#	Pagina
attuale pagina	/open-h2020/projects/210103/results.html

Report

Teaser, summary, work performed and final results

Periodic Reporting for period 1 - SECOPS (An Integrated Security Concept for Drone Operations)

Teaser

Summary

The use of drones is growing rapidly as is the drone technology itself. Because of this the drones become cheaper and more affordable by the general public. This increases the concerns about privacy and illegal and dangerous use of drones. Security, besides safety, is essential for the public acceptance of flying with drones. SECOPS (an integrated SECurity concept for drone OPerationS) will contribute to the public acceptance by ensuring that security risks in U-space are mitigated to an acceptable level, with a focus on cyber security. Secure drone operations cannot be achieved by security mitigation measures on drones alone. It has to be a combination of different security functions at different levels in the drone end-to-end system, managed by a dedicated set of procedures and supported by clear regulations. These aspects will be addressed by the SECOPS â€˜Integrated Security Conceptâ€™, which will be aligned with the U-space concept currently under development. By assessing and prioritizing potential security risks, the Integrated Security Concept will define requirements and propose potential security controls. At the end of the project SECOPS will perform a live demonstration of part of the integrated security concept, based on a representative threat scenario.

Work performed

In order to define the Integrated Security Concept an overview is required of security risks that need to be addressed. Because a formal U-space concept description was not available at the start of the project, SECOPS defined a high level generic operational drone concept which was modelled in a so-called information flow diagram, to identify the different services and information flows. Based on this concept, a preliminary security risk assessment was performed. The service and information flows are called primary assets (PA) which need to be secured, based on security objectives. For each PA the impact was assessed if confidentiality, integrity or availability would be compromised because of a successful attack. Each PA has supporting assets (SA) such as human operator, hardware or software. An attacker will use a vulnerability of a SA to attack a PA. Knowing the threat and vulnerability of a SA and assuming that no measures are in place to mitigate the threat, the likelihood of a successful attack was determined. Risk was determined by multiplication of impact with likelihood. The risk was classified in terms of low, medium and high. All medium and high risks need mitigation. These mitigations will be the basis of the integrated security concept. Based on the risk assessment results, an analysis was performed to identify security gaps that need to be addressed.

Final results

For the protection of third parties many technical developments are ongoing. They all fill in a need in the concepts of detection, classification, identification and neutralisation of drones. They all have in common that their aim is to detect and neutralise drones and this requires equipment to be at or near a specific location that needs to be protected. SECOPS looks at these concepts in a broader scope and analyses how these techniques can cooperate together and can be combination with the concept of geo-fencing, in order to preserve secure drone operations. In addition, SECOPS will analyse the needed protection of a drone itself. For this, SECOPS will investigate various advanced technologies for both airborne and ground elements and combine them into an integrated security concept, taking also legal, regulatory and social aspects into account. The Integrated Security Concept developed and demonstrated within SECOPS will make drone operations more secure, which is an important enabler for drone-related market growth. In addition, the Integrated Security Concept will help in increasing public acceptance of drones by reducing third party risk.