Safeguarding Military Drones Against Cyberattacks

Authors: Arun Venkitanarayanan, Benjamin Yankson

SUNY Campus: University at Albany

Presentation Type: Poster

Location: UU 111

Presentation #: 69

Timeslot: Session C 1:45-2:45 PM

Abstract: The Internet of Battlefield Things (IoBT) is revolutionizing modern warfare by integrating drones, sensors, and autonomous systems into military operations. However, these connected technologies also introduce significant cybersecurity vulnerabilities, which could allow attackers to manipulate data, disrupt missions, or take control of critical devices. Understanding and addressing these risks is essential for securing both military and consumer-grade technology. This research examines IoBT security threats using the DJI Mini 4 Pro as a case study. Despite being banned by the U.S. military due to security concerns, this drone remains one of the most widely used consumer models, featuring high-resolution imaging, AI-assisted navigation, and autonomous flight—capabilities similar to military drones. Its lightweight design (under 249g) exempts it from FAA registration, making it widely accessible. Our ongoing testing focuses on identifying weak Wi-Fi security, unencrypted data transmission, firmware vulnerabilities, and susceptibility to Man-in-the-Middle (MitM) attacks. We aim to demonstrate some of the most critical security risks, such as password cracking, command injection, and video feed interception, to highlight how attackers could exploit these weaknesses. We are also evaluating privacy concerns related to the DJI Fly app, including forced updates and potential data leaks. As research continues, we will investigate port vulnerabilities, GPS spoofing, and firmware integrity issues to gain further insight into security risks in both consumer and military drone applications.