The US Government Accountability Office (GAO) has conducted a report into the Federal Aviation Administration (FAA)'s cyber security, finding that airline Wi-Fi could be vulnerable to hacks.
Four cybersecurity experts were consulted to put the report together and they said the firewall could be hacked like any other software and circumvented to put both passengers and the wider internet at risk.
The report explained that IP networking may allow a hacker to gain remote access to the aeroplane's systems - both those used by passengers and staff to access Wi-Fi and those using the internet in general.
This first threat would only affect people using the specific network, but could have devastating results if a hacker is able to use the network to break into the cockpit avionic systems.
"The presence of personal smartphones and tablets in the cockpit increases the risk of a system's being compromised by trusted insiders, both malicious and non-malicious, if these devices have the capability to transmit information to aircraft avionics systems," the report said.
The second threat is that anyone from the outside world could potentially attack the systems too, and inject malware onto devices. The outsiders could then attack the whole aircraft remotely.
"One cybersecurity expert noted that a virus or malware planted in websites visited by passengers could provide an opportunity for a malicious attacker to access the IP-connected onboard information system through their infected machines," the research revealed.
The GAO said: "As part of the aircraft certification process, FAA's Office of Safety (AVS) currently certifies new interconnected systems through rules for specific aircraft and has started reviewing rules for certifying the cybersecurity of all new aircraft systems."
