NASA helped find a network security hole in spacecraft networks
a security flaw that could pose a threat to spacecraft in the right conditions. The team has discovered that time-triggered Ethernet , a feature that lets critical systems sit alongside minor ones on the same networking hardware, is vulnerable to a spoofing attack. An intruder can send fake sync messages by conducting electromagnetic interference through copper Ethernet cables into network switches, creating a"gap" in a switch's activity that lets bogus data slide through.
The attack requires placing a small device on the network, so remote breaches are unlikely. However, the consequences could be serious. The scientists tested the vulnerability using real NASA machinery to recreate a planned . In a simulation, the TTE exploit produced a knock-on effect severe enough that the crew capsule strayed from its course and missed a crucial docking procedure.There are simple safeguards, if not necessarily problem-free. Vehicle designers could replace copper Ethernet with fiber optic cables or place optical isolators between switches and devices, so long as they're willing to accept sacrifices in cost and performance.
NASA and the university stress that there's no"current" known threat. However, the method could also be used to compromise aircraft, power plants and industrial control systems that rely on TTE. Theoretically, a saboteur with physical access couldAll products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
France Dernières Nouvelles, France Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
Nike's big push into the blockchain starts with '.Swoosh' | EngadgetNike is launching a blockchain platform, '.Swoosh,' where it hopes fans will collect and create virtual goods..
Lire la suite »
Introducing Engadget’s 2022 holiday gift guide! | EngadgetFind gifts for everyone on your list, and maybe even yourself, among these 250+ picks..
Lire la suite »
Amazon reportedly plans sweeping layoffs that could affect thousands of employees | EngadgetThe company reportedly plans to cut approximately 10,000 corporate employees, with staff at its consumer-facing devices division among those who are likely to be affected by the move..
Lire la suite »
Twitter fired employees who publicly called out Elon Musk | EngadgetAt least three Twitter employees who survived the mass layoffs that cut the company's workforce in half have been fired after calling out their new boss on the platform..
Lire la suite »
FTX implosion could affect 'more than one million' investors | EngadgetBankruptcy documents filed by FTX indicate that it currently faces more than 100,000 creditors, a number that could expand to over one million..
Lire la suite »
‘Cyberpunk 2077: Phantom Liberty’ will be a paid DLC | EngadgetCDPR has confirmed that you'll have to pay for 'Phantom Liberty' when it drops, though it will be cheaper than a full game..
Lire la suite »