Detecting Fake Aircraft Signals Could Create a Business in Proving Which Alerts Are Safe to Act On
Detecting false aircraft broadcasts must preserve the information needed for safe operations.
The Signal in brief
- Who it affects
Aviation-qualified security developers, testing teams and integration providers.
- Where
Singapore aviation, with possible regional applications.
- Urgency
CyberCall applications close 9 January 2027 at 23:59 Singapore time.
No new aviation award, paid testing contract or profitable recurring service is established.
Explore this signal
Emerging data
Singapore is asking developers to solve a difficult aviation problem: how can an air-traffic system detect a false aircraft broadcast without disrupting the information needed to keep flights safe?
On 10 November 2026, Singapore’s Cyber Security Agency announced about S$5.6 million in funding for 13 CyberCall 2025 recipients and launched the 2026 round. These are separate developments. Last year’s awards are not the new round’s budget, and neither proves that a customer has paid for a finished product. [1]
One newly published challenge seeks ways to verify Automatic Dependent Surveillance–Broadcast, or ADS-B, messages. These broadcasts carry aircraft information. The proposed solution must detect suspect transmissions while working safely alongside existing equipment. Failure to authenticate a message must not, by itself, remove information needed for safe operations. The round also includes reversible cyberattack containment and more affordable security-readiness tools for smaller firms. [2]
CyberCall has matched user problems with developers for years. Our earlier quantum-safe Signal already examined grant-supported pilots as a route to customers. The new question here is operational: can a provider show which aircraft broadcasts are trustworthy while keeping legitimate surveillance available? That requirement could create work in testing false alarms, missed detections, delays and failure handling. The grant is a possible funding route, not the distinctive business thesis. [2][3]
Aviation verification and independent testing could provide the first opportunity. A credible provider needs approved test environments, aviation knowledge and evidence that its system handles errors safely. A promising demonstration is only a starting point. Buyers will need results that can be repeated under realistic conditions.
Safe integration with existing surveillance could provide a second opportunity. Engineers may need to connect verification tools to mixed generations of equipment without creating unsafe dependencies. A solution must remain useful when data or credentials are unavailable. Paid integration work is possible, but no contract for the new challenge has been verified.
Repeat performance checks could provide a third route. Software and equipment changes could alter detection and error rates. A provider might charge for controlled retesting and documented results if an operator values that work. No required retesting schedule, paid renewal or independent testing award is established.
ST Engineering (SGX: S63) has wider cybersecurity capabilities, and CSA has identified a D’Crypt project from CyberCall 2025. That does not make the company a winner of the new aviation challenge. Its first-half group revenue was S$6.57 billion. The relevant Defence & Public Security segment recorded S$2.82 billion in revenue and S$404 million in operating profit before interest and tax, but these totals do not isolate the programme’s contribution. [5][6]
The application deadline is 9 January 2027 at 23:59 Singapore time. The challenge page says shortlisted applicants will be notified by 31 May 2027. Programme material describes support of up to S$1 million for qualifying costs over up to 24 months. An award is not guaranteed. [2][3]
There is an important financial and timing constraint. The official funding page says support is reimbursed and the project must not have commenced when the application is made. Applicants should verify the current 2026 terms before starting funded development or committing substantial costs. Prepare the proposal, user requirements and budget first; do not assume starting a pilot early preserves eligibility. [4]
Our forecast is that the difficult part of this market will be demonstrating trustworthy behaviour under errors and failures, rather than merely detecting suspicious broadcasts. A commercial opportunity becomes stronger when an operator pays for validation or integration and the work proves useful enough to repeat.
The connection
Wrong alerts or unsafe interventions could make a detector unusable.
The opportunity
Prepare an authorised test plan and check current eligibility before starting funded development.
What could happen next
- Second-order consequence
Second: A detector creates a verification problem of its own. Operators must know how often alerts are wrong and what happens when the system cannot decide. A test must examine both security performance and operational consequences.
- Third-order consequence
Third: Failure testing could create specialist work. Approved simulation and integration teams could examine delayed data, mixed equipment and loss of credentials. No testing subcontract is confirmed.
- Fourth-order consequence
Fourth: Changes could require fresh performance checks. Updates may affect error rates or compatibility, creating a reason for controlled retesting. Commercial repeat work depends on the operator’s requirements and willingness to pay.
- Fifth-order consequence
Fifth: A proven system could reach other markets. Regional operators may face related problems. Export success would require local approvals, compatible infrastructure and paying customers. A Singapore trial alone does not establish any of these.
What would change our view?
The thesis weakens if existing products already solve the problem cheaply, development costs outrun funding, operational tests fail, or customers refuse to pay after trials. A technically successful product can still be commercially unattractive.
Evidence and sources
- CSA programme announcementView source
- CyberCall 2026 challenge statementsView source
- CyberCall programme pageView source
- CSA funding eligibility and costsView source
Source records
1. CSA programme announcement (https://www.csa.gov.sg/news-events/press-releases/csa-strengthens-support-for-cybersecurity-innovation-from-research-to-market/), 10 November 2026, Singapore; exact hour unavailable. Indexed primary text checked; full-page access failed. It supports the prior awards and new round, not customer payments.
2. CyberCall 2026 challenge statements (https://tig.cybersg.sg/challenge-statements-2026/), published for the 10 November launch. Page metadata displays 11:49:22 +08:00, which is not independently established as first publication time. Full primary page checked, including January deadline, May notification date and aviation safety requirements.
