# Risk Assessment of UAV Cyber Range Based on Bayesian-Nash Equilibrium
###### Abstract  
In order to analyze the choice of the optimal strategy of cyber security attack and defense in the unmanned aerial vehicles' (UAVs) cyber range, a game model-based UAV cyber range risk assessment method is constructed. Through the attack and defense tree model, the risk assessment method is calculated. The model of attack and defense game with incomplete information is established and the Bayesian-Nash equilibrium of mixed strategy is calculated. The model and method focus on the mutual influence of the actions of both sides and the dynamic change in the confrontation process. According to the calculation methods of different benefits of different strategies selected in the offensive and defensive game, the risk assessment and calculation of the UAV cyber range are carried out based on the probability distribution of the defender's benefits and the attacker's optimal strategy selection. An example is given to prove the feasibility and effectiveness of this method. Bayesian-Nash equilibrium; UAV cyber range; risk assessment 202485660  
unpermitted UAV [7], disrupting air traffic and highlighting vulnerabilities in airport security protocols. Most alarmingly, the office of the Japanese Prime Minister was breached by a UAV carrying radioactive material [8], an act that not only endangered lives but also exposed the potential for UAV to be used as tools of terror. These incidents serve as stark reminders that cyber threats extend beyond digital realms, impacting physical security and operational integrity. They pose direct challenges to national security and demand urgent attention and action from policymakers, technologists, and law enforcement agencies alike. The multifaceted security issues associated with UAVs necessitate robust regulatory frameworks, advanced detection systems, and stringent enforcement mechanisms to safeguard against misuse and ensure the responsible integration of UAVs into our airspace. Since many UAV systems are seriously flawed in design, numerous studies and experiments have shown that the information security of current UAV systems mainly faces the following threats:  
A malware infection in UAV systems poses significant risks, particularly when considering the internal communication protocols that facilitate user control through wireless devices like tablets, laptops, and smartphones. Unfortunately, recent studies have highlighted vulnerabilities in these technologies [11], revealing that they can be exploited by malicious actors. Hackers have devised sophisticated methods to compromise UAV security by leveraging weaknesses in the transmission protocols. Specifically, they can create a reverse shell using a TCP payload, which they subsequently inject into the UAV's memory. This intrusion allows for the clandestine installation of malicious software onto the system that runs the ground station, effectively giving the attacker unauthorized access and control over the UAV. The consequences of such an attack can range from data theft and privacy violations to complete loss of UAV functionality, endangering both the operator and bystanders. It is therefore imperative for manufacturers and users alike to prioritize cybersecurity measures, including regular updates, robust encryption, and rigorous testing of communication channels, to mitigate these risks and ensure the safe operation of UAV. * Data interference and interception. The UAV uses wireless communication and transmits information through open, non-secure wireless channels [12], making it vulnerable to various threats such as data interception, malicious data injection, and altering pre-set flight paths. This allows the UAV and GCS to be maliciously installed and injected with many infected digital files, such as videos and images [13]. * Wi-Fi interference. Attackers can hijack the UAV's communication by installing and configuring a Raspberry-pi [14] and sending an access instruction between authentication processes, such as interfering with the expected UAV frequency and luring the UAV to connect to the hacker's Wi-Fi.