My work focuses on the security of air-to-ground communications systems and protocols in use for aviation. It takes a long time to develop technologies used in civil aviation; once a product is built and tested, it has to be certified and integrated before it makes its way onto an aircraft. Since most of the systems in use today were not designed with security in mind - or before attacks became feasible - they have a wide install base but rarely have any security provision in place. Rolling out patches or upgrades is equally as difficult as deploying new systems, which means that security solutions have to avoid replacing the original system whilst still trying to fix the problem. This gap is roughly where my work sits.
I am part of the System Security Lab under Ivan Martinovic, which looks at a range of topics from biometric authentication to wireless security.
Oxford Computer Science Conference (Oxford) - June 9 - Exploring Weak Ciphers Usage in Business Aircraft Communications
Financial Cryptography and Data Security (Malta) - April 3-7 - Economy Class Crypto: Exploring Weak Cipher Usage in Avionic Communications via ACARS [Paper]
OpenSky Workshop (Oxford) - November 24-25 - Investigating Security & Privacy in ACARS - the Frankenstein of Avionic Communications [Link]
Integrated Communications, Navigations and Surveillance (Washington D.C.) - April 19-21 - On the Security and Privacy of ACARS
I am currently a member of the Centre for Doctoral Training in Cyber Security, which is within the Computer Science Department. Before starting at Oxford, I did an Undergraduate Masters in Computer Science at the University of Warwick.
If you want to contact me using PGP you can find my keys on mit.pgp.edu with the ID 0x1B53AF07 and fingerprint 6F11 0234 64EC 6FCA FD36 C393 4D69 E423 1B53 AF07
Undermining Privacy in the Aircraft Communications Addressing and Reporting System (ACARS)
Matthew Smith‚ Daniel Moser‚ Martin Strohmeier‚ Ivan Martinovic and Vincent Lenders
In 18th Privacy Enhancing Technologies Symposium (PETS 2018). Barcelona. July, 2018.
Utilizing Air Traffic Communications for OSINT on State and Government Aircraft
Martin Strohmeier‚ Matthew Smith‚ Daniel Moser‚ Matthias Schäfer‚ Vincent Lenders and Ivan Martinovic
In Cyber Conflict (CYCON)‚ 2018 10th International Conference on. IEEE. May, 2018.
The Real First Class? Inferring Confidential Corporate Mergers and Government Relations from Air Traffic Communication
Martin Strohmeier‚ Matthew Smith‚ Vincent Lenders and Ivan Martinovic
In IEEE European Symposium on Security and Privacy (EuroS&P) 2018. IEEE. April, 2018.