Understanding Cybersecurity Implications of Using and Protecting Unmanned Aerial Vehicles
Abstract
We propose to investigate the impact of cyber-threats on unmanned aerial vehicles (UAVs), and develop cyber forensics and penetration testing methodologies for malware analysis of the operating system of UAVs. The focus of this project is on cyber-threats that originate from cross-site scripting (XSS) and universal cross-site scripting (UXSS) attacks, but will also address the secure operation of UAVs and their defense using currently available protection mechanisms. The research will concern commercial UAVs because these are readily available, but it is clear that many of the implications apply to military UAVs as well. In addition, while the focus will be on aerial vehicles, it is understood that the same or very similar analysis will apply to surface and underwater vehicles. This project will have both a research and an educational contribution. Main Contributions. Research based. (a) Investigate the security of UAVs and the impact of cyber-attacks, in particular UXSS attacks. (b) Develop Penetration testing methodologies to analyze malware in the operating system of UAVs, and Cyber Forensics to identify UXSS attacks. (c) The goal is to identify vulnerabilities of UAVs and in particular UXSS exploits and develop methodologies and cyber forensics to identify malware on UAVs and UXSS attacks. Educational. Penetration Testing and Cyber Forensics will be conducted by CyberCorps(R) and qualified cyber-security students. Such training should help them in their career and address a national need to expand the cyber-security workforce. The target is to train qualified students in an area that will help them in their career and contribute to the effort of expanding the cyber-security workforce. Broader Impact. There is a national need to expand the training programs for cyber-security professionals that has been repeatedly stressed by our most senior security experts. In particular, to broaden the base and skill set of the national cyber-security workforce. Florida State University (FSU) is an NSA/DHS designated Center of Academic Excellence in Cyber Defense Education (CAE-CDE) and Research (CAE-R) (until 2021), and is participating in the CyberCorps(R) Scholarship for Service program since 2002. Currently 25 scholars are registered in this program. Students from this program will be involved in the project, if it is funded.
Document Details
- Document Type
- DoD Grant Award
- Publication Date
- Jul 30, 2020
- Source ID
- N001741910006
Entities
People
- Mike Burmester
Organizations
- Florida State University
- United States Navy