Protecting drones against cyber threats: the GAUSS project

Ivan TesfaiRINA Corporate Research & Development Project Technical Coordination

L’uso dei Droni nella sicurezza industriale: ispezioni, prevenzione e gestione delle emergenze

organizzato da

RINA at a glance

organizzato da

LEVEL OF RINA PRESENCE

170+ Offices

65+ Countries

3700 Colleagues

Our offers with drone

organizzato da

Inspection

Training OperationAtex

Suppliers

Drones regulatory context

organizzato da

International regulation- ICAO: Draft standards and recommended practices

(SARPs) for unmanned aircraft by 2018- Required navigation performance- Required communication performance- Required surveillance performance

- JARUS: recognized by EC and European Parliament

European regulation- Technical and operational requirements still to be

defined- Released EASA Concept of Operations (CONOPS)

- Open category (low risk)- Specific operation (Medium risk)- Certified (higher risk)

Drone are challenging the Aviation’s regulators, while existing technologies are deployed

EGNOS and GALILEO are fundamental for robust navigation and, as such, can support safe drone operations

Source: Report on aviation user needs and requirements, outcome of the European GNSS’ user consultation platform

U-Space concept

organizzato da

A set of new services and specific procedures designed to support safe, efficientand secure access to airspace for large number of drones.

U-Space provides an enabling framework to support UAS operations, as well asan interface to manned aviation, ATM/ANS service providers and authorities,which addresses the needs to support all types of missions and may concern allusers and categories of UAS.

The definition of the Concept of Operations for U-Space is being carried out by CORUS* (Concept of Operation for EuRopean UTM Systems)

* CORUS is an ongoing project which has received funding from the SESAR Joint Undertaking under European Union’s H2020 research an innovation program. https://www.sesarju.eu/projects/corus

Drones: market trends and applications

organizzato da

Mass Market Consumer Solutions

Transport Safety and Liability Critical Solutions

High Precision, Timing and Asset Management Solutions

- High availability and low power consumption are key for mass market receiver

- Galileo improves performance in challenging urban environments

- High level of confidence and resilience are required for transport safety and liability - critical solutions

- The need for safety, reliable performance and accuracy will drive the adoption of multi -frequency for commercial drone operation

- Accuracy is the key performance parameter for high precision solutions

- GNSS a pillar of integrated farming management and drones are an on-going trend as support solution

Emergency management operations support

Precise farming

Inspection on critical infrastructure

Source: GNSS User Technology Report, Issue 1, copyright © European GNSS Agency, 2016

Threats and vulnerabilities

organizzato da

Interference and cyber attacks Relevant Scenarios

- Jamming, spoofing and meaconing threaten GNSS signals and must be coped with

- Intense R&D efforts on Mitigation of GNSS vulnerabilities

Transmission power line inspection

Wind turbine vertical inspection

Long range forest surveillanceSpill detection

Border surveillance

Precision agriculture

GAUSS project

organizzato da

The GAUSS project aims fast and thorough achievement of acceptable levelsin terms of performance, safety and security for both, current drone andfuture U-Space operations. The key element within GAUSS is the integrationand exploitation of Galileo - EGNOS exceptional features for precise andsecure positioning to enable U-Space operations, supporting themanagement and coordination of all drones in the VLL airspace.

Galileo - EGNOS as an Asset for UTM Safety and Security

This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293

GAUSS project

organizzato da

Objectives KPI Target

Precision Precision of individual UAS estimated positioning, velocity and orientation as well as navigation performance and manoeuvrability.

Sub-metric and sub-degree precision

Safety Required navigation performance (RNP) in terms of: Accuracy; Integrity; Continuity and Availability

To be defined by ICAO forVLL UTM. LPV - 200 service level will be initially assumed

Operational risk level indicator (combining likelihood, impact and exposure) under relevant EASA/JARUS and SESAR methodologies: SORA and SecRAM

Acceptable level of residual risk as assessed by SORA and SecRAM.

Security Security risk level indicator (combining likelihood, impact and exposure) under relevant security standards: ISO 31000 and ISO/IEC 27005 standards.

Acceptable level of residual risk as assessed by ISO 31000 and ISO/IEC 27005

Coordination Number of UAS coordinated in the air and primary and alternate trajectories available with acceptablesafety conditions.

4 UAS coordinated with 3primary and 3 alternatetrajectories per UAS

Compatibility UAV (fixed - rotary wing) and EASA RPAS categories of RPAS to which GAUSS solutions can be applied and thus, share the same UTM Airspace

All types (Fixed and rotary wing) and all EASA categories: Open, Specific (SAIL I to VI) and Certified

This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293

GAUSS project

organizzato da

A focus here is paid to Security and cyber-resilience in RPAS and UTM Operations, including authentication and otheranti-jamming and anti-spoofing features to mitigate security risks identified in current UAS and future UTM operations

Procedure, metrics and acceptable risk levels will bedefined by means of a holistic security framework inwhich availability, integrity and confidentiality ofGNSS and UTM communication signals aremaintained above an acceptable level, even underjamming, spoofing or hacking cyber - attacks

RINA is the responsible for the cyber - resilience of EGNSS signal

This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293

Source: GNSS User Technology Report, Issue 1, copyright © European GNSS Agency, 2016

Cyber-resilience of EGNSS

organizzato da

Risk-based approach - Risk based requirements impacting security focus & approach- Identification of assets and threats by conducting risk assessment and developing specific scenarios

enabling security - features implications- Design and development of a set of solutions against cyber - attacks- Set a sub - system verification plan addressing security needs and testing

GNSS Jamming

GNSS Spoofing attack

RINA-C detection algorithm

Relevant needs:- GNSS signal integrity check- Early and reliable warning on GNSS signal attack

This project has received funding from the European GNSS Agency under the European Union’s Horizon 2020 research and innovation programme under grant agreement No 776293

Conclusions

organizzato da

- Technical and operational requirements are still to be defined, while the regulatory approach for drones is under preparation

- Released in 2015 a concept of operations for drones

- U-Space concept as an enabling framework designed to facilitate any kind of routine mission, in all classes of airspace and all types of environment - even the most congested - while addressing an appropriate interface with manned aviation and air traffic control

- Europe is investing in making the EGNSS signal itself more precise and accurate (Galileo)

- EGNSS provides significant benefits to aviation and serves as a catalyst for improving flight safety and efficiency fostering navigation - driven applications (smartphone, mass market, transport, safety - critical application, etc.)

- Strengthening the reliability and security of EGNSS signal is pivotal for the drone application performance

- Better and more secure the positioning signal is, the better is the performance of the drone, and more reliable is the commercial service that use drones

Few reference cases

organizzato da

Satellite Based Asset Tracking for Supporting Emergency Management in Crisis Operations

GNSS driven EO and Verifiable Image and Sensor Integration for mission -critical Operational Networks

Port vehicle automation through tight integration of EGNSS and on-board sensors

Ivan Tesfai

RINA, Corporate Research & Development, Project Technical CoordinationTechnical area: security, disaster resilience and critical infrastructures

Email: ivan.tesfai@rina.orgWebsite: www.rina.org

organizzato da