드론 사이버위협에 따른 효과적 대응방안에 관한 연구
A Study on effective countermeasures against cyber threats to drones
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
드론의 활용도가 증가할수록 드론 구성요소들의 정상운영을 방해하는 다양한 위협들도 함께 증가하고 있다. 드론을 불법탈취 한 후 해킹, 악성코드 감염, 저장된 정보의 유출 등과 같은 다양한 공격들이 드론시스템에 시도되고 있다. 이러한 위협들은 때로는 환경과 개인에게 위협이 되는 것뿐만 아니라 국가안보에도 치명적인 위협이 될 수 있다. 드론을 안정적으로 운영하기 위해서는 드론을 구성하는 시스템과 유통되는 데이터들이 각각 기밀성, 무결성, 유효성이 보장되어야 하며, 드론 시스템을 공격하는 공격자의 다양한 위협을 사전에 식별하고, 식별된 위협을 제거하는 노력이 필요하다. 이를 위해 현재까지 연구된 드론 시스템의 정상적 운영을 방해하는 다양한 사이버위협을 드론의 구성요소별로 체계적으로 분석하고, 식별된 위협을 효과적으로 제거하는 방안을 제시하고자 한다.
Abstract
Technologies related to the drone industry are developing rapidly around the world. It goes beyond the level of simply shooting an image, and is equipped with various sensors suitable for the role it performs. It is used to monitor and strike enemies, to be used in disaster situations, and to transport goods and monitor the environment, and its utilization is rapidly increasing. Drones used for various purposes are combined with flight sensors such as wireless receivers, flight controllers, and gyroscopes. And it is composed of various equipment such as Lotus telecommunication module, GPS receiver, and camera. If we broadly group these devices, we can classify the 'drone vehicle' that actually moves in the air, the ‘wireless communication part’ that distributes information, controls and controls drone flying vehicles, stores and ‘ground control system’ that is analyzed information obtained from sensors. As the use of drones increases, various threats that interfere with the normal operation of drone components also increase. These threats sometimes pose not only a threat to the environment and individuals, but also a fatal threat to national security. In order to operate a drone stably, the confidentiality, integrity, and validity of the system constituting the drone and the data being distributed must be guaranteed. In addition, it is necessary to identify various threats of attackers attacking the drone system in advance and to remove the identified threats. To this end, various cyber threats that interfere with the normal operation of the drone system studied so far are systematically analyzed for each component of the drone, I would like to suggest a way to effectively eliminate the identified threats.
참고문헌 (42)
- Classification of Unmanned Aerial Vehicle, Report for Mechanical En gineering class, "A. Arjomandi", University of Adelaide, ~ (2006)
- A. C. Watts, "Unmanned aircraft systems in remote sensing and scientific research: classification and onsiderations of use", Remote Sens, 4(6), pp.1671~1692 (2012)
- A. J. Kerns, "Unmanned aircraft capture and control via GPS spoofing", Journal of Field Robotics, 31(4), pp.617~636 (2014)
- A. Y. Javaid, "Cyber security threat analysis and modeling of an unmanned aerial vehicle system", IEEE Conference on Technologies for Homeland Security, 11, pp.585~590 (2012)
- Bluetooth SIG., "Specification of the Bluetooth System", ~ (2001)
- Satellite Communication Systems, "B. G. Evans", Institution of Engineering and Technology, ~ (2004)
- "Cyber Security threat analysis and modeling of an UAV system", IEEE Conference (2012)
- Unmanned Aircraft System Airspace Integration Plan, "DoD", ~ (2011)
- Domin, K., "Security analysis of the drone communication protocol: Fuzzing the MAVLink protocol", ~ (2016)
- Dongcheol Hong, "Automatic attack on drones by malware infection" (2014), SEWORKS INC
- 김동원, "자동차 공급망 위험관리(A-SCRM) 방안 연구", 정보보호학회논문지, 25(4), pp.793~805 (2015), 한국정보보호학회[DOI]
- "Eyes of the Army, U.S. Army Roadmap for Unmanned Aircraft Systems Roadmap 2010-2035", ~ (2010)
- 손효현, "미국 공급망 보안 관리 체계 분석", 정보보호학회논문지, 29(5), pp.1089~1097 (2019), 한국정보보호학회[DOI]
- X-Force Threat Intelligence Index 2019, "IBM Security", IBM, ~ (2019)
- IEEE COMPUTER SOCIETY LAN MAN STANDARDS COMMITTEE, "Wireless LAN Medium Access Control (MAC) and physical layer (PHY) specifications", ~ (1997)
