# Risk Assessment of UAV Cyber Range Based on Bayesian-Nash Equilibrium
## 6 Application and Analysis  
The UAV range can collect the on-site work data of the UAV logistics and transportation cyber range in real time, monitor the operation status of the UAV logistics and transportation cyber range, and control the UAV execution site to deliver goods safely and effectively. According to the monitoring data, the UAV ground station generates control commands and issues them to the UAV. The UAV accepts the control commands issued by the ground station to control its own task process, such as flight height and motor speed adjustment. However, the UAV data transmission protocol is complex and diverse, and faces some information security risks, including illegal access risk, the UAV cyber protocol's openness risk, the unencrypted data transmission risk, and the UAV cyber structure's risk. The status data of an unmanned aerial system face the great threat of being tampered by criminals in the cyber network, and there may be a series of serious attacks on unmanned aerial systems. Specifically, unmanned aerial vehicle systems and ground stations are two important pieces of equipment of the unmanned aerial vehicle range, and the communication between them mostly adopts the MavLink protocol, but it mainly has security problems such as lack of authentication in the communication process and a lack of programmability of information verification and protocol. This means that an attacker could exploit a programmability flaw in the MavLink protocol to inject malicious code into a flight control unit or ground station. Therefore, once the ground station or UAV of the UAV range is subjected to information attack, it will cause serious consequences. For example, the ground station is a commonly used equipment in the UAV range, and its working flow must be limited to a certain range to protect the ground station from damaging the equipment due to excessive flow impact. When the UAV range is subjected to an information attack, it can damage the equipment. If the ground station is subjected to information attacks, malicious attackers will access the ground station, illegally send forged data from the ground station, issue wrong instructions to make the UAV fly out of the reasonable inspection range, and then destroy the normal work of public facilities and cause losses. On the other hand, viruses targeting UAV systems, such as the malUAV backdoor virus, can enter the UAV communication system through various ways and change the behavior of the UAV by modifying the protocol package information, such as executing suicide behaviors and endangering the security of society. In view of this possible attack situation, take this as an example to analyze. First, the attack-defense tree is established based on specific attack behavior and defense measures, and then the UAV range risk evaluation method proposed in this paper is analyzed to illustrate the specific application of this method, that is, how to help UAV range information security managers choose defense strategies based on the Bayesian-Nash equilibrium solution. In this paper, the UAV communication system in the UAV cyber range is taken as an example, and the method proposed in this paper is used for risk assessment and analysis. As shown in Figure 3, the UAV communication system is mainly composed of the UAV range server, attacker, terminal equipment and UAV. According to the analysis of attack information by the range manager, the attacker strategies are classified into two types, which are represented by \(t_{A}\) = [adventurous attacker, conservative attacker]. The specific information is shown in Table 3, where different atomic attack combinations represent different types of attack strategies, and the attack behavior is uncertain; so, the attacker's information is also uncertain.