Design of A Cyber Security Framework for ADS-B Based Surveillance Systems Sahar Amin Tyler Clark Rennix Offutt Kate Serenko 2 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 3 Context Analysis Increase in air transportation and air traffic Need for surveillance systems to track and monitor flights Implementation of NextGen by FAA Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 4 Context Analysis Increase in air transportation and air traffic Need for surveillance systems to track and monitor flights Implementation of NextGen by FAA Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 5 Number of People Flying Each Year in US Number of Passengers (Millions) Number of Passengers (Millions) 300 250 Forecast 200 150 100 50 0 1995 2000 2005 2010 * Source: U.S. Department of Transportation. Form 41 and 298C 2015 2020 2025 Years Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 2030 2035 6 United States Air Carriers Fleet US Air Carriers Fleet 10,000 9,000 Forecast 7,000 6,000 5,000 Mainline 4,000 Regional 3,000 2,000 1,000 0 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 Number of Planes 8,000 Year *Source: FAA Aerospace Forecast: Fiscal Years 2012-2032 Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 7 US Airspace Congestion Radar and ADS-B coverage Only ADS-B coverage Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 8 Context Analysis Increase in air transportation and air traffic Need for surveillance systems to track and monitor flights Implementation of NextGen by FAA Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 9 Surveillance What: Surveillance is close observation and monitoring of changing information. Why: Surveillance in air transportation is needed to track and monitor flights to maximize efficiency and safety in airspace. Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 10 Primary Surveillance Primary Surveillance Radar Created to provide continuous surveillance of air traffic disposition Uses a rotating antenna to transmit electromagnetic waves that reflect from aircraft surface up to 60 miles from radar Problems: could only provide object’s location; does not identify object type; does not provide coverage over oceanic regions Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 11 Secondary Surveillance Radar Secondary Surveillance Radar Initially developed as a wartime radar system, called Identification Friend or Foe (IFF) Attached to primary radar; relies on aircraft transponders to transmit and receive aircraft data Problems: expensive; does not provide surveillance coverage over oceanic regions Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 12 Context Analysis Increase in air transportation and air traffic Need for surveillance systems to track and monitor flights Implementation of NextGen by FAA Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 13 Next Generation (Next Gen) Next Generation (Next Gen) New airspace for US to be implemented between 2012-2025 New framework for flight tracking and monitoring Ground/radar-based tracking system satellite-based tracking system Major Component of NextGen: Automatic Dependent Surveillance-Broadcast (ADS-B) Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 14 Automatic Dependent SurveillanceBroadcast (ADS-B) Automatic – does not require interrogation Dependent – depends on location information from GPS Surveillance – provides situational awareness for ADS-B equipped aircraft and ARTCC Broadcast – constant broadcasting of flight navigation information Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 15 How ADS-B Works Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 16 ADS-B Advantages Increased situational awareness for both pilots and ARTCC Provides surveillance coverage in areas without radar coverage Less expensive than traditional radar Information is broadcasted in real time Can decrease separation distance between aircraft Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 17 Decreased Separation Distance Without ADS-B Coverage One In, One Out 20 NM With ADS-B Coverage Separation distance decreased to 5 NM 5 NM 5 NM 5 NM 5 NM Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 18 ADS-B Messages DF: Downlink Format AA: ADS-B Data: Aircraft CA: Capability Individual type, Altitude, Latitude, Aircraft Longitude, Airborne Address Velocity PI: Parity Information (Error Detection Code) Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 19 Cyber Security in Aviation Aviation has gone Cyber ADS-B transmits