AIRSPACE SECURITY · COMPLETE REFERENCE

ADS-B security: how aircraft signals are attacked — and detected

ADS-B is the backbone of modern air-traffic surveillance, yet it was designed for safety and openness, not security: its messages are not authenticated and not encrypted. This is the complete, plain-English reference to the resulting attack surface — every major attack class, the surge in real-world GNSS spoofing, and the concrete ways these attacks are detected. Maintained alongside an open, citable benchmark dataset.

The landscape

Attacks on air-traffic signals are no longer theoretical

For a decade, ADS-B attacks lived mostly in security papers. That changed. Industry monitors now report a steep, sustained rise in GNSS (GPS) spoofing affecting civil aviation — Aireon observed roughly a 500% increase in spoofing activity, with on the order of 1,500 flights per day affected in 2025 versus a few hundred in early 2024, and EASA recorded about 6,000 spoofing events in 2024, a quarter of them during approach. Activity clusters near conflict zones but is no longer confined to them.

0
reported rise in aviation GNSS spoofing (Aireon, 2024→2025)
0
flights affected by spoofing at 2025 peak
0
spoofing events logged by EASA in 2024
0
authentication on a raw ADS-B message

Figures as reported by Aireon and EASA; see references below. AeroScope is an independent observer-relative platform — it does not control air-traffic systems; it makes these signals legible and flags the inconsistencies attacks leave behind.

Root cause

Why ADS-B is insecure by design

ADS-B was standardised to make aviation safer and more open — every aircraft continuously announces where it is so everyone can see it. Security was not a design goal. Three properties create the entire attack surface:

Researchers demonstrated practical attacks over a decade ago using inexpensive software-defined radios — Schäfer, Lenders & Martinovic showed low-cost injection of fake messages in 2013, and Strohmeier, Lenders & Martinovic mapped the protocol's security in their 2015 IEEE survey. The hardware has only gotten cheaper since. How ADS-B works →

The attack taxonomy

Every major class of ADS-B attack

AttackWhat it doesEffect on the picture
EavesdroppingPassively receive all traffic in rangePrivacy / reconnaissance; no signal change
JammingFlood 1090 MHz with noiseDenial of service — aircraft vanish from a whole area
Message injection (ghost aircraft)Transmit fabricated frames for non-existent aircraftPhantom targets appear; controllers/operators chase nothing
Message deletionCancel a target's frames via destructive interferenceA real aircraft disappears from surveillance
Message modificationAlter fields of a real aircraft's broadcastsVirtual trajectory change — wrong altitude, position or identity
ReplayRe-broadcast previously recorded messagesPlausible but stale/duplicated tracks
Flooding / DoSSaturate receivers with high-rate valid-looking framesProcessing overload; real targets crowded out
GNSS / GPS spoofingFake the satellite signals the aircraft navigates byThe aircraft honestly reports a false position via ADS-B

The first seven attack the ADS-B link directly. The eighth — GNSS spoofing — is different and increasingly the dominant real-world threat, so it deserves its own section.

The key distinction

ADS-B spoofing vs GNSS spoofing

📡

ADS-B spoofing

The attacker forges the radio message. The aircraft (real or fabricated) "says" something false because someone else transmitted it. Defended by checking message integrity and cross-validating against independent receivers.

🛰️

GNSS / GPS spoofing

The attacker forges the satellite signal. A real aircraft's GPS computes the wrong position, and the aircraft then broadcasts that wrong position truthfully over ADS-B. This is the surge driving 2024–2025 incidents, often near conflict zones.

Why it matters for detection. A GNSS-spoofed aircraft passes naive "is the sender authentic?" checks — the sender is the real aircraft. It is caught instead by physics and consistency: the reported track suddenly jumps, freezes, or violates the flight envelope, and disagrees with independent receiver geometry. Those are exactly the signals AeroScope's integrity layer watches.

Uncrewed dimension

Drones, Remote ID and the low-and-slow gap

Drones widen the attack surface from two directions. A compliant drone broadcasting Remote ID can have that broadcast spoofed just like ADS-B. And most small drones broadcast nothing on these frequencies at all — a deliberate-intrusion blind spot that ADS-B alone cannot close. AeroScope flags Remote-ID and low-and-slow candidates honestly, and is explicit that a fully silent drone is invisible to cooperative surveillance. Drone detection →

Defence

How these attacks are actually detected

Because ADS-B cannot be authenticated cryptographically (today), defence is about cross-checking every broadcast against things an attacker cannot easily fake at once: physics, message-integrity metadata, and independent geometry.

