DEF CON 33 - RF Village - Airborne WiFi: Rogue Waves in the Sky - m0nkeydrag0n

This presentation highlights cybersecurity risks in commercial airline Wi-Fi, including evil twin attacks that pose as legitimate networks to compromise passenger data 6:02-6:26.

Key Takeaways:
• In-flight entertainment systems require FAA approval through Designated Engineering Representatives to ensure safety 1:13-1:21
• Evil twins are access points posing as legitimate networks, while rogue APs are unapproved access points connected to the network 1:24-1:40
• A real-world example occurred in Australia where someone set up evil twins on an airline with captive portals to steal passenger information 6:10-7:02
• Effective threat hunting requires understanding the onboard infrastructure, analyzing BSSIDs, and filtering out noise from legitimate sources like Apple private relays 8:50-9:30
• Tools like SIM systems, Wireshark, ADS-B, and Wigle help investigate and correlate data during security incidents 16:17-16:53

Creativity in security investigations is crucial, as thinking outside conventional approaches can reveal threats that might otherwise appear benign 21:35-21:41.

Sources:

• 1:13-1:21 FAA approval process for aircraft systems
• 1:24-1:40 Definition of evil twins vs rogue APs
• 6:10-7:02 Australia airline evil twin attack example
• 8:50-9:30 Threat hunting techniques and challenges
• 16:17-16:53 Tools for investigating in-f