topic Re: Security and Privacy in the Age of Drones in Industry News

Security and Privacy in the Age of Drones

leroux — Mon, 09 Oct 2023 09:10:02 GMT

Overview of this report by Ben Nassi,Asaf Shabtai, Ryusuke Masuoka & Yuval Elovici:

The evolution of drone technology in the past nine years since the first commercial drone was introduced at CES 2010 has caused many individuals and businesses to adopt drones for various purposes. We are currently living in an era in which drones are being used for pizza delivery, the shipment of goods, and filming, and they are likely to provide an alternative for transportation in the near future. However, drones also pose a significant challenge in terms of security and privacy within society (for both individuals and organizations), and many drone related incidents are reported on a daily basis. These incidents have called attention to the need to detect and disable drones used for malicious purposes and opened up a new area of research and development for academia and industry, with a market that is expected to reach $1.85 billion by 2024. While some of the knowledge used to detect UAVs has been adopted for drone detection, new methods have been suggested by industry and academia alike to deal with the challenges associated with detecting the very small and fast flying objects. In this paper, we describe new societal threats to security and privacy created by drones, and present academic and industrial methods used to detect and disable drones. We review methods targeted at areas that restrict drone flights and analyze their effectiveness with regard to various factors (e.g., weather, birds, ambient light, etc.). We present the challenges arising in areas that allow drone flights, introduce the methods that exist for dealing with these challenges, and discuss the scientific gaps that exist in this area. Finally, we review methods used to disable drones, analyze their effectiveness, and present their expected results. Finally, we suggest future research directions.

Re: Security and Privacy in the Age of Drones

rslade — Mon, 01 Apr 2019 17:27:04 GMT

> leroux (Community Champion) posted a new topic in Industry News on 04-01-2019

> Finally, we review methods used to disable drones, analyze
> their effectiveness, and present their expected results.

Shotgun! (Drone skeet.)

Balloons and fishing line ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Never interrupt an enemy when he is busy making mistakes - Napoleon
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: Security and Privacy in the Age of Drones

CISOScott — Mon, 01 Apr 2019 17:29:39 GMT

It's not just drones you have to worry about. Every cellphone has the capability to take video and photos without your permission, we have dash cams in cars, body cams on police, surveillance cameras at businesses and homes, red-light cameras at intersections, city-wide surveillance for "protection", etc., etc.

We are the most photographed/video-graphed society and it will only get worse as the time increases until privacy laws can catch up.

We now even have kids suing their parents for privacy violations for posting pictures/videos of them when they were kids.

Re: Security and Privacy in the Age of Drones

rslade — Mon, 01 Apr 2019 18:01:04 GMT

> CISOScott (Community Champion) posted a new reply in Industry News on 04-01-2019

> It's not just drones you have to worry about. Every cellphone has the capability
> to take video and photos without your permission

Say, shotguns might work for that, too ...

(C'mon, most of you guys are 'Murricans. Doesn't the "right to bare arms" mean
it's OK to shoot cell phones out of people's hands?)

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
I see Canada as a country torn between a very northern, rather
extraordinary, mystical spirit which it fears, and its desire to
present itself to the world as a Scotch banker. - Robertson Davies
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: Security and Privacy in the Age of Drones

Caute_cautim — Mon, 01 Apr 2019 20:23:40 GMT

This all smacks of embedded firmware within common technological platforms to me. IoT we call it, and many times, we just don't know who, what, where it is embedded into the very fabric of the Surface Mounted Components themselves - so unless you forensically take them apart - X-Ray, dissemble them in the lab - there is no way you can actually fundamentally know whether or not they were built ethically or designed to be compromised by design.

How do you know whether or not there is no listening device - smacks of 1984 surveillance listening to your every word, triggered by an increased noise level above the background. Or that the fact the miniature camera is flooding your favourite social media output with your confession. Yes, you can look at the applications, you ensure they are removed - but how fundamentally do you know whether or not it is safe.