Integrity-field checks

A DO-260B-style validation of NIC/NACp/NACv/SIL — a fabricated message often gets these wrong or claims precision its track can't support. Integrity model →

Physical plausibility

A Kalman filter predicts the next position; spoofs that teleport, freeze or exceed the performance envelope fail the normalised-innovation test.

Self-consistency residuals

Geometric-vs-barometric altitude, ground-speed-vs-Mach and track-vs-heading should agree on a real airframe; contradictions betray fabrication.

Multi-receiver cross-check

A genuine aircraft is heard by many independent receivers; multilateration and inter-network agreement expose single-source or geometry-inconsistent signals. Multi-source fusion →

Consensus anomaly detection

Six independent torch-free detectors (River, IsolationForest, pykalman, OpenAP, stumpy, PyOD) vote; a flag fires only on agreement. Detectors →

Transparent attention ranking

The signals roll into an explainable 0–100 attention score so a human looks at the right aircraft first — a ranker, never an automated accusation. Threat scoring →

This is precisely what AeroScope runs on every aircraft, every cycle, fused across 60+ public receiver networks. See the end-to-end method on how to detect ADS-B spoofing.

For observers

What you can actually do

Open research

An open benchmark for ADS-B attack detection

Detection research has long been held back by the lack of shared, labelled, openly-licensed attack data. AeroScope publishes the ADS-B Anomaly Benchmark v1 (CC-BY 4.0): real airborne traffic paired with synthetically injected attacks from the standard taxonomy (altitude/velocity tampering, ghost kinematics, integrity-field downgrade; methodology after Habler & Shabtai, 2018), across 38 documented columns, with a reproducible IsolationForest baseline (ROC-AUC ≈ 0.87). Use it to build and compare your own detectors — also on Hugging Face. Dataset & card →

References & further reading

Sources

· Strohmeier, M., Lenders, V. & Martinovic, I. (2015). On the Security of the Automatic Dependent Surveillance-Broadcast Protocol. IEEE Communications Surveys & Tutorials.

· Schäfer, M., Lenders, V. & Martinovic, I. (2013). Experimental Analysis of Attacks on Next Generation Air Traffic Communication. ACNS.

· Habler, E. & Shabtai, A. (2018). Using LSTM encoder-decoder algorithm for detecting anomalous ADS-B messages. Computers & Security. arXiv:1711.10192

· EASA (2024) reporting on GNSS spoofing/jamming events affecting civil aviation.

· Aireon (2025). Observations of trends in GPS anomalies affecting aviation (white paper).

· OPSGROUP (2025). GPS Spoofing Workgroup — Final Report.

FAQ

Frequently asked questions

Why is ADS-B insecure?
ADS-B was designed for safety and openness, not security: its messages are not authenticated, not encrypted, and not integrity-protected. A receiver cannot verify who sent a message, so anyone with an inexpensive software-defined radio can transmit well-formed but fabricated frames. Defence relies on cross-checking each broadcast against physics, integrity metadata, and independent receiver geometry.
What is the difference between ADS-B spoofing and GPS (GNSS) spoofing?
ADS-B spoofing forges the radio message itself — injecting ghost aircraft or altering a real aircraft's reported state. GNSS spoofing forges the satellite-navigation signal, so a real aircraft computes a wrong position and then broadcasts that wrong position truthfully over ADS-B. GNSS spoofing is the dominant real-world threat in 2024–2025 and is caught by physics/consistency checks rather than sender-authenticity checks.
What is a ghost aircraft?
A ghost (or phantom) aircraft is a fabricated target that exists only as injected ADS-B messages, with no physical airframe behind it. It typically fails plausibility and integrity checks — for example appearing to only one receiver or moving in ways no real aircraft could.
How common is aviation spoofing now?
Much more common than a few years ago. Aireon reported roughly a 500% rise in GNSS spoofing affecting aviation between early 2024 and 2025 (on the order of 1,500 flights per day at peak), and EASA logged about 6,000 spoofing events in 2024. Activity clusters near conflict zones but is no longer limited to them.
Can ADS-B attacks be detected without cryptography?
Yes. Since ADS-B has no built-in authentication today, detection cross-checks every broadcast against things an attacker cannot easily fake simultaneously: integrity fields (NIC/NACp/SIL), physical plausibility (a Kalman innovation test), self-consistency residuals, and independent multi-receiver geometry. AeroScope runs all of these and surfaces inconsistencies with an explainable attention score.
Does AeroScope stop or prevent attacks?
No. AeroScope is passive situational awareness — it detects and surfaces inconsistencies in public ADS-B broadcasts so a human can decide what to do. It does not transmit, jam, authenticate aircraft, or interfere with any system, and genuine safety concerns should go to the relevant aviation authorities.