BlackHat资料us-14-Santamarta-SATCOM-Terminals-Hacking-By-Air-Sea-And-Land-WP.pdfVIP

TECHNICAL WHITE PAPER SATCOM Terminals: Hacking by Air, Sea, and Land Ruben Santamarta Principal Security Consultant Abstract Satellite Communications (SATCOM) plays a vital role in the global telecommunications system. IOActive evaluated the security posture of the most widely deployed Inmarsat, Iridium, and Thuraya SATCOM terminals. IOActive analyzed the firmware of these devices and found that malicious actors could abuse all of the devices within the scope of this study. The vulnerabilities included what would appear to be backdoors, hardcoded credentials, undocumented, and/or insecure protocols. These vulnerabilities have the potential to allow a malicious actor to intercept, manipulate, or block communications, and in some cases, to remotely take control of the physical device. Copyright ©2014. All Rights Reserved.- 1 - Contents INTRODUCTION3 TYPESOFSATCOM INFRASTRUCTURE3 InmarsatC3 VSAT4 BGAN4 BGANM2M4 FB4 SwiftBroadband4 ClassicAeroService4 SCOPEOFSTUDY5 METHODOLOGY6 IMPACT9 VULNERABILITYCLASSES9 Backdoors9 HardcodedCredentials9 InsecureProtocols9 UndocumentedProtocols9 WeakPasswordReset9 ATTACKSCENARIOSAGAINSTHARRIS BGANTERMINALS10 ATTACKSCENARIOSAGAINSTHUGHESBGAN M2MTERMINALS13 ScenarioOne14 ScenarioTwo14 ATTACKSCENARIOSAGAINSTCOBHAMBGANTERMINALS15 Scenario:PersonalCommunicationsfortheMilitaryasAttackVector16 ATTACKSCENARIOSAGAINSTMARINEVSATAND FBTERMINALS17 ScenarioOne:NavigationCharts18 ScenarioTwo:OperationalIntegrity18 ATTACKSCENARIOSAGAINSTCOBHAMAVIATOR19 LevelA–Catastrophic19 LevelB–Hazardous19 LevelC–Major19 LevelD–Minor20 LevelE–NoEffect20 ATTACKSCENARIOSAGAINSTCOBHAMGMDSSTERMINALS22 C