- 곽지원, "고신뢰 드론 시스템을 위한 스케줄링 측면에서의 서비스 거부 공격 완화 방안 연구", 정보보호학회논문지, 29(4), pp.821~834 (2019), 한국정보보호학회[DOI]
- "Joint Publication 1-02, DoD Dictionary of Military and Associated Terms", ~
- Juhwan Noh, "Tractor Beam: Self-hijacking of Consumer Drones with Adaptive GPS spoofing", ACM Transactions of Privacy and Security, 22(2) (2019)
- Cyber-treat Trends Report, "KISA", ~ (2018)
- Kwon, Y. M., "Em pirical analysis of mavlink protocol vulnerability for attacking unmanned aerial vehicles", IEEE Access, 6, pp.43203~43212 (2018)
- K.Wesson, "Hacking Drones", Scientific American, 309(9), pp.56~59 (2013)
- L. Brooke-Holland, "Unmanned Aerial Vehicles (drones): An Introduction" (2012), House of Commons Library
- McKinsey & Company, "Commercial drones are here: The future of unmanned aerial systems, capital Projects & Infrastructure", ~ (2017)
- Classifications, applications, and design challenges of drones: A review, "M. Hassanalian", Department of Mechanical and Aerospace Engineering, New Mexico State University, ~ (2016)
- Nakagawa, Gaku, "Fork bomb attack mitig ation by process resource quarantine", 2016 Fourth International Symposium on Computing and Networking (CANDAR) (2016), IEEE
- Supply Chain Risk Management Practices for Federal Information Systems and Organizations, "National Institute of Standards and Technology", NIST, ~, pp.NIST SP 800-161 (2015)
- National Supply Chain Risk Management Practices for Federal Information Systems, "National Institute of Standards and Technology", NIST, ~, pp.NIST IR 7622 (2012)
- N. Uchida, "Resilient network with autonomous flight wireless nodes based on delay tolerant networks", IT CoNvergence PRActice, 2(3), pp.1~13 (2014)
- Nunez, J., "Protecting the Unmanned Aerial Vehicle from Cyberattacks", Proceedings of the International Conference on Security and Management (SAM), The Steering Committee of The World Congress in Computer Science, Computer Engineering and Applied Computing (WorldComp), pp.154~157 (2019)
- R.E. Weibel, "Safety considerations for operation of different classes of UAVs in the NAS", Proceedings of the 4th Aviation Technology, Integration and Operations Forum, AIAA 3rd Unmanned Unlimited Technical Conference, Workshop and Exhibit (2004)
- R.J. Kerczewski, "Control and Non-payload Communications Links for Integrated Unmanned Aircraft Operations", Proc. of 2012 Join Conference-18th Ka and Broadband, pp.24~27 (2012)
- Command and Control (C2) Data Link White Paper, "RTCA", ~ (2014)
- RTCA, "Minimun Operation Performance Standards (MOPS) for Unmanned Aircraft Systems Command and Control", ~ (2015)
- Seung-Hyun Seo, "A Security Framework for a Drone Delivery Service", DroNet 2016 - 2nd Workshop on Micro Aerial Vehicle Networks, Systems, and Applications for Civilian Use, held with ACM Mobisys'16 (2016)
- Soo-Min Lim, "Trends of Cyber Security Regulation of Digital Asset Supply Chain of International Nuclear Power Plants", Review of KIISC, 26(1), pp.54~60 (2016)
- S. Morgenthaler, "UAVNet: A mobile wire-less mesh network using unmanned aerial vehicles", IEEEE Globecom Workshops, pp.1603~1608 (2012)
- S. Tajik, "Physical Characterization of Ar biter PUFs", LNCS, 8731, pp.493~509 (2014)
- Vasconcelos, G., "The impact of DoS attacks on the AR. Drone 2.0", 2016XIII Latin American Robotics Symposium and IV Brazilian Robotics Symposium (LARS, 2016, 127~132[DOI]
- Y. Mo, "False data injection attacks in control systems", Proceedings of the 1st Workshop on Secure Control Systems (2010)
- Y. S. Kang, "International trend in standardization of physical copy protection (PUF) security requirements and testing methods", J. Soc. for Inf. Protection, 28(4), pp.1~3 (2018)
- Y. Son, "Rocking drones with intentional sound noise on gyroscopic sensors", Proceedings of the 24th USENIX Conference on Security Symposium, USENIX Association, pp.881~896 (2015)
- Z. Birnbaum, "Unmanned aerial vehicle security using behavi oral profiling", International Conference on Unmanned Aircraft Syst ems (ICUAS) (2015)