Dangerous and Costly New Cyber Threat: Hacking 3D Manufacturing Systems Demonstrated
Ben-Gurion University of the Negev, Singapore University of Technology and Design and University of South Alabama Simulate First Complete Sabotage Attack on a Drone Propeller Part
Researchers from three universities combined their expertise to demonstrate the first complete sabotage attack on a 3D additive manufacturing (AM) system, illustrating how a cyber attack and malicious manipulation of blueprints can fatally damage production of a device or machine.
In their paper titled “Dr0wned,” researchers from Ben-Gurion University of the Negev (Yuval Elovici and Sofia Belikovetsky), the University of South Alabama (Mark Yampolskiy) and Singapore University of Technology and Design (Yuval Elovici and Jinghui Toh) detail how to sabotage the quality of a 3D-printed functional part, which leads to the destruction of a device.
A proof-of-concept video shows how the researchers destroyed a $1,
000 quadcopter UAV drone by hacking into the computer used to control the 3D printing of replacement propellers. Once they penetrated the computer, the researchers identified the propeller blueprint file and inserted defects undetectable by visual inspection. During flight tests, the sabotaged propeller broke apart during ascent, causing the drone to smash into the ground.
More than 100 industries, including aerospace, automotive and defense, employ additive printing processes. According to the Wohlers Report, the AM industry accounted for $5.165 billion of revenue in 2015. Furthermore, 32.5 percent of all AM-generated objects are used as functional parts.
“Imagine that an adversary can sabotage functional parts employed in an airplane’s jet engines. Such an attack could cost lives, cause economic loss, disrupt industry, and threaten a country’s national security,” says Prof. Yuval Elovici. Elovici is a member of BGU’s Department of Software and Information Systems Engineering, Director of the Deutsche Telekom Innovation Labs @ BGU, the BGU Cyber Security Research Center (CSRC) and Research Director at the Singapore University of Technology and Design (SUTD). The CSRC is a collaboration between the University and Israel’s National Cyber Bureau, focused on advanced cyber security topics.
“With the growth of additive manufacturing worldwide, we believe the ability to conduct malicious sabotage of these systems will attract the attention of many adversaries, ranging from criminal gangs to state actors, who will aim either for profit or for geopolitical power,” says Elovici.
“‘Dr0wned’ is not the first article that raises this issue. However, all prior research has focused on a single aspect of a possible attack, assuming that all other attack elements are feasible,” the researchers say. “This is the first experimental proof of a complete attack chain initiated by sabotaging the 3D-printed propeller.”
The collaborative study addresses the dangerous consequences of cyber attacks, and proposes a systematic approach for identifying opportunities and a methodology for assessing the level of difficulty of an attack involving AM.
About American Associates, Ben-Gurion University of the Negev
American Associates, Ben-Gurion University of the Negev (AABGU) plays a vital role in sustaining David Ben-Gurion’s vision: creating a world-class institution of education and research in the Israeli desert, nurturing the Negev community and sharing the University’s expertise locally and around the globe. As Ben-Gurion University of the Negev (BGU) looks ahead to turning 50 in 2020, AABGU imagines a future that goes beyond the walls of academia. It is a future where BGU invents a new world and inspires a vision for a stronger Israel and its next generation of leaders. Together with supporters, AABGU will help the University foster excellence in teaching, research and outreach to the communities of the Negev for the next 50 years and beyond. Visit vision.aabgu.org to learn more.
Other articles available online
TechRepublic: 3D printing hack: Researchers crash drone with sabotaged propeller
http://www.techrepublic.com/article/3d-printing-hack-researchers-crash-drone-with-sabotaged-propeller/
TechCrunch: Researchers sabotage 3D printer files to destroy a drone
https://techcrunch.com/2016/10/21/researchers-sabotage-3d-printer-files-to-destroy-a-drone/
Full paper is available here