I think we have heard and seen it comes back to the supply chain and who we trust or have gone pass the point of caring, because its too late, the cat is out of the bag?

Are we simply too late?

Regards

Caute_cautim

Re: Security and Privacy in the Age of Drones

Flyslinger2 — Tue, 02 Apr 2019 18:24:30 GMT

I'm a licensed sUAS pilot. I had no knowledge of flying prior to taking and passing the exam the first time. It's no picnic. I own one of the crafts mentioned in this article. I've purchased two different applications for my IOS devices to assist in me in my continual learning and management of the craft. I have offered my analysis of the applications and other commentary to both developers and now have a great relationship with them.

This article is great for giving a really detailed technical foundation of the the inner workings of a commercial craft. I learned a few things from this.

I have no desire to ever spend time incarcerated for bad behavior. Having said that, this article completely misses that segment that should be the actual main focus which are the DIY UAV's. The vast majority of commercially owned UAV enthusiasts are not going to use them maliciously. It's just too easy to trace the ownership of the UAV through purchase. The only way that I would ever use a UAV for malicious intent is if I bought it second hand. And even then I would be careful of my purchase.

The DIY UAV operator is not bound by all of the federal laws simple because it is not using software that is integrated with FAA databases that restrict and enforce NFZ's. I can't fly my own drone in my own yard. Why? Because I am with the Washington DC RFZ and I am in close proximity to a regional airport. If I assemble and start up my drone it in essence laughs at me because the software, based on GPS, knows the rules. I can override that but I do not have any interest in wearing jump suits for any length of time. The DIY UAV operator can do what ever they want where ever they want. Day or night. I am restricted by daylight hours as well.

I think more needs to be done to address the DIY operator and what they can do. Reward the legal operators by freeing up more airspace that planes will never enter.

Re: Security and Privacy in the Age of Drones

CISOScott — Tue, 02 Apr 2019 18:08:59 GMT

Last month I downloaded the audio version of 1984 and listened to it (How ironic that I was listening to an audio book about being listened to....). It is scary how some of that is coming true.

Re: Security and Privacy in the Age of Drones

Caute_cautim — Tue, 02 Apr 2019 18:28:19 GMT

Yes, we run head long, and yet we ignore the signs - are we sheep or caught up in a Quantum Entanglement, we don't fully realise the implications and we may never do so, before it is gone too far the wrong way?

Re: Security and Privacy in the Age of Drones

rslade — Tue, 02 Apr 2019 23:31:04 GMT

> Caute_cautim (Community Champion) posted a new reply in Industry News on

> Yes, we run head long, and yet we ignore the signs - are we sheep or caught up
> in a Quantum Entanglement, we don't fully realise the implications and we may
> never do so, before it is gone too far the wrong way?

Well, if we are all entangled, then we are either all right, or all wrong ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
If you have time to whine and complain about something then you
have the time to do something about it. - Anthony J. D'Angelo
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: Security and Privacy in the Age of Drones

Caute_cautim — Tue, 02 Apr 2019 23:34:49 GMT

If this is the case, we need to ensure we baseline, calculate and then measure to ensure we stay on the right side rather than fall into De-coherence. Entanglement and teleportation, often means the original is destroyed and reconstituted faster than the speed of light as proven in 2017, at present with Photons, flux and charge.

Re: Security and Privacy in the Age of Drones

rslade — Wed, 03 Apr 2019 02:27:04 GMT

> Caute_cautim (Community Champion) posted a new reply in Industry News on

> If this is the case, we need to ensure we baseline, calculate and then measure
> to ensure we stay on the right side rather than fall into De-coherence.

Of course, as soon as you measure, the system collapses ...

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
Never look back unless you are planning to go that way.
- Henry David Thoreau
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: Security and Privacy in the Age of Drones

Caute_cautim — Wed, 03 Apr 2019 02:35:07 GMT

You must be doing the same course work.....:)

Re: Security and Privacy in the Age of Drones

denbesten — Thu, 04 Apr 2019 13:17:52 GMT

@rslade wrote:
Doesn't the "right to bare arms" mean it's OK to shoot cell phones out of people's hands?...

