Local Area Networks (LANs) in Aircraft - FTP Directory Listing - FAA

There are a variety of threats associated with attacking each of these subsystems. For example,
“An attacker who is able to break a database exchange between two routers can
also affect routing behavior. In the routing protocol data plane, an attacker who is
able to introduce bogus data can have a strong effect on the behavior of routing in
the neighborhood.
At the routing function level threats can affect the transport subsystem, where the
routing protocol can be subject to attacks on its underlying protocol. At the
neighbor state maintenance level, there are threats that can lead to attacks that can
disrupt the neighboring relationship with widespread consequences. For example,
in BGP, if a router receives a CEASE message, it can lead to breaking of its
neighboring relationship to other routers.
There are threats against the database maintenance functionality. For example,
the information in the database must be authentic and authorized. Threats that
jeopardize this information can affect the routing functionality in the overall
network. For example, if an OSPF router sends [Link State Advertisements]
LSAs with the wrong Advertising Router, the receivers will compute a [Shortest
Path First] SPF tree that is incorrect and might not forward the traffic. If a BGP
router advertises a [Network Layer Reachability Information] NLRI that it is not
authorized to advertise, then receivers might forward that NLRI's traffic toward
that router and the traffic would not be deliverable. A [Protocol Independent
Multicast] PIM router might transmit a JOIN message to receive multicast data it
would otherwise not receive.” (Quoted from Section 3 of reference A-15.)
“In general, threats can be classified into the following categories based on their
sources:
• Threats that result from subverted links: A link become subverted when an
attacker gain access (or control) to it through a physical medium. The
attacker can then take control over the link. This threat can result from the
lack (or the use of weak) access control mechanisms as applied to physical
mediums or channels. The attacker may eavesdrop, replay, delay, or drop
routing messages, or break routing sessions between authorized routers,
without participating in the routing exchange.
• Threats that result from subverted devices (e.g. routers): A subverted
device (router) is an authorized router that may have been broken into by
an attacker. The attacker can use the subverted device to inappropriately
claim authority for some network resources, or violate routing protocols,
such as advertising invalid routing information.” (Quoted from Section
3.1.1 of reference A-15.)
“There are four types of threat consequences: disclosure, deception, disruption,
and usurpation.
A-15