## 3 Drone Vulnerabilities and Attack Vectors
### GPS Spoofing  
GPS spoofing transmits false GPS signals to manipulate a drone's navigation to redirect it from its intended path. This can lead to theft, operational interference, or unauthorized payload delivery and poses serious risks in security-sensitive environments. Defenses  
\begin{table}
\begin{tabular}{p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt} p{56.9 pt}} \hline \hline
**Drone Attacks** & **Tools/ Mechanisms** & **Impact** & **Security Requirements** & **Attack Surfaces** & **Key Papers** \\ \hline GPS Spoofing & GPS signal simulators & Misdirection, route deviation & Enhanced route security & Z1: UAVs & [31; 32; 33; 34] \\ \hline Signal Jamming & Radio frequency jammers & Loss of control, crashing & Robust signal integrity & Z1: UAVs, Z2: Communication Systems & [35; 36; 37; 38; 39] \\ \hline Unauthorized Access & Hacking tools & Data theft, control takeover & Access control improvements & Z3: control hubs, Z4: command centers & [40; 41; 42; 43; 44; 45] \\ \hline Physical Attack & High-energy lasers & Damage, destruction & Structural integrity checks & Z1: UAVs & [46; 47; 48; 49; 50] \\ \hline Network Intrusion & Malware, spyware & Data breach, system compromise & Enhanced cybersecurity measures & Z2: Communication Systems, Z4: command centers & [51; 52; 53; 54] \\ \hline Battery Tampering & Physical interference & Power loss, mid-air failure & Reliable power supply systems & Z1: UAVs & [55; 56] \\ \hline Firmware Hacking & Custom firmware & Altered behavior, backdoors & Secure firmware protocols & Z1: UAVs, Z3: Control Hubs & [57; 58; 59; 60; 61; 62; 63] \\ \hline Sensor Blinding & Directed bright lights & Impaired vision, collision & Improved sensor protection & Z1: UAVs & [64; 65; 66; 67; 68] \\ \hline Denial of Service & Flooding networks & Disrupted operations & Network resilience & Z2: Communication Systems, Z3: Control Hubs & [69; 70; 71; 72; 73; 74] \\ \hline Data Interception & Sniffing tools & Espionage, data leakage & Data encryption standards & Z2: Communication Systems & [75; 76; 77; 78; 79] \\ \hline Protocol Exploitation & Exploitation kits & Command hijacking & Secure communication protocols & Z3: Control Hubs & [80; 81; 82; 83; 84; 85; 86] \\ \hline Malicious Code & Trojans, viruses & Malfunctions, unsafe operations & Malware detection systems & Z1: UAVs, Z4: command centers & [87; 88] \\ \hline Ransomware Attack & Ransomware & Locked systems, random demand & Anti-ransomware strategies & Z4: command centers & [4; 89; 90; 91] \\ \hline Eavesdropping & Audio–visual surveillance & Privacy invasion & Privacy safeguards & Z2: Communication Systems, Z4: command centers & [92; 93; 94; 95] \\ \hline Supply Chain Attack & Compromised components & Integrated vulnerabilities & Supply chain security & Z5: regulatory bodies, production facilities, and associated equipment & [96; 97; 98] \\ \hline Insider Threat & Sabotage by insiders & System sabotage, data theft & Internal security measures & Z3: Control Hubs, Z4: command centers & [99; 100; 101; 102] \\ \hline Regulatory Non-compliance & Bypassing controls & Legal penalties, shutdown & Compliance management & Z5: regulatory bodies, production facilities, and associated equipment & [103; 104; 105] \\ \hline \hline \end{tabular}
\end{table}
Table 2: Categorization of drone attack methods for target zones (Z). Z1: UAVs, Z2: communication systems, Z3: control hubs, Z4: command centers, and Z5: Regulatory Bodies, Production Facilities, and Associated Equipment.  
include advanced cryptographic techniques, multi-sensor fusion, and anomaly detection systems to identify and mitigate deviations [106; 107].