The Automatic Dependent Surveillance-Broadcast (ADS-B) is a surveillance technology that mandated in many airspaces. It improves safety, increases efficiency and reduces air traffic congestion by broadcasting aircraft navigation data. Yet, ADS-B is vulnerable to spoofing attacks as it lacks mechanisms to ensure the integrity and authenticity of the data being supplied. None of the existing cryptographic solutions fully meet the backward compatibility and bandwidth preservation requirements of the standard. Hence, we propose the Compatible Authenticated Bandwidth-efficient Broadcast protocol for ADS-B (CABBA), an improved approach that integrates TESLA, phase-overlay modulation techniques and certificate-based PKI. As a result, entity authentication, data origin authentication, and data integrity are the security services that CABBA offers. To assess compliance with the standard, we designed an SDR-based implementation of CABBA and performed backward compatibility tests on commercial and general aviation (GA) ADS-B in receivers. Besides, we calculated the 1090ES band's activity factor and analyzed the channel occupancy rate according to ITU-R SM.2256-1 recommendation. Also, we performed a bit error rate analysis of CABBA messages. The results suggest that CABBA is backward compatible, does not incur significant communication overhead, and has an error rate that is acceptable for Eb/No values above 14 dB.

翻译：自动相关监视广播（ADS-B）是一种已在许多空域强制实施的监视技术。它通过广播飞机导航数据来提高安全性、增加效率并减少空中交通拥堵。然而，ADS-B缺乏确保所提供数据完整性和真实性的机制，因此容易受到欺骗攻击。现有的加密解决方案均未能完全满足标准的向后兼容性和带宽保持要求。因此，我们提出了用于ADS-B的兼容认证带宽高效广播协议（CABBA），这是一种改进的方法，它集成了TESLA、相位叠加调制技术和基于证书的公钥基础设施。因此，CABBA提供的安全服务包括实体认证、数据源认证和数据完整性。为了评估与标准的符合性，我们设计了基于SDR的CABBA实现，并在商用和通用航空（GA）ADS-B接收机上进行了向后兼容性测试。此外，我们计算了1090ES频段的活跃因子，并根据ITU-R SM.2256-1建议分析了信道占用率。同时，我们对CABBA消息进行了误码率分析。结果表明，CABBA具有向后兼容性，不会产生显著的通信开销，并且在Eb/No值高于14 dB时具有可接受的误码率。