A team of US researchers has developed a tiny coin-sized device that plugs into a port on Boeing 737 aircraft. This port connects to the Flight Control Computer (FMC) and Multifunction Control and Output Unit (MCDU) and allows signals to be redefined between them.
Image credit: John MacArthur/unsplash.com
Researchers found that a port in one of the Boeing 737’s two electronics and equipment bays, located near the aircraft’s nose wheel, is connected to a bus that carries data between the FMC and MCDU. This port is for testing and diagnostics, and its only protection is the dust cover. It can be accessed by anyone authorized to work on the aircraft or simply be in the vicinity of the aircraft. The device can connect to the Internet via the onboard Wi-Fi network, which means aircraft systems can be controlled remotely.
Researchers were able to introduce, intercept, alter or completely replace data and commands transmitted between the FMC and MCDU. You can change the aircraft’s air temperature and weight readings, thus affecting its takeoff characteristics – the specified engine power depends on them, and if incorrect parameters are entered, it may not be enough to lift the aircraft off the ground. Previous incidents have forced manufacturers to copy these systems and perform independent calculations in other modules that do not rely on the MCDU.
Another method a hypothetical attacker could use is to alter the flight plan and force the aircraft to deviate from the intended route. This can be accomplished by making small changes that are undetectable to the pilot, which will force the car off its course. Fortunately, in practice, pilots are trained to handle inconsistent MCDU data, and system redundancy ensures that failure or compromise of the FMC does not result in disaster. If the aircraft deviates from the designated route and changes altitude, the pilot will be notified by air traffic control. However, the researchers recommended completely blocking service ports on Boeing 737s, improving system isolation or using encryption technology, but they acknowledged that this may be too costly in practice.
If you find an error, select it with your mouse and press CTRL+ENTER.