The "right to bare arms" is about our right to wear short sleeve shirts. It has nothing to do with target practice.

Re: Security and Privacy in the Age of Drones

Caute_cautim — Thu, 04 Apr 2019 22:49:29 GMT

This is a fierce debate, which is obviously is built into the US constitution. We are having similar debates fiercely in Public Forums for changing gun legislation at the present time - the Gun Shop vs the Surgeon clearing after the 50 gunned down on 15 March 2019 in Christchurch with hollow point bullets. Very graphic descriptions, coming out. More debate bound to come out.

This is not dissimilar to other debates going on about Lime and Wave scooters, being allowed on the pavements, whilst the blind fear their very lives, because they cannot hear or see the blighters approaching them. However, many injuries, deaths does it take before the world from an ethical stance says enough is enough is enough. The legislation is so far behind, it could take years, before they are aligned - because there is no policing, the current answer is put your hand out in front of you, on the basis, it is better to hit your hand, rather than your body, and do further untold damage.

If we take Life & Safety to be the highest priority, then why don't we do something about it - or as previous conversation elsewhere, how many lives does it take to be lost before autonomous cars safety standards are raised, if we had the same approach towards flying - we would have never taken off, given the number of accidents, which have taken over the years. It appears to be rather perverse. Do we ever learn?

Regards

Caute_cautim

Re: Security and Privacy in the Age of Drones

rslade — Thu, 04 Apr 2019 23:45:04 GMT

> Caute_cautim (Community Champion) posted a new reply in Industry News on

> Do we ever learn?

So far, evidence mostly points to "no."

====================== (quote inserted randomly by Pegasus Mailer)
rslade@vcn.bc.ca slade@victoria.tc.ca rslade@computercrime.org
has/bin: The proper term for out-of-date software on Unix/Linux
systems -https://twitter.com/SecurityHumor/status/552175603374637056
victoria.tc.ca/techrev/rms.htm http://twitter.com/rslade
http://blogs.securiteam.com/index.php/archives/author/p1/
https://is.gd/RotlWB

Re: Security and Privacy in the Age of Drones

CISOScott — Fri, 05 Apr 2019 15:10:47 GMT

@Caute_cautim wrote:
Do we ever learn?

Until we remove the stigma surrounding mental health the answer will be no.

I often use the example below when describing the stigma around seeking help for yourself, a.k.a. mental health.

If you have a problem with your car and you do not know how to fix it, you go to someone who knows how to fix cars. Usually no one questions your judgment or "manhood". They say "You had a problem, went to an expert, received help and got your car fixed. You seem like a pretty smart person." However, if you go to someone who is an expert on and works on minds/brains instead of cars you are perceived as someone who is weak, weird, unstable, and unable to be strong. People will say "They are crazy. They are going to see a shrink. I don't want them working for me. They can't be trusted with secrets so no security clearance for them. etc.etc."

It is this stigma that keeps people from seeking help which leads to these tragedies. Perhaps if Hitler had went and sought mental help, World War 2 may not have happened. Instead he remained an angry person and sought to unleash his vengeance on those whom he thought had wronged him. Once given power, he unleashed his fury on the world.

You truly want to help the world? Increase access to mental health professionals. Do not partake in the stigma surrounding those that want to seek help. Stand up when you see someone ridiculing someone going to a mental health professional.

We don't call people weak or crazy when they call a plumber, an electrician, or an even a cyber security expert to address an area they do not possess the requisite experience to handle on their own, so let's not do that to those seeking the expert advice of those in the mental health profession.

Re: Security and Privacy in the Age of Drones

Caute_cautim — Fri, 05 Apr 2019 23:28:02 GMT

@CISOScottExcellent response and a good point made too. I wonder how much modern technology and every day distractions actually adds to this torment as well and whether it has actually been examined in terms of the amount of errors or incidents associated with it?

Regards

Caute_cautim