Cyber–Physical Attacks on Drones and Mitigation Strategies

Drones are no longer only flying cameras. They are cyber–physical systems that combine embedded computers, wireless communication, sensors, actuators, navigation algorithms, and autonomous decision-making. This integration makes unmanned aerial vehicles useful for inspection, mapping, search and rescue, agriculture, defense, and logistics. However, the same connectivity and autonomy that make drones powerful also expose them to cyber–physical attacks. A cyber–physical attack targets both the digital and physical behavior of the drone. Instead of only stealing data or disrupting software, the attacker may influence how the drone moves, where it navigates, what it senses, or how it communicates with other agents. In the worst case, this can cause mission failure, collision, loss of control, or unsafe behavior in real environments.

One common attack surface is the communication link between the drone and the ground control station. If the command channel is not protected, an attacker may inject false commands, interrupt telemetry, replay old packets, or jam the wireless signal. For swarm-drone systems, drone-to-drone communication is also critical. A compromised link can affect formation control, leader–follower coordination, shared mapping, and collaborative decision-making.

Another important threat is navigation spoofing. Drones that depend on GNSS/GPS can be misled by fake satellite signals or denied access through jamming. In GPS-denied scenarios, attackers may also target visual, inertial, LiDAR, or radar-based navigation. For example, adversarial visual patterns, sensor saturation, or false obstacle information can degrade perception and cause incorrect path planning. Sensor attacks are especially dangerous because autonomous drones depend on real-time perception. A LiDAR sensor can be affected by reflective surfaces, interference, or spoofed distance measurements. Cameras can be affected by lighting manipulation, adversarial markers, smoke, fog, or occlusion. IMU and magnetometer readings can also be disturbed, leading to drift in attitude or position estimation.

Mitigation requires a multi-layer defense strategy. First, communication channels should use authentication, encryption, packet integrity checks, and anti-replay mechanisms. Every command and telemetry packet should be verified before it is accepted by the drone. For swarm systems, leader-to-follower messages should include sequence numbers, timestamps, source and destination identifiers, RSSI, latency monitoring, and packet delivery ratio estimation. Sensor fusion can improve robustness by combining GNSS, visual-inertial odometry, LiDAR, radar, barometer, magnetometer, and onboard mapping. If one sensor becomes unreliable, the system can switch to a degraded but safe navigation mode. For GPS-denied missions, visual-inertial odometry, SLAM, LiDAR mapping, and local obstacle avoidance are key tools.

Anomaly detection should be integrated into the control loop. The drone should continuously monitor unexpected changes in position, velocity, heading, communication quality, sensor readings, and actuator behavior. If the system detects abnormal telemetry, packet loss, spoofing symptoms, or inconsistent sensor fusion results, it can activate fail-safe behaviors such as slowing down, hovering, returning to a safe waypoint, landing, or switching to manual control.

Fourth, resilient control algorithms are needed. Controllers should be designed to tolerate disturbances, packet loss, delayed commands, and sensor uncertainty. Techniques such as robust control, adaptive control, fault-tolerant control, and learning-based decision modules can help the drone maintain stability under degraded conditions. In swarm navigation, followers should be able to maintain formation using the last trusted leader state while avoiding unsafe behavior when communication becomes stale.

Cybersecurity must be considered during the design stage, not added only after deployment. Secure firmware updates, hardware root of trust, protected boot, access control, logging, intrusion detection, and simulation-based attack testing should be part of the drone development workflow. Digital twins and simulators are useful for testing cyber–physical attacks before real-world deployment.

In conclusion, drones must be protected as complete cyber–physical systems. Securing only the software or only the wireless link is not enough. A robust drone architecture should combine secure communication, sensor fusion, anomaly detection, resilient control, and fail-safe mission logic. As drones become more autonomous and collaborative, cyber–physical security will be essential for safe and reliable operation in real-world environments.

---

AeroSwarm: A GPS-Denied Multi-UAV Simulation Framework

AeroSwarm is a simulation framework designed to study collaborative drone navigation in GPS-denied environments. The platform models a swarm composed of one leader drone and two follower drones operating in a complex scenario with obstacles, limited visibility, and communication constraints.

https://video.wixstatic.com/video/300297_12c8844e8030442f81f102cc2d5b6580/720p/mp4/file.mp4

