DOR-AIR

Reference

How aircraft and drones get fooled, and how DOR answers each one.

Drones and air taxis, airlines and airports, business and general aviation, and the airspace around them. Every entry has a permanent code and its own link you can share.

Airlines and Airports

Airliners, the airports that turn them, and the systems behind every departure.

AIR-A.1

Fake GPS position on the flight deck

Counterfeit satellite signals can shift an aircraft's position, set off false terrain warnings, and leave crews flying on backup systems for the rest of the trip.

DOR's answer

DOR checks the position where it enters the aircraft's systems, against what the aircraft can verify for itself, and holds a fix that fails before navigation uses it.

RA-1.1.1RA-1.1.2

AIR-A.2

False time that breaks everything downstream

GPS also tells an aircraft what time it is, and spoofed time can corrupt logs and every check that depends on them.

DOR's answer

DOR checks time where it enters and keeps the true order of events.

RA-5.1.1RA-5.3.2

AIR-A.3

Forged datalink messages

Text messages between dispatch, air traffic control, and the flight deck can be faked or altered in transit.

DOR's answer

DOR proves each message came from the station that claims it and has not changed since.

RA-1.3.1RA-1.3.2

AIR-A.4

Tampered navigation databases and flight plans

Navigation data and flight plans are loaded before every flight, and a changed waypoint or procedure can sit unnoticed.

DOR's answer

DOR checks the data when it arrives and again when it loads.

RA-1.3.3RA-2.1.3

AIR-A.5

Malicious aircraft software parts

Aircraft load software into avionics like any other part.

DOR's answer

DOR proves each software part came from its maker and holds one that does not match before it installs.

RA-2.2.2RA-4.1.3

AIR-A.6

Electronic flight bags carrying bad data

Tablets on the flight deck carry charts, performance data, and weight and balance.

DOR's answer

DOR proves the data on the tablet is the data that was approved.

RA-1.3.4RA-4.1.4

AIR-A.7

Altered weight, balance, and fuel figures

A changed load sheet or fuel figure feeds directly into takeoff performance.

DOR's answer

DOR proves the figures came from the system that produced them and were not changed on the way to the crew.

RA-1.3.2RA-1.2.4

AIR-A.8

Counterfeit parts with forged paperwork

Parts sold with falsified release certificates can reach engines and landing gear.

DOR's answer

DOR checks a certificate's origin before the part is accepted and keeps its history provable.

RA-3.3.3RA-6.2.2

AIR-A.9

Maintenance records edited after the fact

Maintenance records decide whether an aircraft is airworthy, and records can be backdated or quietly edited.

DOR's answer

DOR locks in what was done, by whom, and in what order.

RA-5.3.1RA-6.1.3

AIR-A.10

Ransomware on shared airport systems

Check-in, boarding, and baggage systems are shared by many airlines at once, so one attack can stop an airport.

DOR's answer

DOR keeps a record of every setting and change that cannot be edited, so recovery starts from verified ground.

RA-4.1.4RA-4.3.2

AIR-A.11

Remote vendor access misused

Support connections into airport and airline systems can be used to issue changes nobody approved.

DOR's answer

DOR checks where each command came from, not just whether the login was valid.

RA-2.2.1RA-2.4.2

AIR-A.12

Deepfake calls to operations and crews

A cloned voice can call operations control or a crew room posing as a manager.

DOR's answer

DOR checks the live call and flags a voice it cannot verify.

RA-3.2.2

Business and General Aviation

Business jets, charter operators, flight schools, and the people who fly and maintain them.

AIR-B.1

Fake GPS position on business and training aircraft

Business jets and training aircraft fly the same spoofed regions as airliners, often with fewer backup systems.

DOR's answer

DOR checks the position before the flight deck uses it, on equipment already aboard.

RA-1.1.1

AIR-B.2

Cabin networks reaching flight systems

Cabin Wi-Fi and passenger devices share an aircraft with systems that fly it.

DOR's answer

DOR checks what crosses from the cabin side before anything on the aircraft side acts on it.

RA-1.2.2RA-2.1.4

AIR-B.3

Impostor charter and payment instructions

Fake instructions to change bank details or booking terms cost charter operators and brokers heavily.

DOR's answer

DOR confirms the sender before anyone acts on the request.

RA-2.4.1RA-3.2.1

AIR-B.4

Logbooks and aircraft records that change hands

An aircraft's value rests on its logbooks, and records can be altered before a sale.

DOR's answer

DOR keeps every entry provable from the day it was written.

RA-6.3.1RA-5.3.1

AIR-B.5

Flight planning and weather data altered

Business and general aviation crews plan from third-party data feeds.

