Planes, Trains and Vulnerabilities: OPSEC Risks to Your Holiday Travel

  • Published
  • By 2nd Lt. Gregory Lemons
  • 17th Training Wing Operations Security
GOODFELLOW AIR FORCE BASE, Texas --  With the holiday season rapidly approaching, many throughout the community will scatter across the country to visit friends and family. While Operations Security may be a distant thought to the typical holiday traveler, security threats still exist. Here are some tips to make holiday travel both safe and enjoyable.

While awaiting a flight at the airport, it may seem tempting to log on to the public Wi-Fi with a mobile device. Not so fast! Last year, at the San Antonio International Airport, a cybercriminal created his own Wi-Fi hotspot from his vehicle in the parking lot. Mirroring the name of the airport’s sanctioned network, the scammer was able to retrieve unsuspected travelers’ Personally Identifiable Information, just from logging on to his malicious network. Luckily, authorities intervened and prevented any misuse of the private information. Look for the following cues when connecting to an unfamiliar wireless network:

• An official display site that prompts you to an internet-use agreement. Most legitimate networks ask users to agree to their terms of use.
• Multiple Wi-Fi networks with the same name may be an indicator of a scam.
• Networks that prompt you to input credit or debit card information in the event of data overages.
• Networks with no password protections or parody names.

Once on the plane and now mid-flight, strategically seated in front of a kicking toddler and beside a crying baby, what else could go wrong? Remember that boarding pass you left in the seat pocket? Be sure to take it with you and shred it later, as any adversary who gets their hands on it could use it to access your PII. The information can still be obtained from a boarding pass:

• Name, itinerary, and frequent flyer number are all from the barcode located on most passes.
• Travel history, Phone number and email address are all easily accessed using the above PII on most airlines websites.

Every piece of PII can be used by adversaries to build a profile of individuals, leading to identify theft or worse. Personal OPSEC limits these opportunities and can protect both individuals and your family. Enjoy your holiday travel, but stay vigilant.