The leader drone is equipped with a 360° LiDAR sensor that continuously scans the environment, detects obstacles, and supports real-time navigation. During the mission, the leader transfers its position, waypoint information, velocity, LiDAR status, and navigation state to the follower drones through drone-to-drone communication links. This allows the swarm to maintain formation and continue coordinated navigation even when GPS is unavailable. The simulator includes multiple dashboard tabs for monitoring the mission. The Navigation + Mapping tab shows the camera views, HUD information, and swarm scenario map. The LiDAR + COMM overlay tab visualizes the LiDAR rays, obstacle detection, and communication links. The Sniffer tab monitors the packet-level communication between the leader and follower drones, including RSSI, latency, packet delivery ratio, RX/DROP state, and LOS/OCC channel condition. AeroSwarm is useful for testing autonomous navigation strategies, communication-aware formation control, LiDAR-based perception, and swarm coordination under GPS-denied conditions. It provides a flexible research platform for developing robust multi-UAV systems for search and rescue, inspection, defense, and operations in indoor, urban, forest, or degraded environments.

---

https://github.com/1Px-Vision/AeroSwarm

CSI-Channel Spatial Decomposition for WiFi-Based Human Pose Estimation in Rescue Scenarios

In rescue scenarios, locating and understanding human motion quickly can make the difference between a successful intervention and a delayed response. Yet cameras, LiDAR, and wearable sensors often struggle in smoke-filled rooms, collapsed buildings, dark environments, or areas where direct line of sight is blocked. This is where WiFi sensing offers a promising alternative. By analyzing how human movement alters wireless signal propagation, it becomes possible to estimate body posture without requiring a camera-based view of the person.

Human Identification Procedure

CSI is a measurement that represents these disparities between carriers and subcarriers. The signal received by the receiver can be expressed using the CSI as follows.

The proposed framework uses Channel State Information (CSI) as the main sensing source. Human presence and motion affect the wireless channel, creating measurable variations in signal amplitude and phase. These raw CSI signals are first collected and then passed through a structured preprocessing pipeline that improves signal quality and extracts the most relevant motion information. This includes antenna selection, outlier removal, discrete wavelet transform (DWT)-based processing, and feature extraction. The goal is to decompose the spatial and temporal characteristics of the WiFi channel into informative representations that can support robust pose estimation even in complex indoor environments.

Human Identification Procedure

It begins with CSI raw data acquisition, where both amplitude and phase are extracted from the WiFi signals. These measurements are then refined through data preprocessing and transformed into features suitable for learning. Finally, the neural network predicts the human skeletal configuration and reconstructs a 3D human body representation. This pipeline shows how wireless sensing can move beyond simple activity recognition toward detailed human pose recovery.

At the core of the method is a neural network architecture designed to reconstruct the human skeleton from the processed CSI data. The model combines an encoder-decoder structure with a Spatial Orientation Attention Module (SOA), allowing it to better capture body orientation and motion relationships across the wireless channel. This enables the system to infer a structured human pose representation and map it to a full-body model such as SMPL-X, providing a richer reconstruction of the person’s posture.

Workflow for WiFi-based human pose estimation using CSI data and neural networks.

On the left, CSI data collection combined with camera-based pose information is shown, where multiple wireless links capture signal variations caused by a human subject. In the center, the collected data is used for neural network design, which learns the relationship between CSI measurements and human body posture. The output of the network is a human skeleton reconstruction and SMPL-X body model, shown as both a skeletal representation and a 3D human figure. On the right, the figure highlights the dataset structure, including a sample 3×3 CSI matrix pose skeleton and the corresponding CSI amplitude signal, illustrating how wireless signal patterns are linked to body movement and posture.

Experimental Setup

The experimental setup and example outputs. It shows sample skeleton predictions alongside CSI amplitude signals captured across multiple wireless links. These examples demonstrate how different human poses, such as walking or crouching, produce distinguishable channel responses. The comparison between ground-truth and predicted skeletons provides visual evidence that CSI-based sensing can track meaningful posture changes with good spatial consistency. This approach is especially relevant for search-and-rescue operations, where first responders need situational awareness in environments that are unsafe or visually inaccessible. A WiFi-based human pose estimation system could help detect trapped survivors, infer whether a person is standing, lying down, or crouched, and support faster decision-making without intrusive sensing hardware. By leveraging existing wireless infrastructure, the method also opens the door to low-cost, privacy-preserving monitoring in emergency response, healthcare, and smart building applications.

Experimental examples show the relationship between CSI amplitude variations and predicted skeletal motion under different activities.

Takeaway

CSI-channel spatial decomposition shows that WiFi signals can be transformed into meaningful human pose information, enabling camera-free and privacy-preserving body reconstruction in difficult rescue environments. By combining CSI preprocessing, spatial feature learning, and lightweight neural modeling, this approach offers a practical path toward detecting and understanding human posture in smoke, darkness, debris, or non-line-of-sight conditions where conventional vision systems often fail.

---