AppSec California 2020

Ever wonder how digitally secure the aviation industry is? Take a peek inside the world's largest aircraft manufacturer Boeing as Chris takes you on a journey of surprisingly weak security which can potentially affect passenger and aircrew safety. XSS Exploitable vulnerabilities, email spoofing, bypassing authentication into the Aviation ID system for accessing flight control software live and test and the cabin viewing system with IoT camera in the cockpit. Chris will describe safety risks and struggles to coordinate disclosure and legal pressure by Boeing to keep silent.

Key takeaways
Boeing is in the IT business and happen to produce aircraft. Applications and software live and breathe throughout aerospace. Changing the way digital technology is regarded by industry is paramount.
Ever critical manufacturing involved with safety must have a functional coordinated disclosure program. Software affects safety system, especially when planes have already fallen out of the sky due to code errors.