Mohammad Almahallawi

تخصص الأمن السيبراني · دفعة 2024

Drone Security Testing Framework

The "Drone Security Testing Framework" is designed to assess and enhance the security of unmanned aerial vehicles (UAVs) by simulating real-world attack scenarios. This framework deploys the ArduPilot firmware in a system-in-the-loop (SITL) environment on a Raspberry Pi, with a basic remote controller built using Arduino, featuring two buttons for drone boot/reboot and takeoff. To keep the testing process budget-friendly and risk-free, key drone information such as roll, pitch, yaw, and battery status are visually represented using LEDs connected to the Raspberry Pi's GPIO pins. The framework includes a comprehensive suite of attack modules that focus on exploiting vulnerabilities in drones. These modules cover a range of attack types, including Wi-Fi Deauthentication, Attitude Spoofing, System Fault Injection, Camera Feed Eavesdropping, and more. The framework guides users through the attack lifecycle, starting with the identification of the drone's Wi-Fi network, capturing packets to crack encryption, and then executing targeted attacks on the drone's data-link connection. By providing a controlled environment for testing, this framework aims to strengthen drone security by identifying weaknesses before they can be exploited in the real world.

اقرأ التقرير النهائي (PDF)

اطّلع عليه في تقرير البرنامج (PDF)