3. CyberCall programme page (https://tig.cybersg.sg/program/innovation/cybercall/), current page checked on 11 November 2026 Singapore time. It confirms the funding ceiling, maximum duration and established user-challenge approach; the ceiling is not an individual award.
4. CSA funding eligibility and costs (https://www.csa.gov.sg/our-programmes/innovation-schemes/csa-cybersecurity-co-innovation-and-development-fund/), body last updated 4 May 2026. Full primary page checked. Its submission section still refers to closed 2025 applications, so current 2026 terms must be reconciled before applying; use the new challenge page for the timetable.
5. CSA chief executive’s speech (https://www.csa.gov.sg/news-events/speeches/keynote-address-by-ms-gwenda-fong-commissioner-of-cybersecurity-and-chief-executive-csa-at-cybersg-innovation-day-2026-10-nov-2026/), delivered 10 November 2026. Indexed primary text identifies the D’Crypt project; full text was inaccessible. No aviation award is inferred.
6. ST Engineering first-half results (https://www.stengg.com/en/newsroom/news-releases/st-engineering-delivers-strong-1h2026-performance/), 13 August 2026, Singapore; financial period ended 30 June. Full primary release checked. These are historical group and segment figures, not CyberCall-specific sales.
7. Tech Edition’s event report (https://www.techedt.com/singapore-awards-s5-6-million-to-13-cybersecurity-firms-as-cybercall-2026-opens), 10 November 2026. Secondary corroboration of the programme announcement, not an independent contract or deployment audit.
Explore the research
Research context
Research checked through
11 November 2026, Singapore time. Publication dates, event dates and known access or evidence limits are noted alongside the sources.
20 intelligence layers
1. Money movement
The S$5.6 million announcement concerns 2025 recipients. Actual disbursements and the total 2026 allocation have not been verified. [1]
2. Early purchasing
A published challenge identifies a need before a completed product exists. It is weaker evidence than a paid order. No buyer payment for the new aviation solution is established.
3. Supply bottlenecks
Safe integration and specialist testing are demanding requirements. The number of capable providers and any measurable shortage remain unknown.
4. Hidden beneficiaries
Simulation providers, aviation-data engineers, testing firms and integration specialists are possible beneficiaries. None is a confirmed new subcontractor.
5. Company financial exposure
ST Engineering’s segment figures show a large existing business, not material earnings from this challenge. Its group reported S$255 million cash and S$960 million operating cash flow for the first half. Current valuation, customer concentration and project-level exposure remain incomplete checks. [6]
6. Unit economics
A hypothetical six-month pilot priced at S$120,000 with S$80,000 delivery costs leaves S$40,000 before overheads. Four equal contributions match S$160,000 of initial development expense, but do not cover all later overheads, financing or tax. These are assumptions, not verified prices. A reimbursed grant also requires working capital.
7. Insider and institutional activity
No new ownership change or insider transaction has been linked to the aviation challenge. Wider sector investment cannot establish this project’s commercial value.
8. Hiring and organisational changes
An aviation-capable team would need relevant technical and operational skills. No measured recruitment surge or shortage has been established.
9. Government spending pipeline
The call has a deadline and a stated notification date. Funding remains conditional. Singapore registration or an eligible local partner, Singapore-based intellectual-property requirements and the no-commencement condition need checking against the current application terms. [2][4]
10. Foreign-language early warnings
No separately verified regional-language buyer order has been found for this precise solution. Official English-language material is the strongest evidence available here.
11. Consumer behaviour before sales
An operator-defined challenge is evidence of a problem, not willingness to pay a particular provider’s price. Customer interviews and permitted commercial validation are unfinished.
12. Market contradictions
Security must react quickly, yet a wrong intervention can disrupt essential operations. A product that detects more suspicious activity but creates unacceptable disruption may fail commercially.
13. Missing expected activity
No absence of competitors or customer spending has been proved. Missing contracts, adoption figures and renewal records are research gaps, not evidence that the market is empty.
14. Commercialisation
This round is at proposal stage. A verified deployment, acceptance result and customer payment would be stronger milestones than a grant award alone.
15. Competitive weaknesses
Generic security tools may struggle with aviation constraints. Existing specialist suppliers may already offer effective alternatives. Their prices and performance require direct comparison.
16. Geographical spillovers
Similar operational needs could exist elsewhere in Southeast Asia. No foreign approval or customer contract for a future challenge winner has been verified.
17. Historical OTR patterns
The quantum-safe pilot Signal published 6 November (https://ontherice.org/signals/SIG-ADMIN-0e900c6e-5384-4fce-afcc-db40e5bcb8d8/) already covered conditional grants leading to implementation work and possible follow-on orders. This candidate instead examines ADS-B false-alarm validation and safe coexistence with existing surveillance. Neither record establishes a successful past forecast or a paid aviation contract.
18. Awareness and pricing
The challenge is public. The unresolved question is who can deliver affordably and reliably. No public share has been shown to be undervalued because of it.
20. Immediate action triggers
Establish an operator-approved test plan covering false alarms, missed detections, latency and continued surveillance during failures. Before development commitments, check eligibility, permitted preliminary work and reimbursement terms. Apply by 9 January 2027 only if eligible. Use authorised test environments and require a paid scope before commercial expansion. Stop if safety or full-cost requirements cannot be met.
Evidence position
Evidence position and remaining gaps
Confidence: High in the published challenge, programme dates and cited financial baseline. Moderate that the challenge could create useful specialist work. Low that a particular company will turn it into a profitable recurring service.
What would prove us wrong: No suitable solution reaches deployment, an existing provider meets the need without new outside services, or operators will not pay enough to cover continuing costs.