Posts Tagged ‘Computer security’


[NBCCHICARGO.COM] A cyber security expert tells NBC5 Investigates he has found a way to hack into the satellite communications systems used in multiple industries.

“These devices are wide open right now,” said Ruben Santamarta, a security consultant based in Madrid, Spain with IOActive.

"For the aerospace sector we can disrupt satellite communications, [and] potentially modify the data that goes through those channels," said Santamarta

“For the aerospace sector we can disrupt satellite communications, [and] potentially modify the data that goes through those channels,” said Santamarta. Image: nbcchicargo.com

Pilots, ship captains and military personnel rely on satellite networks to communicate when there are no phone lines or wireless networks available.

“If someone can see the password or that user name it’s over,” he added. “Those vulnerabilities can be exploited to remotely compromise those devices.

Santamarta said he used something called reverse engineering — or decoding — to hack satellite communications equipment used in aerospace, maritime and military industries.

“In the military sector they use satellite terminals for combat units,” said Santamarta. “They normally encrypt the radio [transmissions] they send. But we can disrupt the satellite communications channel so we can prevent combat units [from asking] for help if they are being attacked.”

And in the maritime sector, satellite communications are used to send and receive vital information that affects the safety of the crew.

“If they are being attacked by terrorists, or they are suffering fire, they can send a distress call,” he said. “But we found we can modify the firmware in some of those terminals, so we can prevent a crew from sending a distress call.”

Santamarta recently published a 25-page report and went public with his findings at Defcon 22 – the largest hacking conference in the world – held earlier this month in Las Vegas, Nevada.

“For the aerospace sector we can disrupt satellite communications, [and] potentially modify the data that goes through those channels,” said Santamarta. “In some cases you need physical access to compromise the devices we analyzed, but in other cases you can use Wi-Fi or the entertainment network to access that device.”

His research took place in a lab setting and has not been tested on an actual commercial plane. But his findings have raised concerns in the aviation industry.

Read the full story at NBCCHICARGO.OM here….

 


NBCCHICARGO.COM
21st August, 2014


 

 

 

Advertisements

[airportcybersecurity.com] ServiceTec is delighted to announce the launch of a new website for its cyber security division, Airport CyberSec. 

AirportCyberSecurity

Airport CyberSec offers airports all over the world a full range of Cyber Security services designed to keep their staff, passengers and data safe.

Airport CyberSec’s cyber security experts work alongside airport IT and security teams to help protect against all aspects of cyber-attack.

Aside from an overview of the services offered by Airport CyberSec, the site will feature expert opinion and insight on the latest developments in the field of cyber security from the team, including Dr. John McCarthy, a world renowned authority on cyber-security strategy, development and Airport CyberSec services include:

Social Engineering Training, to protect against the practice of manipulating people into subverting security procedures or divulging confidential information

CyberIMMUNE, a unique software that mitigates the threat of malware by disabling its ability to write to disk and therefore preventing it from delivering its payload. This unique and powerful tool offers greater protection than any alternative against a zero-day attack – a threat that exploits a previously unknown vulnerability, i.e. one that is so new that the airports IT security team have had no time to address it.

Network & Web-site Security – the integrity of an airport’s network, intranet and website as well as its data security policies will quite obviously have a major influence on that airport’s vulnerability to cyber-attack. Airport CyberSec offers network security audits to test the integrity of an airport’s entire IT infrastructure.

Cyber Security Policies – Airport Cybersec can  offer assistance in the preparation and reviewing of cybersecurity policies based on world-wide best practice.

Monitoring Compliance with CyberSAFE – once best practice cyber-security policies are established staff may know what they should do, however it is also necessary to ensure staff are compliant with the policy on a day to day basis. CyberSAFE assists with both monitoring and enforcement.

 

The website can be found at www.airportcybersecurity.com

 

 


ABOUT SERVICETEC

ServiceTec specialises exclusively in the provision of Managed IT Services to the world’s airport and ,airline industries, and has been doing so since 1989. ServiceTec operates globally, with headquarters in the UK and the USA, and offices in Canada, Germany, The Netherlands and Japan.

Airports served include JFK, Minneapolis-St. Paul, Nashville, San Francisco, Amsterdam, Berlin,

Please visit http://www.servicetec.com


Servicetec Airport Services
Letchworth, UK – 27th March 2014


Enhanced by Zemanta