Abstract:—Consumer drones enable high-class aerial video photography, promise to reform the logistics industry, and are already used for humanitarian rescue operations and during armed conflicts. Contrasting their widespread adoption and high popularity, the low entry barrier for air mobility—a traditionally heavily regulated sector—poses many risks to safety, security, and privacy. Malicious parties could, for example, (mis-)use drones for surveillance, transportation of illegal goods, or cause economic damage by intruding the closed airspace above air-ports. To prevent harm, drone manufacturers employ several countermeasures to enforce safe and secure use of drones, e.g., they impose software limits regarding speed and altitude, or use geofencing to implement no-fly zones around airports or prisons. Complementing traditional countermeasures, drones from the market leader DJI implement a tracking protocol called DroneID, which is designed to transmit the position of both the drone and its operator to authorized entities such as law enforcement or operators of critical infrastructures. In this paper, we analyze security and privacy claims for drones, focusing on the leading manufacturer DJI with a market share of 94%. We first systemize the drone attack surface and investigate an attacker capable of eavesdropping on the drone’s over-the-air data traffic. Based on reverse engineering of DJI firmware, we design and implement a decoder for DJI’s proprietary tracking protocol DroneID, using only cheap COTS hardware. We show that the transmitted data is not encrypted, but accessible to anyone, compromising the drone operator’s privacy. Second, we conduct a comprehensive analysis of drone security: Using a combination of reverse engineering, a novel fuzzing approach tailored to DJI’s communication protocol, and hardware analysis, we uncover several critical flaws in drone firmware that allow attackers to gain elevated privileges on two different DJI drones and their remote control. Such root access paves the way to disable

Implementation of GPS Attacks on DJI Phantom 3 Standard Drone as a Security Vulnerability Test

Stars Can Tell: A Robust Method to Defend Against GPS Spoofing Attacks Using Off-the-shelf Chipset.

Towards the Detection of GPS Spoofing Attacks against Drones by Analyzing Camera's Video Stream

Hijacking Unmanned Aerial Vehicle by Exploiting Civil GPS Vulnerabilities Using Software-defined Radio

Unmanned Aerial Vehicle (UAV) GPS Jamming Test by using Software Defined Radio (SDR) platform

Efficacy of Asynchronous GPS Spoofing Against High Volume Consumer GNSS Receivers

Dr. Defender: Proactive Detection of Autopilot Drones Based on CSI

VISAS -- Detecting GPS spoofing attacks against drones by analyzing camera's video stream

Unmanned Aerial Vehicle’s Vulnerability to GPS Spoofing a Review

Protecting Autonomous UAVs from GPS Spoofing and Jamming: A Comparative Analysis of Detection and Mitigation Techniques

Drone Security and the Mysterious Case of DJI's DroneID

Exploring Jamming and Hijacking Attacks for Micro Aerial Drones

An Analysis of GPS Spoofing Attack and Efficient Approach to Spoofing Detection in PX4

Improving Physical Layer Security for Multi-Uav Systems Against Hybrid Wireless Attacks

Unveiling the Stealthy Threat: Analyzing Slow Drift GPS Spoofing Attacks for Autonomous Vehicles in Urban Environments and Enabling the Resilience

A Software Defined Radio Based Anti-UAV Mobile System with Jamming and Spoofing Capabilities

An Integrated Framework for Sensing Radio Frequency Spectrum Attacks on Medical Delivery Drones

Behind The Wings: The Case of Reverse Engineering and Drone Hijacking in DJI Enhanced Wi-Fi Protocol

GPS Spoofing on UAV: A Survey.

GPS-Spoofing Attack Detection Mechanism for UAV Swarms

An SDR-based anti-drone system with Detection, Tracking, Jamming, and Spoofing Capabilities