digital signals to ground servers and nearby aircraft New threat vector in aviation Signals are unencrypted signals can be spoofed or jammed by adversaries Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 20 Threats Spoofing False Source False Content 1090 MHz 1090 MHz Jamming 1090 MHz Ghost Plane Flooding Ground Station Flooding Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 21 Scope Definition Oceanic area between two land masses covered by ARTCC No radar coverage – Only ADS-B surveillance Commercial aviation – en route flights Spoofing attacks only - concentrating on prevention of attacks Jamming is out of our scope because it cannot be prevented Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 22 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 23 Stakeholder Analysis Crew/Pilots Airline Companies ARTCC ADS-B Manufacturers Congress Passengers FAA Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 Labor Unions 24 Primary Stakeholders FAA (Federal Aviation Administration) • Objective: provide the safest, most efficient aerospace system in the world ARTCC (Air Route Traffic Control Center) • Objective: maintain safety and efficiency of flights in specified volume of airspace at high altitudes Airline Companies • Objective: provide a safe and up-to-date aircraft; maximize profits Crew/Pilots • Objective: Provide safe and enjoyable flying experience for their customers Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 25 Secondary Stakeholders ADS-B Manufacturers • Objective: Provide aircraft with satellite-based surveillance system that allows for more accurate and real-time transfer of flight data Congress • Objective: Control spending across government and government agencies Passengers • Objective: Arrive at destination safely and on time Labor Unions • Objective: Protects rights of workers, strive to secure better working conditions for members, increase workers’ income Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 26 Stakeholder Tensions FAA vs. Congress • Budget for proposal has to be approved by Congress • Tension if Congress disagrees with proposed FAA budget FAA vs. Airline Companies • Airline companies must follow and meet requirements set by FAA • Tension if FAA wants airplane companies to pay for installation of ADS-B systems in aircraft FAA vs. ARTCC • ARTCC employees must follow all rules and regulations set by FAA • Tension if proposed rules increase workload and employees are required to learn how to use new equipment Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 27 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 28 Gap Analysis Number of Aircraft Handled by En Route Traffic Control Centers (In Millions) Gap Analysis 70 60 Gap 50 40 30 20 10 0 1995 2000 * Source: FAA Aerospace Forecast 2005 2010 2015 2020 2025 Year Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 2030 2035 29 Problem Statement Unencrypted communication between aircraft and ARTCC ADS-B signals can be spoofed Unreliable/untrustworthy signals Location of aircraft cannot be determined with 100% certainty Reduced situational awareness, threatened flight safety, reduced airspace capacity Decreased airspace efficiency Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 30 Win-Win Analysis Solution is cost effective Implementation occurs by 2020 Win-Win Analysis ADS-B signals are secure and reliable Separation distance between aircraft is decreased Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 31 Needs Statement There is a need for a system that prevents spoofing attacks on ADS-B signals sent from aircraft to ARTCC and between aircrafts. Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 32 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 Mission Requirements 1.0 The system shall increase the capacity of airspace by 32% in the areas without radar coverage. 1.1 The system shall decrease the separation distance between aircraft to 3 nautical miles. 1.1.1 ADS-B messages shall be resistant to spoofing attacks Y% of times. 1.1.2 A spoofing attack shall not overload the capacity of the airspace. 2.0 The system shall maintain or decrease accident rate of 0.291* accidents per 100,000 departures. 