@inproceedings{b9eef439224d4e9e926d7ad226f167b3,
title = "On the security of mobile cockpit information systems",
abstract = "Recent trends in aviation have led many general aviation pilots to adopt the use of iPads (or other tablets) in the cockpit. While initially used to display static charts and documents, uses have expanded to include live data such as weather and traffic information that is used to make flight decisions. Because the tablet and any connected devices are not a part of the onboard systems, they are not currently subject to the software reliability standards applied to avionics. In this paper, we create a risk model for electronic threats against mobile cockpit information systems and evaluate three such systems popular with general aviation pilots today: The Appareo Stratus 2 receiver with the ForeFlight app, the Garmin GDL 39 receiver with the Garmin Pilot app, and the SageTech Clarity CL01 with the WingX Pro7 app. We found all three to be vulnerable, allowing an attacker to manipulate information presented to the pilot, which in some scenarios would lead to catastrophic outcomes. Finally, we provide recommendations for securing such systems. Copyright is held by the authors.",
keywords = "Aviation, Human factors, Mobile cockpit information systems, Security",
author = "Devin Lundberg and Brown Farinholt and Edward Sullivan and Ryan Mast and Stephen Checkoway and Stefan Savage and Snoeren, {Alex C.} and Kirill Levchenko",
year = "2014",
month = nov,
day = "3",
doi = "10.1145/2660267.2660375",
language = "English (US)",
isbn = "9781450329576",
series = "Proceedings of the ACM Conference on Computer and Communications Security",
publisher = "Association for Computing Machinery",
pages = "633--645",
booktitle = "Proceedings of the ACM Conference on Computer and Communications Security",
address = "United States",
note = "21st ACM Conference on Computer and Communications Security, CCS 2014 ; Conference date: 03-11-2014 Through 07-11-2014",
}