DOT IG: ATC System Vulnerable to Cyber Attacks

AINalerts » May 7, 2009
May 7, 2009, 12:17 PM

Web applications used in supporting FAA air traffic control systems are not properly secured to prevent attacks or unauthorized access, warns a report released yesterday by the DOT Inspector General. The need to protect ATC systems from cyber attacks requires enhanced attention because the FAA has increasingly turned toward the use of commercial software and Internet Protocol (IP)-based technologies to modernize ATC systems, according to the OIG. “While use of commercial IP products, such as Web applications, has enabled the FAA to efficiently collect and disseminate information to facilitate ATC services, it inevitably poses a higher security risk to ATC systems than when they were developed, primarily with proprietary software,” the OIG said. “Now, attackers can take advantage of software vulnerabilities in commercial IP products to exploit ATC systems, which is especially worrisome at a time when the nation is facing increased threats from sophisticated nation-state-sponsored cyber attacks.”

Share this...

Please Register

In order to leave comments you will now need to be a registered user. This change in policy is to protect our site from an increased number of spam comments. Additionally, in the near future you will be able to better manage your AIN subscriptions via this registration system. If you already have an account, click here to log in. Otherwise, click here to register.