How easy is it to hack an airplane?

  • By Andrea Peterson The Washington Post
  • Tuesday, April 21, 2015 1:22pm
  • Business

Chris Roberts knows a lot about hacking planes, but not because he’s trying to make them fall out of the sky. His job as a security researcher is to prevent those types of breaches from happening – whether’s it’s on a plane or in a major retailer’s computer system.

But a tweet joking about “playing” with a plane’s on-board communications systems made while Roberts was on a United Airlines flight last week landed him in hot water. The FBI questioned him for several hours after he landed, and confiscated his laptop and hard drives. Over the weekend, he was blocked from boarding another United flight while on the way to speak at a security conference.

Roberts was able to book a last-minute flight on another airline. But his research raises a bigger question: How hackable are the planes that millions of worldwide travelers rely on? The answer, it turns out, is up for debate.

Planes are increasingly designed to give passengers more access to technology, mostly through in-flight WiFi. But connectivity may have a dark side. Last week, the Government Accountability Office released a report saying that security researchers have warned that this trend leaves planes less secure by providing a “direct link” between an aircraft and the outside world that could be leveraged by hackers.

Keeping flight-related and entertainment systems separate can be one way to limit an attacker’s access, but not all planes are designed with that in mind. In 2008, the Federal Aviation Administration expressed concern that the Boeing 787 Dreamliner combined some of that digital infrastructure – saying that the design “may result in security vulnerabilities.”

Modern planes use digital defenses called firewalls to protect critical technology used during flight against intrusions from someone who has gained access to other parts of the aircraft such as in-flight entertainment systems, the report said. Some cybersecurity experts worry that isn’t enough, arguing that “because firewalls are software components, they could be hacked like any other software and circumvented,” according to the report. (Some critics of the report say it may have overstated the risks.)

Boeing and competitor Airbus have defended the security of their systems. “Multiple security measures and flight deck operating procedures help ensure safe and secure airplane operations,” Boeing said in a statement to CNN in response to the GAO report.

But over the years, many researchers have warned about potential problems – including Roberts, the founder of One World Labs, who has given several talks about airplane cybersecurity.

Brad “RenderMan” Haines, a researcher who has investigated potential vulnerabilities in aircraft tracking systems, said limited access to the technology can make comprehensive audits difficult. “A lot of our research we can only take so far because we don’t want to cause problems – but all of the evidence seems to point to there being issues that remain unresolved,” he said.

In an interview with CNN after being detained by the FBI, Roberts said he tested theories about how much visibility into avionic systems he had from the passenger cabin – pulling out his laptop and connecting it to a box underneath his seat 15 to 20 times on flights – and was able to view sensitive data. That interview, combined with the tweet, seems to have set off alarm bells at United.

“Given Mr. Roberts’s claims regarding manipulating aircraft systems, we’ve decided it’s in the best interest of our customers and crew members that he not be allowed to fly United,” United spokesman Rahsaan Johnson told The Washington Post. “However, we are confident our flight control systems could not be accessed through techniques he described.”

The Electronic Frontier Foundation, which represents Roberts, called United’s decision “both disappointing and confusing.”

“Security researchers are allies, not opponents, and their work makes us all more safe, not less,” EFF staff attorney Nate Cardozo said. “We fear that United’s actions here will cause a real chilling effect, and that researchers will be less likely to help United improve their security in the future based on its over reaction to Mr. Roberts’s statements.”

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Business

Black Press Media operates Sound Publishing, the largest community news organization in Washington State with dailies and community news outlets in Alaska.
Black Press Media concludes transition of ownership

Black Press Media, which operates Sound Publishing, completed its sale Monday (March 25), following the formerly announced corporate restructuring.

Maygen Hetherington, executive director of the Historic Downtown Snohomish Association, laughs during an interview in her office on Thursday, Feb. 15, 2024, in Snohomish, Washington. (Ryan Berry / The Herald)
Maygen Hetherington: tireless advocate for the city of Snohomish

Historic Downtown Snohomish Association receives the Opportunity Lives Here award from Economic Alliance.

