The vulnerability of UAVs: an adversarial machine learning perspective

Michael Doyle; Josh Harguess; Keith Manville; Mikel Rodriguez

doi:10.1117/12.2589538

22 April 2021 The vulnerability of UAVs: an adversarial machine learning perspective

Michael Doyle, Josh Harguess, Keith Manville, Mikel Rodriguez

Proceedings Volume 11733, Geospatial Informatics XI; 117330F (2021) https://doi.org/10.1117/12.2589538
Event: SPIE Defense + Commercial Sensing, 2021, Online Only

Abstract

The study of the vulnerabilities of unmanned aerial vehicles (UAVs) to a wide range of counter-UAV (C-UAV) attacks is well-known and established. While most C-UAV lies in the cyber, sensing, and kinetic domains, there is an emerging threat to these platforms from the perspective of adversarial machine learning (ML). Modern ML approaches are vulnerable to attacks that are largely imperceptible to humans and can be extremely successful in causing undesired false positives and false negatives in real-world scenarios. With the proliferation of ML algorithms throughout the software stack of modern UAVs, these new attacks could have real implications in the security of UAVs. A successful attack on a UAV has real-world consequences such as a collision or takeover of the platform itself. We describe a methodology for understanding the vulnerability of UAVs to these attacks by threat modeling each potential state and mode of the UAV, from powering-on, to various mission modes. In this threat modeling, we consider well-known attacks on deep learning approaches, such as state-of-the-art object detection, but also explore the possibility of novel attacks on traditional computer vision approaches, such as stereo algorithms. We examine one potential threat vector and evaluate the likelihood of success of such an attack given the current progress of adversarial ML.

Conference Presentation

Citation Download Citation

Michael Doyle, Josh Harguess, Keith Manville, and Mikel Rodriguez "The vulnerability of UAVs: an adversarial machine learning perspective", Proc. SPIE 11733, Geospatial Informatics XI, 117330F (22 April 2021); https://doi.org/10.1117/12.2589538

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available