Navy Wants Cyber Weapons That Shoot Data Beams
ectotherm writes "By 2018, the US Navy hopes to equip its fighter jets with the ability to shoot data streams containing 'specialized waveforms and algorithms,' useful in an electronic attack or cyber-invasion. A few non-classified details here."
Yeah, it's kind of far-fetched. OTOH, if there is something exploitable in the electronics of an enemy system, it could be very useful to use that for a combat advantage. Imagine a comms system that can get overloaded with corrupt packets, and reboots itself. Even if you can only make an enemy radio unreliable instead of taking it out completely, he might miss out on key intel or orders.
The story blurb is of course ridiculous but i think you are downplaying the extent to which software/system vulnerabilities will be a factor in future conflicts. Especially due to the assymetrical, break once, break everywhere dynamics of attacking widely deployed IT.
I'm not sure who the US will use this against, but I suspect many people will be able to use IT attacks against the US. And it's going to be terribly effective, because getting new IT created, tested, deployed, and humans trained on how to run it, takes us a lot of time and money. But once some guy figures out how to break it... usually it's broken everywhere at once.
IOW: attacking the US's use of IT is going to be a force multiplier for people that don't like us. And they'll probably be able to do it on the cheap. Whatever they cannot figure out themselves, they can pay someone $5-$50k in Russia to figure out how to do for them.
I've heard that for a long time, ground-to-sat control signals weren't authenticated or encrypted. For a long time, screwing with Uncle Sam was kind of a "security through obscurity" sort of affair, but the clock has pretty much run down on that concept; seeing what kind of successful attacks are waged will be interesting.
Suppose for the sake of argument that some GPS-guidance system were using an off the shelf receiver that had support for the D-GPS standard [the stuff where a terrestrial signal is used to enhance accuracy]. Even though the military can use the "military grade" GPS, more and more work is getting accompolished using consumer receivers, so its only natural to assume that some may have this "local radio" feature that i seem to remember.
So what's to stop someone who has a factory he doesn't want getting blown up to introduce a huge "correction" offset into the local signal. Perhaps you can misdirect people and potentially munitions [not aware of any GPS guided munitions though].
Or suppose that our ground units aren't using encrypted comms all the time? suppose you've got a radio listener that records everything it hears, and correlates that with times, channels, etc. Some association rule mining and you have gleaned a working model of who is using the radio when, and what they are saying. Now you decide to start playing back the audio you previously recorded, and for some amount of time, everyone using radios is _really_ confused. Maybe you even call in a false operation or movement. Maybe you convince the US to bomb an orphanage by giving a _very_ authentic sounding (you just replay Private Pyle's voice, after all) request for ordinance at coordinates you control.
The weak link in all of these computer-aided decision systems is that humans beleive them when they shouldn't, and that humans don't do enough to protect them from tampering. rather than some kind of magic wave [which could very well work, for instance by somehow distrurbing the small gyroscopes that inertial nav systems use... but again, that would be ANTI aircraft instead of launched from aircraft], figuring out how to mis-use the technology to cause problems for the humans will be where successfull attacks come from.
If I were going to try and wreck the superior tech advantages of the US military, I'd start by understanding the sensor inputs to the machines that do the thinking. Are laser guided munitions effective in heavy fog or other light-attenuation situations? Can i build goggles that let me see where directed laser energy is currently lighting things up? If so, i can predict targets. If i have boots on the ground near the target, i can find out exactly where the illuminator is positioned (by placing a sheet 10m infront of hte target and working it through a range of motion to see when i am/am not illuminated). If i use several of my own laser designators, can I re-direct a laser-seeking munitions head?
The professionals have been playing war games a lot longer that I've been writing slashdot posts. But I know from an entire lifetime of working with software that there will always be bugs, and humans will beleive the machine when they shouldn't.
My opinions are my own, and do not necessarily represent those of my employer.
I cite from the article'
'"We will tell you that in the world of the exciter, the holy grail is to get a universal design that can generate all the waveforms that you could possibly imagine," says Falco.'
Its pretty clear what they mainly want: Inject any analog waveform in any band to confuse radar with arbitrary objects. If the enemy radar gets a software upgrade which detects you last attempt, you just change your software. Up to now planes tracked by radar (missiles?) could jam the radar by fixed waveforms or the plane ejects some objects (which dont act like planes) to irritate the radar. With the proposes a system you can make the opponent see hundreds of things on the radar which look like planes and fly like planes. Heck you can even fake the transponder message of their own plane you just shot down.
You can use such a capability for choosen plaintext attacks (e.g. what do their systems send when a plane is entering a perimeter around the base), to confuse the enemy during active combat. If somebody uses radio links, and your crytographers are good enough you can also directly inject messages into enemy communications. Lets not forget that in asymmetric conflict the opponents of the USA very often have only the rudest communication means; the capability to control e.g. GSM communication during a battle could help in some places. Last but not least, you could help a plain cyberwar by injecting information here and there.
the ac's "mirror" is a reported attack site... Is that enough for an IP ban?
Isn't this how the Cylons killed most of the colonial tech?
Shot in a beam of data via the ECM systems and activated the "kill switch" 6 had planted in the new software.
As long as they could get the exploitable code into the system this might work.
Cue the "Windows for Warplanes" jokes...
So what you are saying is not only are we talking about war-driving at hypersonic speeds, but we're also bombing away at the Great Firewall of China in the process. I get it. Sort of like Top Gun meets The Matrix.
Only please God, please don't let Tom Cruise ever be Nemo, Mr. Anderson; whatever. No.
You can't be ahead of the curve, if you're stuck in a loop.
I understand electronic countermeasures are cheaper than chaff, but cheaper still are electronic counter-counter measures. They're fighting an uphill battle because:
Ever since the Hellfire missile was reprogrammed to arc above a target and strike downward (as opposed to track-beam-to-target), the sophistication of software on weaponry is the real arms race. Consider, for example, the following sequence of advances in technology:
It's just your classic arms race, folks.
The society for a thought-free internet welcomes you.