Iran Hacked GPS Signals To Capture U.S. Drone
Exploit of well-known bug in drone's software made it think it was landing at an American airfield, not 140 miles inside Iran.Iran recently captured a CIA batwing stealth drone by spoofing the GPS signals it received, fooling the drone into thinking it was landing at its home base.
The Christian Science Monitor, broke that news Thursday, after interviewing an Iranian engineer who's been reviewing the systems of the captured RQ-170 Sentinel drone, which was downed by Iranian forces on December 4 near Kashmar, which is about 140 miles inside northeast Iran.
More Security Insights
White Papers
- Mobile BI: Actionable Intelligence for the Agile Enterprise
- Creating the Enterprise-Class Tablet Environment - by Yankee Group
Reports
More >>Webcasts
- Outsourcing Security: What Every Potential Cloud Security Customer Should Know
- Maximize ROI with Database Consolidation onto Private Clouds
"The GPS navigation is the weakest point," the engineer told the Monitor. Indeed, numerous researchers have warned that GPS signals are relatively easy to spoof, given that the related signal broadcast by satellites is relatively weak. Accordingly, the Iranians focused on spoofing the GPS data being received by the drone.
[ A nationwide broadband network is at risk due to GPS interference. See Lightsquared Disrupts Airplane Navigation GPS, Feds Say. ]
To make the drone rely only on GPS, however, first the Iranians jammed the remote-control communications channel used to guide the drone from its control center. "By putting noise [jamming] on the communications, you force the bird into autopilot. This is where the bird loses its brain," said the engineer. Notably, it's also much easier than trying to crack the encrypted remote-control communications channel.
With the drone relying solely on GPS to determine its latitude, longitude, altitude, and velocity, the Iranians then broadcast carefully spoofed GPS coordinates, which allowed the drone to land at what it believed was its home base. In reality, it landed well inside Iranian borders. The altitude of the spoofed location was slightly different, however, which ended up denting the drone's underbelly, as can be seen in video footage released by Iran.
Tuesday, the Obama administration appealed to Iran to return the drone, but voiced doubts that the country would comply with that request. At least one semi-official Iranian news agency also appeared to dismiss the request. Furthermore, the Swiss ambassador to Iran--who handles American interests with Iran--was summoned by Iranian officials on Thursday to account for "America's violation of the country's airspace with a spy drone," reported Haaretz.com.
U.S. officials have said the drone, which was under the control of the CIA, was conducting reconnaissance of sites that might be used for nuclear energy or weapons production. In a press conference this week, U.S. defense secretary Leon Panetta said that "important intelligence operations" such as the drone program would continue.
According to the Iranian engineer that spoke with the Monitor, Iran's takedown of a U.S. drone didn't occur overnight. Rather, its engineers have been studying drones since 2007, and especially since 2009, which is when the RQ-170 first deployed in Afghanistan. They also reverse-engineered the systems of two less-advanced drones that had been downed inside Iran in recent years, looking for exploitable vulnerabilities.
The revelations over Iran's GPS jamming capabilities mean that the country could be able to divert any GPS-guided missiles launched at targets inside its borders.
IT's spending as much as ever on disaster recovery, despite advances in virtualization and cloud techniques. It's time to break free. Download our Disaster Recovery Disaster supplement now. (Free registration required.)
Related Reading
| To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy. | |
|
|
T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting! |
Subscribe to RSSResource Links
This Week's Issue
Free Print Subscription
SubscribeCurrent Government Issue
- Going Mobile: As federal agencies embrace devices and apps to meet employee demand, the White House seeks one comprehensive mobile strategy.
- Smartphone Security: The National Security Agency is developing technologies to make commercial devices suitable for intelligence work.
- Read the Current Issue
Technology Whitepapers
- Mobile BI: Actionable Intelligence for the Agile Enterprise
- How To Regain IT Control In An Increasingly Mobile World - by BlackBerry
- The BlackBerry PlayBook tablet's Good Bones - by BlackBerry
- Red Alert: Why Tablet Security Matters - by BlackBerry
- New Visual and Wizard-Driven Paradigms for Exploring Data and Developing Analytic Workflows
Featured Resource
This is your portal to all the news, product information, technical data, and other information related to the topic of computer user authentication and certification. Visit us to find out how to ensure that computer users are who they say they are.
Learn More
Featured Reports
Featured Webcasts
- Outsourcing Security: What Every Potential Cloud Security Customer Should Know
- Maximize ROI with Database Consolidation onto Private Clouds
- Effective IT Inventory and Asset Management: From Quagmire to Quick Fix
- Server Virtualization Gets Relief From Tivoli Storage Manager for Virtual Environments
- The ABC's of Cloud Computing in the Midmarket