DOR's answer

DOR proves the plan and the weather came from their source unchanged.

RA-1.3.4

AIR-B.6

Avionics updates loaded at the shop

Updates to avionics often travel on cards and drives through maintenance shops.

DOR's answer

DOR only allows registered devices and checks every update before it installs.

RA-3.3.1RA-2.2.2

Drones and Advanced Air Mobility

Drones, the agencies and companies that fly them, and the air taxis coming behind them.

AIR-U.1

Hijacked drone control links

A drone can be taken over through its control link.

DOR's answer

DOR checks every command on the aircraft itself, no matter which link carried it.

RA-2.1.1RA-2.1.2

AIR-U.2

Fake GPS that steers a drone off course

Spoofed signals can steer a drone into restricted airspace or onto the ground.

DOR's answer

DOR checks the position on board and holds navigation to what it can verify.

RA-1.1.1RA-1.1.6

AIR-U.3

Spoofed drone identity

Drones broadcast an identity and position, and that broadcast can be faked or cloned.

DOR's answer

DOR proves which broadcasts came from the aircraft that claims them.

RA-1.2.1RA-3.1.2

AIR-U.4

First-responder video challenged in court

Drone video from police and fire calls becomes evidence.

DOR's answer

DOR proves where each recording came from and that nothing changed, from capture to courtroom.

RA-1.4.4RA-6.3.1

AIR-U.5

Forged flight approvals and airspace authorizations

Drone flights depend on approvals passed between operators and airspace service providers.

DOR's answer

DOR proves each approval came from the service that issued it.

RA-1.3.1RA-3.2.4

AIR-U.6

Fleet commands to many aircraft at once

One command to a fleet of delivery or inspection drones reaches every aircraft at once.

DOR's answer

DOR verifies fleet commands on each aircraft before it acts.

RA-2.1.3RA-3.1.1

AIR-U.7

Malicious drone firmware

A firmware update can carry changes that turn a drone against its operator.

DOR's answer

DOR checks updates before they install and watches for changes beyond what was approved.

RA-2.2.2RA-4.1.2

AIR-U.8

Inspection data that can be questioned

Utilities and insurers act on drone inspection images and readings.

DOR's answer

DOR attaches provable origin to every image and reading.

RA-6.2.3RA-6.2.1

AIR-U.9

Flights beyond the operator's sight

Drones flown beyond visual line of sight rely on links and systems the pilot cannot see.

DOR's answer

DOR keeps checking on board when the link drops, with no outside service.

RA-D.2RA-D.3

AIR-U.10

Air taxi flight controls and fleet operations

Air taxis will fly by wire, under fleet operations centers, into vertiports.

DOR's answer

DOR verifies commands at the speed flight controls work and keeps every fleet instruction provable.

RA-2.1.4RA-1.3.1

AIR-U.11

Captured drones turned against the fleet

A drone that is lost or captured can be put back into the fleet with changes.

DOR's answer

DOR notices when a device has changed and flags it before it rejoins.

RA-3.1.4RA-4.4.2

Air Traffic and Airspace

The surveillance, voice, and data systems that keep aircraft apart. Engagement on these systems runs through the DOR Government page.

AIR-T.1

Ghost aircraft injected into surveillance

Aircraft broadcast their own position in the clear, so a transmitter on the ground can place aircraft that do not exist on a controller's screen.

DOR's answer

DOR proves which broadcasts came from the aircraft that claim them.

RA-1.2.1RA-3.1.3

AIR-T.2

Fake controller transmissions

An impostor on a control frequency can issue instructions that sound authentic.

DOR's answer

DOR flags a voice transmission it cannot verify without stopping any transmission from going out.

RA-3.2.2RA-3.2.1

AIR-T.3

Altered notices and weather feeds

Notices to air missions and weather reports reach crews and controllers through many hands.

DOR's answer

DOR proves each notice and report came from its source unchanged.

RA-1.3.4RA-1.3.2

AIR-T.4

Positions that drift when GPS is spoofed

Spoofed GPS shifts the positions aircraft report, and every system that tracks them inherits the error.

DOR's answer

DOR checks reported positions against what each system can verify for itself.

RA-1.1.1RA-1.2.2

AIR-T.5

Replayed or delayed surveillance data

Old position reports can be replayed or delayed to hide where aircraft actually are.

DOR's answer

DOR rejects reports it has already seen and flags data that arrives late.

RA-5.2.1RA-5.2.2

Everything that flies acts on what it is told. DOR proves it first. Innovations for an unseen future.