AIR-A.1
Fake GPS position on the flight deck
Counterfeit satellite signals can shift an aircraft's position, set off false terrain warnings, and leave crews flying on backup systems for the rest of the trip.
DOR's answerDOR checks the position where it enters the aircraft's systems, against what the aircraft can verify for itself, and holds a fix that fails before navigation uses it.
AIR-A.2
False time that breaks everything downstream
GPS also tells an aircraft what time it is, and spoofed time can corrupt logs and every check that depends on them.
DOR's answerDOR checks time where it enters and keeps the true order of events.
AIR-A.3
Forged datalink messages
Text messages between dispatch, air traffic control, and the flight deck can be faked or altered in transit.
DOR's answerDOR proves each message came from the station that claims it and has not changed since.
AIR-A.4
Tampered navigation databases and flight plans
Navigation data and flight plans are loaded before every flight, and a changed waypoint or procedure can sit unnoticed.
DOR's answerDOR checks the data when it arrives and again when it loads.
AIR-A.5
Malicious aircraft software parts
Aircraft load software into avionics like any other part.
DOR's answerDOR proves each software part came from its maker and holds one that does not match before it installs.
AIR-A.6
Electronic flight bags carrying bad data
Tablets on the flight deck carry charts, performance data, and weight and balance.
DOR's answerDOR proves the data on the tablet is the data that was approved.
AIR-A.7
Altered weight, balance, and fuel figures
A changed load sheet or fuel figure feeds directly into takeoff performance.
DOR's answerDOR proves the figures came from the system that produced them and were not changed on the way to the crew.
AIR-A.8
Counterfeit parts with forged paperwork
Parts sold with falsified release certificates can reach engines and landing gear.
DOR's answerDOR checks a certificate's origin before the part is accepted and keeps its history provable.
AIR-A.9
Maintenance records edited after the fact
Maintenance records decide whether an aircraft is airworthy, and records can be backdated or quietly edited.
DOR's answerDOR locks in what was done, by whom, and in what order.
AIR-A.10
Ransomware on shared airport systems
Check-in, boarding, and baggage systems are shared by many airlines at once, so one attack can stop an airport.
DOR's answerDOR keeps a record of every setting and change that cannot be edited, so recovery starts from verified ground.
AIR-A.11
Remote vendor access misused
Support connections into airport and airline systems can be used to issue changes nobody approved.
DOR's answerDOR checks where each command came from, not just whether the login was valid.
AIR-A.12
Deepfake calls to operations and crews
A cloned voice can call operations control or a crew room posing as a manager.
DOR's answerDOR checks the live call and flags a voice it cannot verify.