# Cyber4 Drone: A Systematic Review of Cyber Security and Forensics in Next-Generation Drones
## 4 Threat Models and Attack Scenarios  
The attacks on emerging drone technology bring risks to the safety and security of data, infrastructure, and the public. The attacker can exploit the zero-day vulnerabilities and security gaps to enter drone communication networks [28; 29]. Drone forensics can play a significant role in identifying the attacker's objective. Drone forensics is a systematic investigation procedure that collects, preserves, and analyzes the drone's digital, software, and hardware-related evidence. Drone forensics can help to build a new technology/policy to reduce the impact of similar attacks in the future and help to increase the security level. This section discusses various drone security attacks to give systematic paths for the drone investigation process. Unreliable communication mediums and frequency-based vulnerabilities increase the attack risks [30]. The latest technology drones, which have their camera, and GPS signal associated with it, are also vulnerable to attacks. The taxonomy classification of Drone attacks with impacts and their execution tools and the mechanism is shown in Table 2.  
\begin{table}
\begin{tabular}{p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt} p{113.8 pt}} \hline \hline
**Drone Attacks** & **Tools/Mechanisms** & **Impact** & **Security Requirements** & **Attack Surfaces** & **Key Papers** \\ \hline Traffic Analysis and Network Stalking & SNMP, Packet sniffer, NetFlow & Privacy & Anti-spyware and packet filters & Z2 & [12; 31; 32; 33; 34; 35; 36] \\ \hline Interception & Drone Monitoring Equipment, Acoustic Sensors & Privacy & Encryption technique & Z1,Z2,Z3,Z4 & [37; 38] \\ \hline Data Capturing and Forensics & Using serial connection, ExtractDJI, Datcon, Prodiscover Basic & Privacy & Encryption technique & Z1,Z2,Z5 & [15; 39; 40; 41; 42; 43] \\ \hline Location Tracing & Drone Monitoring Equipment, Acoustic Sensors, Radar & Privacy & Utilize counter-drone techniques & Z1,Z2 & [44; 45; 46] \\ \hline Data/Information Leakage & Substitution and alteration, Modification, Duplication & Integrity & Use Secure channel switching and Encrypted data & Z1,Z2,Z3,Z4,Z5 & [47; 48; 49; 50] \\ \hline ACL Modifications & DroneSploit, hacking Tools & Integrity & Validate user-controllable input & Z1,Z2,Z3,Z5 & [51; 52; 53] \\ \hline  & & & a Public Key signed by a trusted Certificate Authority, encrypting the communication link, & & \\ Man-In-Middle Attacks & Wrifi Fineapple Nano, Raspberry Pi 3, Maldrone, SkyJack: & Integrity & ensuring robust mutual authentication at both ends of the communication channel, and securely exchanging public keys & Z2,Z3 & [54; 55; 56; 57] \\ \hline Message Forgery & DroneSploit, Remote-AT-Commands & Integrity & Use Secure channel switching and Encrypted data & Z2,Z1,Z5 & [58; 59; 60] \\ \hline Identity Spoofing and Key exploitations & Side-Channel Attacks, Weak Configuration, Vulnerability Explootiations & Confidentiality Explootiations & Use secure and robust protocols with strong authentication & Z1,Z2,Z3,Z4,Z5 & [61; 62; 63] \\ \hline Unauthorized Access and Controls & Drone Monitoring Equipment, DroneSploit, hacking Tools, Wifi attack, & Confidentiality Explootiations & Utilize strong passwords & Z1,Z2,Z3,Z4,Z5 & [61; 64; 65; 66] \\ \hline  & & & Use secure and robust protocols with strong authentication, and the authentication mechanism & & \\ Replay Attacks & Protocol Manipulation & Confidentiality & Should include fresh message requests securely before data exchange or communication & Z2 & [66; 67; 68; 69; 70; 71] \\ \hline \hline \end{tabular}
\end{table}
Table 2: Taxonomy classification of Drone attacks with impacts and their execution tools and mechanism. Z1: Drones, Z2: Communication Networks, Z3: Base Stations, Z4: Ground Control Stations, Z5: Certification Authorities, Production and Manufacturing Units, and other involved devices.