ATC System Vulnerable to Cyber Attacks

Web applications used in supporting FAA ATC systems are not properly secured to prevent attacks or unauthorized access, warns a report from the DOT Inspector General. The need to protect ATC systems from cyber attack requires enhanced attention because the FAA has increasingly turned toward the use of commercial software and Internet Protocol (IP)-based technologies to modernize ATC systems, according to the OIG. “While use of commercial IP products, such as Web applications, has enabled the FAA to efficiently collect and disseminate information to facilitate ATC services, it inevitably poses a higher security risk to ATC systems than when they were developed, primarily with proprietary software,” the OIG said.