Register

DHS Issues Warning On Cybersecurity In Light Aircraft

“The researchers have outlined that engine telemetry readings, compass and attitude data, altitude, airspeeds, and angle of attack could all be manipulated to provide false measurements to the pilot.” Unsplash/Rodrigo Soares
Gemini Sparkle

Key Takeaways:

  • A CISA alert highlighted a vulnerability where a device connected to an aircraft's CAN bus could inject false data, manipulating critical avionics readings like engine telemetry, altitude, and airspeed.
  • The FAA and aviation industry have recognized this cybersecurity threat for about 20 years, leading to Special Conditions (ASISP) in 2014 and the formation of an ARAC to develop regulations, policies, and international guidance.
  • Current mitigations primarily involve physical security measures at airports and for aircraft, which generally suffice due to the difficulty of accessing internal components.
  • Pilots and aircraft owners are advised to ensure strong physical security for their planes and inquire about maintenance procedures to prevent unauthorized access to aircraft systems.
See a mistake? Contact us.

If you’ve ever been involved in a panel upgrade and looked behind the scenes—or maybe you’ve performed some of the work yourself as a technician or homebuilder—you understand that there are connectors that allow data to flow between the avionics and instruments in the cockpit, whether they’re ARINC 429 or CAN bus cables. These create a local network of sorts, permitting the data to transfer without a host computer.

Ready to Sell Your Aircraft?

List your airplane on AircraftForSale.com and reach qualified buyers.

List Your Aircraft
AircraftForSale Logo | FLYING Logo
Pilot in aircraft
Sign-up for newsletters & special offers!

Get the latest stories & special offers delivered directly to your inbox.

SUBSCRIBE