Aircraft Mode S Transponder Fingerprinting for Intrusion Detection
Aircraft Mode S Transponder Fingerprinting for Intrusion Detection
复制标题
DOI：
10.3390/aerospace7030030
复制
发表时间：
2020-03-01
期刊：
影响因子：
2.6
通讯作者：
Gerardi, Fabrizio
中科院分区：
文献类型：
--
作者：
Leonardi, Mauro;Gerardi, Fabrizio
目前，飞机安全基于不同的系统，其中四个系统共享相同的数据链协议：二次监视雷达、自动依赖监视系统、交通避碰系统和交通信息系统使用S模式协议发送和接收信息。该协议不提供任何类型的身份验证，使得其中一些应用程序容易受到网络攻击。本文提出了一种基于发射射频（RF）指纹识别的入侵检测机制，以区分合法消息和虚假消息。描述了所提出的发射机签名，并开发了一种入侵检测算法，并在不同的入侵配置下进行了评估，同时使用了真实记录数据。结果表明，该方法能够以较高的检测概率和极低的虚警概率检测到假消息的存在。
Nowadays, aircraft safety is based on different systems and four of them share the same data-link protocol: Secondary Surveillance Radar, Automatic Dependent Surveillance System, Traffic Collision Avoidance System, and Traffic Information System use the Mode S protocol to send and receive information. This protocol does not provide any kind of authentication, making some of these applications vulnerable to cyberattacks. In this paper, an intrusion detection mechanism based on transmitter Radio Frequency (RF) fingerprinting is proposed to distinguish between legitimate messages and fake ones. The proposed transmitter signature is described and an intrusion detection algorithm is developed and evaluated in case of different intrusion configurations, also with the use of real recorded data. The results show that it is possible to detect the presence of fake messages with a high probability of detection and very low probability of false alarm.