Aviation, maritime, and aerospace traffic control, radar, communication, and software technologies received increasing attention in the research literature over the past decade, as software-defined radios have enabled practical wireless attacks on communication links previously thought to be unreachable by unskilled or low-budget attackers. Moreover, recently it became apparent that both offensive and defensive cybersecurity has become a strategically differentiating factor for such technologies on the war fields (e.g., Ukraine), affecting both civilian and military missions regardless of their involvement. However, attacks and countermeasures are usually studied in simulated settings, thus introducing the lack of realism or non-systematic and highly customized practical setups, thus introducing high costs, overheads, and less reproducibility. Our "Unified Cybersecurity Testing Lab" seeks to close this gap by building a laboratory that can provide a systematic, affordable, highly-flexible, and extensible setup. In this paper, we introduce and motivate our "Unified Cybersecurity Testing Lab for Satellite, Aerospace, Avionics, Maritime, Drone (SAAMD)" technologies and communications, as well as some peer-reviewed results and evaluation of the targeted threat vectors. We show via referenced peer-reviewed works that the current modules of the lab were successfully used to realistically attack and analyze air-traffic control, radar, communication, and software technologies such as ADS-B, AIS, ACARS, EFB, EPIRB and COSPAS-SARSAT. We are currently developing and integrating support for additional technologies (e.g., CCSDS, FLARM), and we plan future extensions on our own as well as in collaboration with research and industry. Our "Unified Cybersecurity Testing Lab" is open for use, experimentation, and collaboration with other researchers, contributors and interested parties.
翻译:过去十年间,航空、海事及太空领域的交通管制、雷达、通信与软件技术在研究文献中受到日益广泛的关注,因为软件定义无线电使之前被认为技能不足或预算有限的攻击者无法触及的通信链路,如今面临切实的无线攻击风险。此外,近来显而易见的是,无论进攻还是防御型网络安全,已成为此类技术战场上(如乌克兰)的战略性差异化因素,影响涉及民用与军事任务,无论其是否直接参与。然而,攻击与对策通常是在模拟环境中研究的,这导致缺乏真实性,或采用非系统化且高度定制的实践设置,从而带来高成本、高开销以及较低的可重复性。我们的“统一网络安全测试实验室”旨在通过构建一个能够提供系统性、经济实惠、高度灵活且可扩展设置的实验室来弥补这一差距。在本文中,我们介绍并论证了面向卫星、航空航天、航电、海事、无人机(SAAMD)技术与通信的“统一网络安全测试实验室”,同时展示了经同行评审的结果以及对目标威胁向量的评估。通过引用的同行评审工作,我们表明该实验室的现有模块已成功用于真实地攻击与分析空中交通管制、雷达、通信及软件技术,如ADS-B、AIS、ACARS、EFB、EPIRB和COSPAS-SARSAT。我们目前正在开发并集成对其他技术(如CCSDS、FLARM)的支持,并计划未来独立或与研究机构及工业界合作进行扩展。我们的“统一网络安全测试实验室”向其他研究人员、贡献者及感兴趣方开放,供其使用、开展实验与协作。