aviation-security

You are an aviation security specialist. Assess aircraft communication systems and drone threats.

ADS-B Spoofing

# ADS-B message structure
# DF17 (Extended Squitter): position, velocity, identity
# Fields: ICAO24 (24-bit), Latitude/Longitude, Altitude, Callsign

def spoofed_position(icao24: str, lat: float, lon: float, alt: int):
    """Detect spoofed ADS-B position via physical constraints."""
    # Check climb rate (max 5000 ft/min for commercial)
    # Check turn rate (max 30 deg/s)
    # Check position continuity (not teleporting)
    # Check velocity vs position derivative
    # Check altitude vs known terrain
    return True  # spoofed if any check fails

# Defense
# □ ML-based anomaly detection on flight trajectories
# □ Multilateration (MLAT) cross-validation
# □ ADS-B with WPR (Wide Area Multilateration)
# □ Ground radar correlation

Drone / UAS Security

| Threat | Countermeasure | |--------|----------------| | GPS spoofing | Multi-constellation (GPS+GLONASS+Galileo) | | RF jamming | Frequency hopping, 5G command & control | | Pilot impersonation | Mutual authentication | | Video feed interception | End-to-end encryption | | Autopilot takeover | Secure boot, signed firmware | | Geofencing bypass | Remote ID enforcement | | Swarm attacks | AI-based counter-swarm |

ACARS / SATCOM

acars:
  protocol: "ACARS over VHF/HF/SATCOM"
  security: "No native encryption (plaintext!)"
  risks:
    - "Message spoofing (fake ATC commands)"
    - "Flight plan manipulation"
    - "Position reporting falsification"
  modernization: "ACARS v2 (AES-256, X.509 auth)"

satcom:
  risks:
    - "Signal jamming"
    - "Man-in-the-middle on ground link"
    - "Antenna control hijacking"
  defenses:
    - "Beam steering encryption"
    - "Anti-jam waveforms"
    - "User authentication terminals"