[ISN] IG: Air traffic control system vulnerable to cyberattack

http://gcn.com/articles/2009/05/06/air-traffic-control-vulnerabilities.aspx

By Kathleen Hickey
GCN.com
May 06, 2009

The Federal Aviation Administration’s air traffic control system is 
vulnerable to cyberattacks via Web applications that support the system, 
according to a new report released by the Transportation Department’s 
Office of Inspector General (OIG).

“In our opinion, unless effective action is taken quickly, it is likely 
to be a matter of when, not if, [air traffic control] systems encounter 
attacks that do serious harm to [air traffic control] operations,” wrote 
Rebecca Leng, DOT’s assistant inspector general for financial and 
information technology audits, in the report.

Reps. John Mica (R-Fla.) and Tom Petri (R-Wis.) requested the report, 
titled “Review of Web Applications Security and Intrusion Detection in 
Air Traffic Control Systems.”

The satellite-based air traffic control system is heavily reliant on 
commercial software and IP-based technology. Among the auditors’ 
conclusions:

[...]


--
LayerOne 2009, Information Security for the discerning professional. 
May 23-24 2009 @ The Anaheim Marriott in Anaheim, California 
Visit http://layerone.info for more information