3.0 The system shall be ready to be implemented by 2020. *Source: Bureau of Transportation Statistics Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 34 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 35 Design Alternatives 1. Hashing 2. Symmetric Encryption 3. Asymmetric Encryption 4. Maintain Status Quo Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 36 1. Hashing What Is It? Goal – Confirming the source of a message Digital Signature/Hash created by sender – aircraft Attached at the end of the message Verified by receiver - ARTCC Fusion System Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 Hashing Demo Hash – attaching at the end of the message Original Text Text with Hash Design of Cyber-Security Prevention System for ADS-B Based Surveillance System Design of Cyber-Security Prevention System for ADS-B Based Surveillance SystemBc89236dec6d39f8 SHA-2 Algorithm Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 2. Symmetric Encryption What Is It? Encryption – converting data into code Symmetric – each entity has one private key Message encrypted with key has to be decrypted with the same key Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 39 3. Asymmetric Encryption What Is It? Two keys – Public and Private Longer keys – stronger security Message from A Encrypt Private A Encrypt Public B Message in Public Airspace Decrypt Private B Decrypt Public A Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 Message received at B 40 Encryption Demo Original Text Design of CyberSecurity Prevention System for ADS-B Based Surveillance System Key: CyberSecurity Encrypt Decrypt Encrypted Text fJ9zVVvyyPFFyzhdyaeuV68Ayz +gBHlVoFgzojMbIdZ8c2pOLtnd L1wzL0BjONpNP0tZasspRPoa NPdcNDT9fpQNDbvQSWOURC fWQJWFKQI= Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 41 Design Alternatives Evaluation Attack Prevention Ease of Implementation Security Strength Technology Cost/Air plane Additional Requirements Spoofing Easy TBD Available Low More bits 2. Symmetric Encryption Spoofing Moderate TBD Available Low Key Exchange 3. Asymmetric Encryption Spoofing Moderate TBD Available Low Access to public keys 4. Maintain Status Quo Nothing Easy Not secure None None None Design Alternative 1. Hashing Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 42 Value Hierarchy Value Hierarchy Security Execution Time WS WE Minimum Separation Distance Achieved Ease of Implementation WD WI Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 43 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 Design of Experiment Goal – show how securing ADS-B signals can increase airspace capacity Verify the ability of the system to prevent cyber attacks and maintain current safety level under diverse/dangerous conditions. Simulation Design: 1. Signal Simulation 2. Airspace Capacity Simulation Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 45 Simulation Design 1 ADS-B Messages Design Alternatives Spoofed Messages 2 Signal Simulation Separation Distance Airspace capacity Airspace Capacity Simulation Departure Streams Arrival Capacities Speed of Aircraft Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 Collision Rate 46 1. Signal Simulation Purpose of simulation: evaluate reliability of design alternatives Simulating signals with and without signal security design alternatives Output (reliability of signal security methods) of signal simulation will be used as input to airspace capacity simulation Signal simulation will be programed in Matlab Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 47 2. Airspace Capacity Simulation Purpose of simulation: verify ability of system to maximize airspace capacity and maintain safety levels Find the optimal separation distance for flights to operate in the airspace allows for increase in airspace capacity Simulation will abide by FAA regulations En route flights over oceanic area relying solely on ADS-B data Flight paths modeled after popular Gulf of Mexico flights Airspace capacity will be modeled in Arena Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 48 Airspace Simulation (Continued) Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 49 Arena Simulation Model Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 50 Single Cell Decision Planned/preferred path is in red If capacity of cell 1 (Level 0 Preference) is full: Level 1 Preference: Cells 2 or 4 (blue) Shortest path to 1 (2 iterations) Level 2 Preference: Cells 3,6 or 7 (green) 3 iterations Level 3 Preference: Cell 9 (orange) 4 iterations Will choose the highest ranked level with free capacity Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 51 Control Scenario Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 52 Attack Scenario Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 53 Attack Scenario (Continued) Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 54 Formulas for Simulation 𝑇𝐼𝐹𝐴𝑣𝑔 (𝑇𝑖𝑚𝑒𝐶𝑒𝑙𝑙 + 𝑇𝑖𝑚𝑒𝑊𝑎𝑖𝑡 ) = 𝑁𝑆𝑢𝑐𝑐𝑒𝑠𝑠 𝑇𝑖𝑚𝑒𝐶𝑒𝑙𝑙 𝐷𝑖𝑠𝑡𝑎𝑛𝑐𝑒 = 𝑉𝑒𝑙𝑜𝑐𝑖𝑡𝑦 𝑁𝑢𝑚𝑏𝑒𝑟𝑉𝑖𝑜𝑙𝑎𝑡𝑖𝑜𝑛𝑠 = 𝐴𝑖𝑟𝑐𝑟𝑎𝑓𝑡𝑖𝑛𝐶𝑒𝑙𝑙 − 𝐶𝑎𝑝𝑎𝑐𝑖𝑡𝑦𝐴𝑡𝑡𝑎𝑐𝑘𝐶𝑒𝑙𝑙 − (𝐶𝑎𝑝𝑎𝑐𝑖𝑡𝑦𝐴𝑑𝑗𝑎𝑐𝑒𝑛𝑡𝐶𝑒𝑙𝑙 ) 𝐶𝑜𝑙𝑙𝑖𝑠𝑖𝑜𝑛 𝑅𝑖𝑠𝑘 = 𝑃 𝐶𝑟𝑎𝑠ℎ ∗ 𝑁𝑉 ∗ 100% Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 55 Expected Results We expect that asymmetric encryption will be the best design alternative Easy to implement Technology is already available Inexpensive to implement Most secure design alternative No security issues related to key exchange Quick processing time Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 56 Agenda Context Analysis Stakeholder Analysis Problem Statement & Needs Statement Mission Requirements Design Alternatives Preliminary Simulation Design Project Management Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 57 Work Breakdown Structure Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 58 Work Breakdown Structure (Continued) 1.0 Management – Assigning tasks and deadlines, contacting sponsors, organization, revision, etc 2.0 Research & Data – Primary and secondary radar, ADS-B, meetings with sponsors, data collection, etc 3.0 Conops & Requirements – Context analysis, stakeholder analysis, problem and needs statement, requirements 4.0 Simulation/Analysis – Simulation design, implementation of simulation, tradeoff analysis of alternatives, testing, results, conclusion 5.0 Documentation – Initial deliverables, conference papers, poster 6.0 Reports & Presentations – Prelim project plan and presentation, final project plan and presentation, final report, faculty presentations, etc Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 59 Project Plan Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 60 Budget Individual hourly rate: $45/hour Overhead costs: $54/hour Total billing rate per person: $99/hour Estimated Time to Be Spent on Project: 1,350 Hours Total Project Cost: $133,650 Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 61 Earned Value, Actual Cost, Predicted Value Budget 160000 140000 Cost ($) 120000 100000 Cumulative PV 80000 Cumulative AC EV 60000 Best Case Worst Case 40000 20000 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 Weeks Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 62 Earned Value, Actual Cost, Predicted Value Budget 80000 70000 60000 Cost ($) 50000 Cumulative PV Cumulative AC 40000 EV 30000 Best Case Worst Case 20000 10000 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 Weeks Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 16 63 Cost Performance Index vs. Schedule Performance Index CPI vs. SPI 1.2 1 Ratio 0.8 0.6 CPI SPI 0.4 0.2 0 1 2 3 4 5 6 7 8 9 Weeks Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 10 11 64 Project Risks WBS Task Risks Mitigation Techniques 1.0 Management Tasks not assigned with correct deadlines Deliverables not completed by internal team deadlines Sponsors do not reply after being contacted Assign internal team deadlines several days before official deadlines Continue following up with sponsors 2.0 Research Majority of research is not completed by the middle of the Fall semester Assign research tasks to each team member so that research findings can be combined Context Analysis, Stakeholder Make sure that each of these Analysis, Problem Statement, components is about 60% Needs Statement, and complete by mid-October Requirements are not complete by Final Project Plan Department of Systems Engineering and Operations Research due date Design of A Cyber Security Framework for ADS-B Based Surveillance Systems 3.0 Conops & Requirements SYST 490 - 2013 65 Project Risks (Continued) WBS Task Risks Mitigation Techniques 4.0 Simulation Not enough data for simulation Data is not collected time for simulation Simulation is too complex to be modeled within time frame of this project Begin data collection right after Prelim Project Plan due date Resize scope early in semester; seek guidance from sponsors 5.0 Documentation Documentation deliverables are not completed by deadline Set internal team deadlines for at least five days before official deadline 6.0 Reports & Presentations Reports or presentations are not completed by deadline Set internal team deadlines for at least five days before official deadline Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013 66 Questions? Department of Systems Engineering and Operations Research Design of A Cyber Security Framework for ADS-B Based Surveillance Systems SYST 490 - 2013