为卫星、航空航天、航空电子、海事、无人机(SAAMD)技术和通信建立统一的网络安全测试实验室
Towards a Unified Cybersecurity Testing Lab for Satellite, Aerospace, Avionics, Maritime, Drone (SAAMD) technologies and communications
摘要:
在过去的十年中,航空、海事和航空航天交通控制、雷达、通信和软件技术在研究文献中受到越来越多的关注,因为软件定义的无线电已经实现了对通信链路的实际无线攻击,而这些通信链路以前被认为是不熟练或低预算的攻击者无法到达的。此外,最近很明显,进攻性和防御性网络安全已经成为战场上此类技术的战略差异化因素(例如,乌克兰),影响到民事和军事特派团,无论其参与程度如何。然而,攻击和对策通常是在模拟环境中研究的,因此引入了缺乏真实性或非系统性和高度定制的实际设置,从而引入了高成本、开销和较低的再现性。我们的“统一网络安全测试实验室”旨在通过建立一个可以提供系统化,经济实惠,高度灵活和可扩展设置的实验室来缩小这一差距。在本文中,我们介绍并激励我们的“卫星,航空航天,航空电子,海事,无人机统一网络安全测试实验室(SAAMD)”技术和通信,以及一些同行评审的结果和对目标威胁向量的评估。我们通过参考同行评审的作品表明,该实验室的当前模块已成功用于现实攻击和分析空中交通管制,雷达,通信和软件技术,如ADS-B,AIS,ACARS,EFB,EPIRB和COSPAS-SARSAT。我们目前正在开发和集成对其他技术的支持(例如,CCSDS,FLARM),我们计划未来的扩展我们自己以及与研究和工业合作。我们的“统一网络安全测试实验室”开放供其他研究人员、贡献者和感兴趣的各方使用、实验和合作。
英文摘要:
Aviation, maritime, and aerospace traffic control, radar, communication, and software technologies received increasing attention in the research literature over the past decade, as software-defined radios have enabled practical wireless attacks on communication links previously thought to be unreachable by unskilled or low-budget attackers. Moreover, recently it became apparent that both offensive and defensive cybersecurity has become a strategically differentiating factor for such technologies on the war fields (e.g., Ukraine), affecting both civilian and military missions regardless of their involvement. However, attacks and countermeasures are usually studied in simulated settings, thus introducing the lack of realism or non-systematic and highly customized practical setups, thus introducing high costs, overheads, and less reproducibility. Our "Unified Cybersecurity Testing Lab" seeks to close this gap by building a laboratory that can provide a systematic, affordable, highly-flexible, and extensible setup. In this paper, we introduce and motivate our "Unified Cybersecurity Testing Lab for Satellite, Aerospace, Avionics, Maritime, Drone (SAAMD)" technologies and communications, as well as some peer-reviewed results and evaluation of the targeted threat vectors. We show via referenced peer-reviewed works that the current modules of the lab were successfully used to realistically attack and analyze air-traffic control, radar, communication, and software technologies such as ADS-B, AIS, ACARS, EFB, EPIRB and COSPAS-SARSAT. We are currently developing and integrating support for additional technologies (e.g., CCSDS, FLARM), and we plan future extensions on our own as well as in collaboration with research and industry. Our "Unified Cybersecurity Testing Lab" is open for use, experimentation, and collaboration with other researchers, contributors and interested parties.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。