ATM-EXCITE

ATM-EXCITE and SIMCOM: Enhancing Air Traffic Security

The ATM-EXCITE project is a collaborative effort funded by the SESAR JU Exploratory Research programme, involving a consortium of industrial and research partners, including STAM S.r.l. The project focuses on advancing the security and resilience of modern air traffic management systems by developing innovative cyber-security solutions. Its aim is to protect the integrity and reliability of critical surveillance technologies, ensuring safer and more robust airspace operations.

Within this framework, SIMCOM has been developed as a key research solution. SIMCOM is a multi-agent simulation platform designed to evaluate cyber-attacks targeting the Automatic Dependent Surveillance–Broadcast (ADS-B) system. It provides a flexible and extensible environment for investigating ADS-B vulnerabilities and their impact on air traffic flow and control, supporting the wider goals of the ATM-EXCITE project.

Broad illustration of how ADS-B technology works in air traffic surveillance.

Background on ADS-B

ADS-B is a surveillance technology widely adopted in both civil and military aviation, serving as a cornerstone of next-generation air traffic management. It relies on the Global Navigation Satellite System (GNSS) to determine an aircraft’s precise position, which is then automatically broadcast over radio frequencies alongside other key flight data such as speed, heading, and identification. These broadcasts enable ground stations and nearby aircraft to maintain real-time situational awareness over extensive geographic regions.

The ADS-B system comprises two main subsystems: ADS-B Out, which transmits the aircraft’s position and related data, and ADS-B In, which receives and decodes such messages from other aircraft and ground stations. Despite its advantages in terms of cost, coverage, and accuracy compared to traditional radar systems, ADS-B was not designed with security in mind. The unencrypted, plain-text broadcast of ADS-B messages exposes the system to multiple cyber threats including eavesdropping, spoofing, message injection, and denial-of-service attacks. These vulnerabilities raise significant concerns about trustworthiness and impede ADS-B’s full adoption as a radar replacement.

Diagram illustrating the ADS-B communication protocol and message structure.

SIMCOM: Multi-agent ATM simulation for attack evaluation on ASD-B communications

SIMCOM addresses these critical challenges by providing a comprehensive simulation environment to model and analyze the effects of cyber-attacks on ADS-B systems. Built on top of BlueSky, which is an open-source, research-grade air traffic management simulator, SIMCOM extends BlueSky’s modular architecture with specialized features tailored for cybersecurity research.

The framework allows users to simulate a wide range of attack scenarios and evaluate their operational consequences on air traffic management. Beyond threat analysis, SIMCOM also functions as a testbed for developing, verifying, and benchmarking cyber-defense strategies. Researchers, aviation authorities, and system integrators can leverage SIMCOM to experiment with mitigation techniques in a controlled setting, ensuring their effectiveness before deployment in real-world environments.

Through this simulation-based approach, SIMCOM plays a pivotal role in supporting the goals of ATM-EXCITE by advancing ADS-B security from theoretical concepts to operationally viable solutions. These efforts not only improve the safety and resilience of civil aviation but also facilitate secure data sharing in civil-military cooperation scenarios, where reliable airspace surveillance is essential.

References