-critical applications such as air traffic control and collision avoidance. Unlike traditional radar systems, which have limitations in coverage, update rate and accuracy, ADS-B provides airspace surveillance that meets the requirements of future air traffic. Global regulators have launched a number of initiatives to upgrade their aging systems and leverage the potential of ADS-B. However, while ADS-B offers numerous benefits, it lacks fundamental security measures such as integrity and authentication, rendering it susceptible to spoofing and jamming. Moreover, due to its reliance on GPS, it inherits additional vulnerabilities related to GPS jamming and spoofing.
In March 2021, SeRo’s partner, Nexteon Technologies, signed a Cooperative Research and Development Agreement (CRADA) with the Federal Aviation Administration (FAA) to determine whether SecureTrack technology could meet the stringent performance and security requirements necessary to harness the benefits of ADS-B for the NextGen air traffic management system. The challenge was significant — ensuring the cybersecurity and reliability of aviation data in an era where cyberattacks are an ever-present threat.
The Solution
To tackle this issue, SeRo and Nexteon joined forces for a groundbreaking aviation cybersecurity test. With assistance from the FAA, the team set out to demonstrate that SecureTrack can address and mitigate the inherent vulnerabilities in ADS-B by detecting cyber intrusions. On July 26, 2021, they successfully conducted a controlled cyber attack using an ADS-B spoofing device onboard a test flight. During the 30-minute flight, SecureTrack not only detected, but characterized the attempt to spoof the aircraft’s GPS position information and promptly generated security alerts with the aircraft’s correct location. This achievement was the culmination of a decade of research and development and showcased SecureTrack’s ability to protect the integrity of aviation data and enhance the resilience of air traffic control. Since that date, SeRo, Nexteon and its partners have successfully completed several commercial ADS-B spoofing tests to demonstrate SecureTrack's capabilities, including one performed by the FAA during the N-FACTOR Cyber Rodeo in 2021.
The Solution
To tackle this issue, SeRo and Nexteon joined forces for a groundbreaking aviation cybersecurity test. With assistance from the FAA, the team set out to demonstrate that SecureTrack can address and mitigate the inherent vulnerabilities in ADS-B by detecting cyber intrusions. On July 26, 2021, they successfully conducted a controlled cyber attack using an ADS-B spoofing device onboard a test flight. During the 30-minute flight, SecureTrack not only detected, but characterized the attempt to spoof the aircraft’s GPS position information and promptly generated security alerts with the aircraft’s correct location. This achievement was the culmination of a decade of research and development and showcased SecureTrack’s ability to protect the integrity of aviation data and enhance the resilience of air traffic control. Since that date, SeRo, Nexteon and its partners have successfully completed several commercial ADS-B spoofing tests to demonstrate SecureTrack's capabilities, including one performed by the FAA during the N-FACTOR Cyber Rodeo in 2021.
Specifications
SecureTrack is based on SeRo’s ground-breaking GRX series of transponder signal receivers. In addition to the surveillance data provided by common air surveillance receivers, SeRo’s GRX receivers also provide detailed information on the physical characteristics of the transponder signals:
- Nanosecond-precision time of arrival measurements for TDOA-validation and MLAT
- Hertz-precision frequency of arrival measurements for Doppler verification
- Power spectral density measurements for jamming and interference detection
- RF transponder fingerprint for spoofing detection
- L1/L2/L5measurement data for GPS spoofing and jamming detection
These characteristics, which are robust against spoofing, are then used by SecureTrack to detect ADS-B and GPS jamming and spoofing as well as transponder malfunction.
The SecureTrack system and receiver network is operational, constantly validating the information of the majority of the flights in Europe and the east coast of the U.S. The system allows SeRo to provide extensive monitoring services, process and validate critical airborne surveillance data and deliver situational awareness to its customers around the world. The efforts of the SeRo and Nexteon team represent a major step in ensuring that aviation data is robust against potential threats and disruptions in the airspace due to cyber attacks on ADS-B and GPS.
Specifications
SecureTrack is based on SeRo’s ground-breaking GRX series of transponder signal receivers. In addition to the surveillance data provided by common air surveillance receivers, SeRo’s GRX receivers also provide detailed information on the physical characteristics of the transponder signals:
- Nanosecond-precision time of arrival measurements for TDOA-validation and MLAT
- Hertz-precision frequency of arrival measurements for Doppler verification
- Power spectral density measurements for jamming and interference detection
- RF transponder fingerprint for spoofing detection
- L1/L2/L5measurement data for GPS spoofing and jamming detection
These characteristics, which are robust against spoofing, are then used by SecureTrack to detect ADS-B and GPS jamming and spoofing as well as transponder malfunction.
The SecureTrack system and receiver network is operational, constantly validating the information of the majority of the flights in Europe and the east coast of the U.S. The system allows SeRo to provide extensive monitoring services, process and validate critical airborne surveillance data and deliver situational awareness to its customers around the world. The efforts of the SeRo and Nexteon team represent a major step in ensuring that aviation data is robust against potential threats and disruptions in the airspace due to cyber attacks on ADS-B and GPS.
For more information on the Cyber Attack Test, read the Nexteon press release.
If you are interested in setting up a trial or would like a demo of our software, please contact us.
