Re:Boeing 787 In Flight Entertainment System Security fun
by panda88888 on Wednesday September 06, 2017 @11:10AM
(#15184277)
I am not a Boeing engineer, but I do have some experience in avionics design.
The flight critical systems would be isolated from in-flight entertainment system (IFE). The IFE probably has a listen-only tap to flight metric info on an ARINC databus from the flight computer. I did a quick search and looks like 787 uses ARINC 667, a fiber optic interconnect.
Re:Boeing 787 In Flight Entertainment System Security fun
by KekDemaga on Wednesday September 06, 2017 @10:35AM
(#15184001)
One way connection of some kind? Its not an air gap but may functionally work the same way.
Re:Boeing 787 In Flight Entertainment System Security fun
by fragmede on Wednesday September 06, 2017 @10:42AM
(#15184048)
Optoisolators are a prolific and an extremely cheap electrical component that performs the "air-gap" functionality.
Re:Boeing 787 In Flight Entertainment System Security fun
by SAI_Peregrinus on Wednesday September 06, 2017 @01:01PM
(#15185204)
Electrical safety airgapping and information security airgapping are different, and entirely unrelated. If data can pass from one side to the other it's not airgapped (from an infosec perspective).
Re:Boeing 787 In Flight Entertainment System Security fun
by bonzini on Wednesday September 06, 2017 @02:59PM
(#15186206)
Fiber needs transmitter and receiver transducers. If each side has only one of those, data can literally flow only in one direction. So it's still infosec-airgapped in the other.
Re:Boeing 787 In Flight Entertainment System Security fun
by SAI_Peregrinus on Thursday September 07, 2017 @02:53PM
(#15194713)
No, data diodes are a different (but related) concept. An airgap implies no information transfer, either in or out. Use an airgap when information leakage must be stopped (as well as remote attacks), use a data diode when information can be released but you need to stop remote attacks.
Fiber optic connections aren't required, anything with separate transmit and receive lines can be turned into a data diode (as long as the protocols used permit it). RS232 null modem cables with the RX lines disconnected are a classic.
Re:Boeing 787 In Flight Entertainment System Security fun
by eeZah7Ux on Wednesday September 06, 2017 @11:14AM
(#15184314)
No, that's not airgapping.
Re:Boeing 787 In Flight Entertainment System Security fun
by evan_ on Wednesday September 06, 2017 @10:43AM
(#15184056)
I don't know enough about airplanes to know if it would be unencrypted but they radio all of that same data to the ground in some way, could the IFE system just passively listen to that broadcast?
I wouldn’t guess they would add double sensors for all that information.
Or did you mean well protected, instead of literal air gap?