양자 엔트로피 기반 난수 발생기를 이용한 드론 제어 데이터 보안 연구
A Research on the Security of Drone Control Data Using Quantum Entropy-Based Random Number Generator
1
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
Ardupilot, PX4는 드론에 탑재되는 대표적인 오픈소스 프로젝트이며 개발비용 절감, 소스코드의 안정성, 신속한 개발 피드백 등의 이유로 드론 제어 오픈소스들은 국내·외에서 드론 개발에 널리 사용되고 있다. 하지만 이와 같은 장점 이면에는 치명적인 단점 또한 존재한다. 여러 기관에서 사용되고 있는 드론에 탑재된 오픈소스들이 데이터 보안에 대한 취약점이 존재할 경우, 해당 기관에서 사용되는 드론은 모두 잠재적으로 보안 공격의 대상이 되며 이는 환경의 특성에 따라 연쇄적인 경제적, 인명적 손실을 불러올 수 있다. 본 논문에서는 Ardupilot, PX4에서 사용하고 있는 MAVLink v1.0, MAVLink v2.0의 데이터 보안 취약점을 설명하고 이에 대응할 수 있는 양자 기반 난수 발생기를 활용한 개체 인증, 데이터 보안을 제안하며 제안된 데이터 보안의 성능 측정을 통해 가용성 분석을 수행한다.
Abstract
Ardupilot and PX4 are representative open source projects for drones, and drone-controlled open sources are widely used for drone development at home and abroad due to reduced development costs, stability of source code, and rapid development feedback. However there are also fatal drawbacks behind such advantages. Open-source on drones used by various agencies If there are vulnerabilities in data security, all drones used by those agencies are potentially subject to security attacks, this could lead to a series of economic and human losses, depending on the nature of the environment. In this paper, we explain the data security vulnerabilities of MAVLink v1.0, MAVLink v2.0 used in Ardupilot, PX4, and propose object authentication using quantum entropy-based random number generator to respond to them, propose data security, and conduct availability analysis through performance measurement of proposed data security.
참고문헌 (22)
- "A Study on the Domestic and Foreign Tr ends of Drone Industry Based on 4th Ind ustrial Revolution" (2021)[URL]
- Joseph A. Marty, "Vulnerability Analysis of the MAVLink Protocol for Command and Control of Unmanned Aircraft", ~ (2014)
- You-sung Kang, "Security Requirements for Drone-based Services", TTAK. KO-12. 0317, ~ (2016)
- Yong-hyun Yoon, "Industry Guide for Global Technical Regulations on Drone(Unmanned Aircraft)", KATS(Korean Agency for Technology and Standards), KSA(Korea Standard Association), ~ (2018)
- Anis Koubaa, "Micro Air Vehicle Link(MAVLink)in a Nutshell : A survery", IEEE Access, 7, pp.87658~87680 (2019)
- Quyuh Dang, "Recommendation for Applications Using Approved Hash Algorithms", 800-107 Rev 1, Aug. 2012, ~ (2012)
- Seong-Min Cho, "Status of cryptographic technologies applied to drone security", Journal of the Korea Institute of Information Security & Cryptology, 30(2), pp.11~19 (2020)
- Myoung-su Kim, "Analysis of Fragility and Response Technology of Unmanned Mobile Drone", Journal of the Korea Institute of Information Security &Cryptology, 30(2), pp.49~57 (2020)
- Securing the MAVLink Communication for Unmanned Aircraft Systems, "N. Buthcer", University of Appalachian State and University of Auburn, ~ (2014)
- TTA, "TTAK.K0-12.0235", R2, 2020
- SEONG-MIN CHO, "Random Number Generator Using Sensors for Drone", IEEE Access, 8, pp.30343~30354 (2020)
- Jungmin Park, "QEC : A Quantum Entropy Chip and Its Applications", IEEE Transactions on Very Large Scale Integration (VLSI)Systems, 28, pp.1471~1484 (2020)
- Rakel Haakegaard, "The Elliptic Curve Diffie-Hellman(ECDH)", ~ (2015)
- Marin Feldhofer, "Strong Authentication for RFID Systems Using the AES Algorithm", CHES 2004, 3156 (2004)
- KISA, "Password Algorithm and Key Length Usage Guide", ~ (2018)
- SECG, "SEC 1: Elliptic Curve Cryptography", ~ (2009)
- Tarun Kumar Goyal, "Light Weight Security Algorithm for Low Power IoT Devices", 2016 ICACCI (International Conference on Advances in Computing, Communications and Informatics) (2016)
- "Pixhawk" (2021)[URL]
- Microchip, "SMART SAM G55G SAM G55J Data sheet", ~ (2016)
- EYL, "ENTROPY CHIP: GAME CHANGER FOR IoT SECURITY", ~ (2016)
- Si-hoon Moon, "Trends in lightweight cryptographic technology for IoT communication environment", The Journal of The Korean Intitute of Communication Sciences, 33(3), pp.80~86 (2016)