Drone Security and the Mysterious Case of DJI's DroneID

Schiller, Nico; Chlosta, Merlin; Schloegel, Moritz; Bars, Nils; Eisenhofer, Thorsten; Scharnowski, Tobias; Domke, Felix; Schönherr, Lea; Holz, Thorsten

doi:10.14722/ndss.2023.24217

Cited by 14 publications

(1 citation statement)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Later, the author added features such as attacking 802.11 protocol targets and providing a gui to the existing DRAT, and released it through ICIEA in 2021 [12]. N Schiller designed and implemented a decoder that works with DUML, a proprietary tracking protocol used exclusively by DJI, in "Drone Security and the Mysterious Case of DJI's DroneID," published in NDSS in 2023 [13]. As such, existing analysis tools for drones primarily focus on vulnerabilities in the communication protocols used by drones and are not applicable to firmware analysis.…”

Section: Drone Vulnerability Analysismentioning

confidence: 99%

Difficulties in Analyzing the Arguments of Educational University Students and how to overcome them

Kim¹

2021

Korea Association Yeolin Edu

View full text Add to dashboard Cite

With the advancement of Internet of Things (IoT) technology, its applications span various sectors such as public, industrial, private and military. In particular, the drone sector has gained significant attention for both commercial and military purposes. As a result, there has been a surge in research focused on vulnerability analysis of drones. However, most security research to mitigate threats to IoT devices has focused primarily on networks, firmware and mobile applications. Of these, the use of fuzzing to analyse the security of firmware requires emulation of the firmware. However, when it comes to drone firmware, the industry lacks emulation and automated fuzzing tools. This is largely due to challenges such as limited input interfaces, firmware encryption and signatures. While it may be tempting to assume that existing emulators and automated analysers for IoT devices can be applied to drones, practical applications have proven otherwise.In this paper, we discuss the challenges of dynamically analysing drone firmware and propose potential solutions. In addition, we demonstrate the effectiveness of our methodology by applying it to DJI drones, which have the largest market share. CCS CONCEPTS• Security and privacy → Embedded systems security;• Computer systems organization → Firmware.

show abstract

Section: Drone Vulnerability Analysismentioning

confidence: 99%