보안 UAV를 위한 암호모듈의 성능평가와 보안성 평가 방법에 대한 연구
A Study On Performance Evaluation of Cryptographic Module and Security Functional Requirements of Secure UAV
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
무인 항공기 (Unmanned Aerial Vehicle, UAV)는 4차 산업혁명 시대와 함께 매우 빠르게 성장하고 있다. 또한, 인공지능 기술과 반도체 기술의 발전에 따라 무인 항공기의 성능이 향상됨에 따라서 기존의 군용 등 특수 목적으로 사용되던 것에서 현재는 취미, 교량 점검, 정찰 등 다양한 민간 분야에도 활용되기 시작했다. 현재 민간 분야의 무인 항공기에서 가장 많이 활용되는 통신 프로토콜은 오픈 소스로 시작한 MAVLink(Macro Air Vehicle)이다. 하지만 MAVLink에는 보안 기술이나 암복호화 메커니즘은 포함되지 않아 현재 무인 항공기의 보안 위협에 취약할 수 밖에 없다. 따라서, 본 연구에서는 기밀성을 보장하기 위해서 암호모듈을 무인 항공기에 구현하고 다양한 구현 방식에 따른 무인 항공기에서의 암호화 및 복호화 성능 평가에 대한 결과를 분석한다. 또한, 보안 모듈을 적용한 무인 항공기에 위협 분석을 통하여 보안요구사항을 국제 표준 Common Criteria에 따라 평가 기준에 대해 논한다.
Abstract
The demands of Unmanned Aerial Vehicles (UAVs) are growing very rapidly with the era of the 4th industrial revolution. As the technology of the UAV improved with the development of artificial intelligence and semiconductor technology, it began to be used in various civilian fields such as hobbies, bridge inspections, etc from being used for special purposes such as military use. MAVLink (Macro Air Vehicle Link), which started as an open source project, is the most widely used communication protocol between UAV and ground control station. However, MAVLink does not include any security features such as encryption/decryption mechanism, so it is vulnerable to various security threats. Therefore, in this study, the block cipher is implemented in UAV to ensure confidentiality, and the results of the encryption and decryption performance evaluation in the UAV according to various implementation methods are analyzed. In addition, we proposed the security requirements in accordance with Common Criteria, which is an international recognized ISO standard.
참고문헌 (23)
- Koubâa, A., "“Micro air vehicle link (mavlink)in a nutshell” A survey", IEEE Access, 7, pp.87658~87680 (2019)
- Khan, N. A., "Drones in smart-cities", pp.37~55
- Hassija, V., "“Fast, reliable, and secure drone communication” A comprehensive survey", IEEE Communications Surveys & Tutorials (2021)
- Shoufan, A., "Secure communication in civil drones", International Conference on Information Systems Security and Privacy, pp.177~195 (2015)
- Rani, C., "Security of unmanned aerial vehicle systems against cyber-physical attacks", The Journal of Defense Modeling and Simulation, 13(3), pp.331~342 (2016)
- Vulnerability analysis of the mavlink protocol for command and control of unmanned aircraft, "Marty, J.A.", ~ (2013)
- Hartmann, K., "The vulnerability of uavs to cyber attacks-an approach to the risk assessment", 2013 5th international conference on cyber conflict (CYCON 2013), pp.1~23 (2013)
- Iqbal, S., "A study on uav operating system security and future research challenges", 2021 IEEE 11th Annual Computing and Communication Workshop and Conference (CCWC), pp.0759~0765 (2021)
- Son, Y., "Rocking drones with intentional sound noise on gyroscopic sensors", 24th USENIX Security Symposium (USENIX Security 15), pp.881~896 (2015)
- Arteaga, S. P., "Analysis of the gps spoofing vulnerability in the drone 3dr solo", IEEE Access, 7, pp.51782~51789 (2019)
- Dey, V., "Security vulnerabilities of unmanned aerial vehicles and countermeasures: An experimental study", 2018 31st International Conference on VLSI Design and 2018 17th International Conference on Embedded Systems (VLSID), pp.398~403 (2018)
- Kwon, Y. M., "Empirical analysis of mavlink protocol vulnerability for attacking unmanned aerial vehicles", IEEE Access, 6, pp.43203~43212 (2018)
- Domin, K., "Fuzzing the mavlink protocol" (2016)
- Allouch, A., "Mavsec: Securing the mavlink protocol for ardupilot", px4 unmanned aerial systems, 2019 (2019), 621~628
- Jeong, S., "Muvids:False mavlink injection attack detection in communication for unmanned vehicles", Workshop on Automotive and Autonomous Vehicle Security (AutoSec), 2021, pp.25~ (2021)
- Atoev, S., "The secure uav communication link based on otp encryption technique", 2019 Eleventh International Conference on Ubiquitous and Future Networks (ICUFN), pp.1~3 (2019)
- "PX4 github"[URL]
- "TTAS.KO-12.0004", R1, 128-bit Block Cipher SEED, 2005
- D. Hong, "LEA: A 128-Bit Block Cipher for Fast Encryption on Common Processors", Lect Notes Comput Sc, pp.3~27 (2014)
- Dworkin, M. J., "Advanced Encryption Standard (AES)", NIST FIPS-197, ~ (2001)
- Kwon, D., "New block cipher : ARIA", International conference on information security and cryptology, pp.432~445 (2003)
- Guillen-Perez, A., "Wifi networks on drones", 2016 ITU Kaleidoscope:ICTs for a Sustainable World (ITU WT), pp.1~8 (2016)
- "Common Criteria for Information Technology Security Evaluation, version 3.1, revision 5. part 2:Functional Security Components", ~ (2017)