Security is key to safe operations in very low-level airspace
Given the highly automated nature of drone operations, cyber security is particularly important and security risks in U-space need to be assessed and mitigated to an acceptable level. Secure drone operations need to be supported by a combination of different security functions at different levels in the drone end-to-end system, managed by a dedicated set of procedures and supported by clear regulations. By establishing an integrated security concept, drones can operate in accordance with appropriate procedures and regulations, while any drones that divert from their flight plan can be detected and acted upon.
To this end, SECOPS defined an integrated security concept for drone operations, including addressing resistance of drones against unlawful interference, protection of third parties and integration of geo- fencing technology. The research reviewed technological options for both airborne and ground elements, considered legal, as well regulatory and social aspects.
A preliminary cyber security risk assessment was performed to determine the risks concerning confidentiality, integrity and availability (CIA) of the U-space information flows. By assessing and prioritising potential security risks, the SECOPS Integrated Security Concept defines requirements and proposes potential security controls. An experimental proof of concept integrating common-off- the-shelf technologies of the consortium partners was executed in order to prove the feasibility of parts of the integrated security concept and co-operability of the more mature technical solutions, including detection of rogue drones and air defence solutions.
Among critical issues, SECOPS found the trustworthiness of drone track and position information to be important. A key priority is knowing where data comes from and assuring data integrity of global positioning and geofence information for example, as are the timeliness of reactions to events to ensure law enforcement is informed.
