Protecting drones against cyber threats: the GAUSS project · Protecting drones against cyber...
Transcript of Protecting drones against cyber threats: the GAUSS project · Protecting drones against cyber...
Protecting drones against cyber threats: the GAUSS project
Ivan TesfaiRINA Corporate Research & Development Project Technical Coordination
L’uso dei Droni nella sicurezza industriale: ispezioni, prevenzione e gestione delle emergenze
organizzato da
RINA at a glance
organizzato da
LEVEL OF RINA PRESENCE
170+ Offices
65+ Countries
3700 Colleagues
Our offers with drone
organizzato da
Inspection
Training OperationAtex
Suppliers
Drones regulatory context
organizzato da
International regulation- ICAO: Draft standards and recommended practices
(SARPs) for unmanned aircraft by 2018- Required navigation performance- Required communication performance- Required surveillance performance
- JARUS: recognized by EC and European Parliament
European regulation- Technical and operational requirements still to be
defined- Released EASA Concept of Operations (CONOPS)
- Open category (low risk)- Specific operation (Medium risk)- Certified (higher risk)
Drone are challenging the Aviation’s regulators, while existing technologies are deployed
EGNOS and GALILEO are fundamental for robust navigation and, as such, can support safe drone operations
Source: Report on aviation user needs and requirements, outcome of the European GNSS’ user consultation platform
U-Space concept
organizzato da
A set of new services and specific procedures designed to support safe, efficientand secure access to airspace for large number of drones.
U-Space provides an enabling framework to support UAS operations, as well asan interface to manned aviation, ATM/ANS service providers and authorities,which addresses the needs to support all types of missions and may concern allusers and categories of UAS.
The definition of the Concept of Operations for U-Space is being carried out by CORUS* (Concept of Operation for EuRopean UTM Systems)
* CORUS is an ongoing project which has received funding from the SESAR Joint Undertaking under European Union’s H2020 research an innovation program. https://www.sesarju.eu/projects/corus
Drones: market trends and applications
organizzato da
Mass Market Consumer Solutions
Transport Safety and Liability Critical Solutions
High Precision, Timing and Asset Management Solutions
- High availability and low power consumption are key for mass market receiver
- Galileo improves performance in challenging urban environments
- High level of confidence and resilience are required for transport safety and liability - critical solutions
- The need for safety, reliable performance and accuracy will drive the adoption of multi -frequency for commercial drone operation
- Accuracy is the key performance parameter for high precision solutions
- GNSS a pillar of integrated farming management and drones are an on-going trend as support solution
Emergency management operations support
Precise farming
Inspection on critical infrastructure
Source: GNSS User Technology Report, Issue 1, copyright © European GNSS Agency, 2016
Threats and vulnerabilities
organizzato da
Interference and cyber attacks Relevant Scenarios
- Jamming, spoofing and meaconing threaten GNSS signals and must be coped with
- Intense R&D efforts on Mitigation of GNSS vulnerabilities
Transmission power line inspection
Wind turbine vertical inspection
Long range forest surveillanceSpill detection
Border surveillance
Precision agriculture
GAUSS project
organizzato da
The GAUSS project aims fast and thorough achievement of acceptable levelsin terms of performance, safety and security for both, current drone andfuture U-Space operations. The key element within GAUSS is the integrationand exploitation of Galileo - EGNOS exceptional features for precise andsecure positioning to enable U-Space operations, supporting themanagement and coordination of all drones in the VLL airspace.
Galileo - EGNOS as an Asset for UTM Safety and Security
This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293
GAUSS project
organizzato da
Objectives KPI Target
Precision Precision of individual UAS estimated positioning, velocity and orientation as well as navigation performance and manoeuvrability.
Sub-metric and sub-degree precision
Safety Required navigation performance (RNP) in terms of: Accuracy; Integrity; Continuity and Availability
To be defined by ICAO forVLL UTM. LPV - 200 service level will be initially assumed
Operational risk level indicator (combining likelihood, impact and exposure) under relevant EASA/JARUS and SESAR methodologies: SORA and SecRAM
Acceptable level of residual risk as assessed by SORA and SecRAM.
Security Security risk level indicator (combining likelihood, impact and exposure) under relevant security standards: ISO 31000 and ISO/IEC 27005 standards.
Acceptable level of residual risk as assessed by ISO 31000 and ISO/IEC 27005
Coordination Number of UAS coordinated in the air and primary and alternate trajectories available with acceptablesafety conditions.
4 UAS coordinated with 3primary and 3 alternatetrajectories per UAS
Compatibility UAV (fixed - rotary wing) and EASA RPAS categories of RPAS to which GAUSS solutions can be applied and thus, share the same UTM Airspace
All types (Fixed and rotary wing) and all EASA categories: Open, Specific (SAIL I to VI) and Certified
This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293
GAUSS project
organizzato da
A focus here is paid to Security and cyber-resilience in RPAS and UTM Operations, including authentication and otheranti-jamming and anti-spoofing features to mitigate security risks identified in current UAS and future UTM operations
Procedure, metrics and acceptable risk levels will bedefined by means of a holistic security framework inwhich availability, integrity and confidentiality ofGNSS and UTM communication signals aremaintained above an acceptable level, even underjamming, spoofing or hacking cyber - attacks
RINA is the responsible for the cyber - resilience of EGNSS signal
This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293
Source: GNSS User Technology Report, Issue 1, copyright © European GNSS Agency, 2016
Cyber-resilience of EGNSS
organizzato da
Risk-based approach - Risk based requirements impacting security focus & approach- Identification of assets and threats by conducting risk assessment and developing specific scenarios
enabling security - features implications- Design and development of a set of solutions against cyber - attacks- Set a sub - system verification plan addressing security needs and testing
GNSS Jamming
GNSS Spoofing attack
RINA-C detection algorithm
Relevant needs:- GNSS signal integrity check- Early and reliable warning on GNSS signal attack
This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293
Conclusions
organizzato da
- Technical and operational requirements are still to be defined, while the regulatory approach for drones is under preparation
- Released in 2015 a concept of operations for drones
- U-Space concept as an enabling framework designed to facilitate any kind of routine mission, in all classes of airspace and all types of environment - even the most congested - while addressing an appropriate interface with manned aviation and air traffic control
- Europe is investing in making the EGNSS signal itself more precise and accurate (Galileo)
- EGNSS provides significant benefits to aviation and serves as a catalyst for improving flight safety and efficiency fostering navigation - driven applications (smartphone, mass market, transport, safety - critical application, etc.)
- Strengthening the reliability and security of EGNSS signal is pivotal for the drone application performance
- Better and more secure the positioning signal is, the better is the performance of the drone, and more reliable is the commercial service that use drones
Few reference cases
organizzato da
Satellite Based Asset Tracking for Supporting Emergency Management in Crisis Operations
GNSS driven EO and Verifiable Image and Sensor Integration for mission -critical Operational Networks
Port vehicle automation through tight integration of EGNSS and on-board sensors
Ivan Tesfai
RINA, Corporate Research & Development, Project Technical CoordinationTechnical area: security, disaster resilience and critical infrastructures
Email: [email protected]: www.rina.org
organizzato da