# UAV IoT Framework Views and Challenges: Towards Protecting Drones as \"Things\"
## 2 Overview on UAVs as Members of IoT
### Security for UAVs over IoT
#### 2.4.1 Security Component  
IoT-based UAVs is a complex paradigm in which people and machines interact with the technological ecosystem based on smart objects through complex processes [36]. When studying security aspects in the IoT technological ecosystem, the study focused on four main layers that are, from top to bottom: the application, network, and link/adoption layers, and the perception. Figure 2 presents the IoT security techniques of each layer, along with UAV-oriented extensions (at the right side). In the application layer, security mechanisms such as the Constrained Application Protocol (CoAP) [37], access control and user application security are included to enable secure messages and minimal configurations using the RESTful library, filtering and perimeter security with the Simple Object Access Protocol (SOAP) and data filtering and cloud support using application firewalls and Intrusion Detection Systems (IDS) [38]. The main UAV extensions in this layer are related with vision-based enhancements that support self-protection and path/destination identification by using video-processing and computer-vision techniques [39; 40]. Novel solutions using deep learning and a combination of deep and shallow networks can be applied to enhance the security of mobile things. In the network layer, mechanisms like IP Security (IPSec), secure routing, and transport security were suggested in Reference [36]. These mechanisms offer IP payload confidentiality and integrity using IPSec and the Encapsulated Security Payload (ESP) protocol. Trusted IoT drones and low-energy protocols can also be available with the IPv6 Routing Protocol for Low-Power and Lossy Networks (RPL) according to the work in Reference [41]. The Datagram Transport Layer Security (DTLS) protocol, which is, in practice, TLS with added features to deal with the unreliable nature of User Datagram Protocol (UDP) communications, and Rivest Shamir Adelman (RSA) algorithms provide enhanced confidentiality, integrity, and authentication. These mechanisms, according to the work in Reference [42] can timely inform about potential threats (e.g., blackhole, wormhole, Sybil attack, and hello attack) in \"flying\" things while operating. Moreover, as UAV security extensions, novel routing and name service mechanisms can be developed based on the Named Data Networking (NDN) infrastructure, which is an evolution of the IP architecture that generalizes the role of this thin waist, such that packets can name objects other than communication endpoints [43]. NDN extensions can provide robust object identification and ensure the integrity of the things' records used in the naming \begin{table}
\begin{tabular}{l c c c c} \hline \hline
**Category** & **Technology** & **Data Rate** & **Range** & **Latency** \\ \hline WPAN & Bluetooth 4.0 & \(<\)1 Mbps & 60 m & 50 \\ WPAN & Zigbee & \(<\)250 kbps & \(<\)100 m & 50 \\ WLAN & 802.11a/b/g/n/ac & \(<\)600 Mbps & \(<\)250 m & 75 \\ WLAN & WAVE 802.11p & \(<\)27 Mbps & \(<\)1 km & 50 \\ LPWA & LoRA & \(<\)50 kbps & \(<\)15 km & 82 \\ LPWA & SigFox & \(<\)100 bps & \(<\)20 km & 82 \\ Cellular & NB-IoT & \(<\)250 kbps & World wide & 75 \\ Cellular & LTE-M & \(<\)1 Mbps & World wide & 75 \\ Cellular & LTE Advanced (4G) & \(<\)1 Gbps & World wide & 50 \\ Cellular & LTE D2D & - & World wide & 25 \\ Cellular & 5G & \(<\)10 Gbps & World wide & 3 \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Categories of communication technologies available to UAVs. architecture, in order to defend against DNS, Man-in-the-Middle (MiM), and identification attacks using DNS Security Extensions (DNSSEC). Additionally, power-aware routing extensions can enhance drones' energy autonomy and increase flying time. In the link/adoption layer, important security services have to be applied in the 6 LoWPAN adoption layer, including end-to-end security, continuous authentication schemes [44; 45], trust verification/validation, and key management mechanisms [37].