FILE - Washington Secretary of State Steve Hobbs poses in front of photos of the 15 people who previously held the office on Nov. 22, 2021, after he was sworn in at the Capitol in Olympia, Wash. Hobbs faces several challengers as he runs for election to the office he was appointed to last fall. (AP Photo/Ted S. Warren, File)
Secretary of State Steve Hobbs: ‘I wanted to serve my country’

Hobbs, a former Lake Stevens senator, is the recipient of the Henry M. Jackson Award from Economic Alliance Snohomish County.

Mark Duffy poses for a photo in his office at the Mountain Pacific Bank headquarters on Wednesday, Feb. 14, 2024 in Everett, Washington. (Annie Barker / The Herald)
Mark Duffy: Building a hometown bank; giving kids an opportunity

Mountain Pacific Bank’s founder is the recipient of the Fluke Award from Economic Alliance Snohomish County.

Barb Tolbert poses for a photo at Silver Scoop Ice Cream on Thursday, Feb. 29, 2024 in Arlington, Washington. (Annie Barker / The Herald)
Barb Tolbert: Former mayor piloted Arlington out of economic brink

Tolbert won the Elson S. Floyd Award, honoring a leader who has “created lasting opportunities” for the underserved.

Photo provided by 
Economic Alliance
Economic Alliance presented one of the Washington Rising Stem Awards to Katie Larios, a senior at Mountlake Terrace High School.
Mountlake Terrace High School senior wins state STEM award

Katie Larios was honored at an Economic Alliance gathering: “A champion for other young women of color in STEM.”

The Westwood Rainier is one of the seven ships in the Westwood line. The ships serve ports in the Pacific Northwest and Northeast Asia. (Photo provided by Swire Shipping)
Westwood Shipping Lines, an Everett mainstay, has new name

The four green-hulled Westwood vessels will keep their names, but the ships will display the Swire Shipping flag.

A Keyport ship docked at Lake Union in Seattle in June 2018. The ship spends most of the year in Alaska harvesting Golden King crab in the Bering Sea. During the summer it ties up for maintenance and repairs at Lake Union. (Keyport LLC)
In crabbers’ turbulent moment, Edmonds seafood processor ‘saved our season’

When a processing plant in Alaska closed, Edmonds-based business Keyport stepped up to solve a “no-win situation.”

Angela Harris, Executive Director of the Port of Edmonds, stands at the port’s marina on Wednesday, Jan. 24, 2024, in Edmonds, Washington. (Ryan Berry / The Herald)
Leadership, love for the Port of Edmonds got exec the job

Shoring up an aging seawall is the first order of business for Angela Harris, the first woman to lead the Edmonds port.

The Cascade Warbirds fly over Naval Station Everett. (Sue Misao / The Herald file)
Bothell High School senior awarded $2,500 to keep on flying

Cascade Warbirds scholarship helps students 16-21 continue flight training and earn a private pilot’s certificate.

Rachel Gardner, the owner of Musicology Co., a new music boutique record store on Thursday, Jan. 18, 2024 in Edmonds, Washington. Musicology Co. will open in February, selling used and new vinyl, CDs and other music-related merchandise. (Olivia Vanni / The Herald)
New Edmonds record shop intends to be a ‘destination for every musician’

Rachel Gardner opened Musicology Co. this month, filling a record store gap in Edmonds.

MyMyToyStore.com owner Tom Harrison at his brick and mortar storefront on Tuesday, Sept. 6, 2022 in Everett, Washington. (Olivia Vanni / The Herald)
Burst pipe permanently closes downtown Everett toy store

After a pipe flooded the store, MyMyToystore in downtown Everett closed. Owner Tom Harrison is already on to his next venture.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.