Detection solution analysis for simplistic spoofing attacks in commercial mini and micro UAVs

Enamus droone kasutab lennundusest pärit GPS navigatsiooniseadmeid, millel puuduvad turvaprotokollid ning nende riskioht pahatahtlike rünnakute sihtmärgina on kasvanud hüppeliselt lähimineviku arengute ja progressi tõttu SDR ja GNSS simulatsioonitarkvara valdkonnas. See on loonud ligipääsu tehnikale amatöörkasutajatele, millel on saatja aadressi võltsimise jõudlus. Need potensiaalsed rünnakud kuuluvad lihtsakoeliste kategooriasse, kuid selle uurimustöö tulemusena selgus, et nendes rünnakute edukuses on olulised erinevused teatud GPS vastuvõtjate ja konfiguratsioonide vahel. \n\rSee uurimustöö analüüsis erinevaid saatja aadressi võltsimise avastamise meetodeid, mis olid avatud kasutajatele ning valis välja need, mis on sobilikud mini- ja mikrodroonide tehnonõuetele ja operatsioonistsenaariumitele, eesmärgiga pakkuda välja GPS aadresside rünnakute avastamiseks rakenduste tasandil avatud allikakoodiga Ground Control Station tarkvara SDK. Avastuslahenduse eesmärk on jälgida ja kinnitada äkilisi, abnormaalseid või ebaloogilisi tulemväärtusi erinevates drooni sensiorites lisaallkatest pärit lisainfoga. \n\rLäbiviidud testid kinnitavad, et olenevalt olukorrast ja tingimustest saavad saatja aadressi võltsimise rünnakud õnnestuda. Rünnakud piiravad GPS mehanismide ligipääsu, mida saab kasutada rünnakute avastuseks. Neid rünnakuid puudutav info asetseb infovoos või GPSi signaalprotsessi tasandis, kuid seda infot ei saa haarata tasandile kus SDK tarkvara haldab kõigi teiste sensorite infot.Most of UAVs are GPS navigation based aircrafts that rely on a system with lack of security, their latent risk against malicious attacks has been raised with the recent progress and development in SDRs and GNSS simulation software, facilitating to amateurs the accessibility of equipment with spoofing capabilities. The attacks which can be done with this setup belong to the category simplistic, however, during this thesis work there are validated different cases of successful results under certain GPS receivers’ state or configuration.\n\rThis work analysis several spoofing detection methods found in the open literature, and selects the ones which can be suitable for mini and micro UAV technical specifications and operational scenario, for proposing a GPS spoofing detection solution developed in the application layer of an open source code Ground Control Station software SDK. The detection solution is intended to monitor and correlate abrupt, abnormal or unreasonable values of different sensors of the UAV with data obtained from available additional sources.\n\rThe conducted tests validate the cases and circumstances where the spoofing attacks were successful. Limitations include the lack of mechanisms to access GPS values which can be useful for detection spoofing attacks, but reside in the data bit or signal processing layer of the GPS and can not be retrieve to the layer where the SDK in computing all data of other sensors

XV International Congress of Control Electronics and Telecommunications: "The role of technology in times of pandemic and post-pandemic: innovation and development for strategic social and productive sectors"

La anterior selección, motivados por la aseveración de Manuel Castells -hace casi 20 años ya- que la innovación y la difusión de la tecnología parecía ser la herramienta apropiada para el desarrollo en la era de la información. Este 2020, sin embargo, ante la situación disruptiva que aquejó y aqueja a la sociedad red como una estructura social emergente de la Era de la Información basada en redes de producción, energizadas por el poder y la experiencia; falló y debe reencontrar su rumbo. Es así que los problemas acuciantes, ahora, fueron: la atención sanitaria y la superación de la epidemia de Sars Cov 2; tomó forma la, hasta entonces, visión irrealista de Castells que … no podemos avanzar con nuestros modelos de desarrollo actual, destruyendo nuestro entorno y excluyendo a la mayor parte de la humanidad de los beneficios de la revolución tecnológica más extraordinaria de la historia, sin sufrir una devastadora reacción por parte de la sociedad y la naturaleza. Fue así que el Cuarto Mundo, específicamente, donde la suficiencia de recurso humano, de capital, trabajo, información y mercado -vinculados todos a través de la tecnología- supuso que atendería eficazmente a través de la población que podía por su capacidad hacer uso racional y profesional del conocimiento, las necesidades de la mayoritaria población vulnerable y vulnerada. Por lo anterior, poner en el centro a las personas, en entornos de tarea y trabajo globales hiperconectados combinando espacios físicos, corrientes de información con canales de conexión expeditos, y formando profesionales del conocimiento que asuman y afronten los retos derivados de la transformación digital de empresas, universidades, y organizaciones, pero en condiciones de equidad y sujetos de prosperidad, será el desafío en los escenarios presentes y futuros inmediatos.The previous selection, motivated by the assertion of Manuel Castells -almost 20 years ago- that innovation and diffusion of technology seemed to be the appropriate tool for development in the information age. This 2020, however, in the face of the disruptive situation that afflicted and continues to afflict the network society as an emerging social structure of the Information Age based on production networks, energized by power and experience; He failed and must find his way again. Thus, the pressing problems now were: health care and overcoming the Sars Cov 2 epidemic; Castells' until then unrealistic vision took shape that... we cannot advance with our current development models, destroying our environment and excluding the majority of humanity from the benefits of the most extraordinary technological revolution in history, without suffering a devastating reaction from society and nature. It was thus that the Fourth World, specifically, where the sufficiency of human resources, capital, work, information and market - all linked through technology - meant that it would serve effectively through the population that could, due to its capacity, make rational use. and knowledge professional, the needs of the majority vulnerable and vulnerable population. Therefore, putting people at the center, in hyperconnected global task and work environments, combining physical spaces, information flows with expedited connection channels, and training knowledge professionals who assume and face the challenges derived from the digital transformation of companies, universities, and organizations, but in conditions of equality and subject to prosperity, will be the challenge in the present and immediate future scenarios.Bogot