rise of the drones · •future impact of drones. drones •drone is a general word used to define...
TRANSCRIPT
Rise of the Drones
AND THEIR IMPACT ON YOUR FUTURE AUDITS
Agenda
• Drones?
• Use of Drones in Business
• Risks
• Key Audit Issues
• Future Impact of Drones
Drones
• Drone is a general word used to define any unmanned aerial vehicle
• An unmanned aerial vehicle, commonly known as a drone, is an aircraft without a
human pilot aboard.
• UAVs are a component of an unmanned aircraft system; which include a UAV, a
ground-based controller, and a system of communications between the two.
• The flight of UAVs may operate with various degrees of autonomy: either under
remote control by a human operator or autonomously by onboard computers
Wikipedia“The ability to self-stabilize, to be able to hold a GPS-based position, that's the level of autonomy that actually makes it an intelligent machine."Michael Perry, public relations manager at drone maker DJI
Drones
NOT these
THESE
Drones
Predator/Reaper Droneshttp://www.bbc.com/news/world-south-asia-10713898
Your drone is equipped with a receiver. It gets information that tells it what to do. You tell your drone what to do using a transmitter
Transmitters / apps
Drones
• FPV- First Person View
• Means a video camera broadcasts the live video to the pilot on the ground
• Allows the unmanned aircraft to fly much higher and further
• Allows for more precise flying around obstacles – can fly indoors and through forests
• Flight controllers with modes such as Follow Me, Active Tracking, Waypoints, Return To Home
• Collision avoidance, gimbals for professional filming etc, terrain follow mode, Home lock, No-
Fly zones
• 2.4 / 5.8 GHz frequency bands typical, range extenders and new live video using the 4G / LTE
network. 900Mhz/433Mhz provides longer range communication at a slower data rate
Drones
• Predicted years ago
• In the early 2000’s I suggested “drones” could be used to hack wifi
• (More model airplanes/helicopters back then. Drone term not widely used )
Drones in Business
• Drone mapping of job sites
• 2D and 3D renders of job sites, including Volumetrics, Topography etc
• Volumetrics
• Of or relating to measurement by volume
• In addition to volume computations, you can do linear distance and area measurements,
generate contour maps, measure area etc
• Topography
• The arrangement of the natural and artificial physical features of an area: "the topography of the
island"
• A detailed description or representation on a map of the natural and artificial features of an area
Drones in Business
• Wind Farm surveys
• Perform site surveys and wind turbine blade inspections
• Can cover about 100 hectares in one day
• Can eliminate the risk for operators
• Generate images taken from a better position for points that may be inaccessible
Drones in Business
• Drone Advertising
• Globe and Mail newspaper June 2017
Drones in Business
• Amazon
• Parcels must weigh 5 pounds or less
• Vast majority of Amazon sales are less than this
• Will be dropped at doorstep, or your yard, home or not
• “Highly automated" drones will be able to detect obstacles and avoid them during
travel
• Google and Walmart following suit
Drones in Business
• Workhorse - Horsefly
• The drone itself will be 'launched'
from a van which is fitted with
a recharging station for the battery-
powered drone
• The drone can travel at 50 miles per
hour, carry a 10 pound package and
fly for 30 minutes
• Hoping to begin this yearRemains within USA FAA line of site law
Drones in Business
• UPS
• UPS unveiled its first residential delivery drone. The drone itself will be 'launched'
from an electric van which is fitted with a recharging station for the battery-powered
drone.
• On Monday, February 20, 2017 a UPS drone buzzed over fields in Lithia, Florida, to
deliver a test package to a rural home. The idea is that the driver can continue along
their route while the drone makes a delivery that would otherwise be out of the way
• In September 2016, the company successfully used a drone to deliver medicine to an
island near BostonIn test stages – currently USA FAA law is line of site
Drones in Business
• Roofing companies
• Perform roof inspections on large scale buildings
• Energy companies
• Map project sites. Patrolling pipelines, assessing tailings ponds and for various land
surveys. Inspecting wind mills
• Wildlife/Environmental
• Conducting environmental assessments.
• Brican Flight Systems Inc. of Brampton, Ont., has photographed bowhead whales in
Canada’s Arctic and caribou on the tundra
Drones in Business
• Film companies
• Drone-filmed sweeping landscapes and tight-angled canyon shots. Better/different film angles far
cheaper
• Farming
• Monitor a multitude of crop-health statistics, including water and pesticide effectiveness. Identify
overwatered or diseased areas
• Construction
• Drone footage is converted into a three-dimensional picture of the site, which is fed into software that
compares it to computerized architectural plans. The software can show managers how the project is
progressing, and can automatically highlight parts that may be falling behind schedule
Drones in Business
• Medicine
• A Stockholm study in 2017 found that drones arrived at the scene of a cardiac arrest
17 minutes faster than an ambulance.
• Published June 13th, Journal of the American Medical Association
Courtesy: http://www.marketwatch.com/story/drone-delivery-is-already-here-and-it-works-2015-11-30
Drones in Business
• Police
• Search for missing people, monitoring traffic accidents and capture crime scene
photos
• News
• The New York Times, The Washington Post and eight other media organizations are
teaming with Virginia Tech to test news drones
• Others?
Risks
• Noise
• Public drones run about 75 – 80 decibels. About the sound of an old fashioned phone
ringing.
• While not overly loud, it is constant. Can be distracting. Adds to general noise levels
• Visual Surveillance
• Voyeurs
• Divorcing couples
• Other?
Risks
• Wifi Surveillance
• Carry a wifi signal cracking toolkit – greater reach
• Gerix WiFi cracker, Fern-Wifi-Cracker, Aircrack-NG
• Listening in
• Laser microphone to listen in on board meetings etc
• Keyboard hacking
• Get closer and search out sensitive wireless keyboard usage
• Aircrack-NG, MouseJack
Risks
• Media
• More intrusion on private lives of celebrities
• Will need increased laws for privacy and stalking
• Imagine a drone following your child to school or play for media photos
• Easier coverage of wars and riots
• Safer for journalists
• More intrusive coverage of accidents and explosions
• Drones getting close in coverage
Risks
• Drone games
• Racing, air combat
• Wild life harassment
• Prison security
• Drug and/or contraband drop-offs
• Burglars
• Using drones to case your house
Risks
• No license required*
• If you fly your drone for fun and it weighs more than 250 g and up to 35 kg, you do
not need special permission from Transport Canada
• Currently drone operators are not required to obtain a license to fly in the UK
• In South Africa Part 94 of the Civil Aviation Regulations is used. No license will be
required and distance thresholds are 150 feet above the surface and from any public
road. On property owned by the operator or with permission. 500m from the pilot
and never higher than any obstacle within 300m from the pilot
* additional restrictions do apply
Risks
• Bodily injury
• Can crash or fly into someone
• Operator or innocent bystander
• Can cause a vehicle crash
• Deliberate or accidental
• Air flights
• Although illegal - could cause damage to airplane flights
• Private planes or larger commercial (engine flameout for example)
Risks
• Air space congestion
• How many drones can fit in one space?
• Will drone use be curtailed or given “lanes” for flying like commercial airlines?
• When will first fist fight occur over invasion of air space?
• People have already shot down drones flying over their property
Risks
• Hacked!
• Skyjack
• Samy Kamkar - The Skyjack drone detects the wireless signal sent out by a target drone,
injects WiFi packets into the target’s connection, de-authenticates it from its real controller
and then authenticates it to the Skyjack drone. Uses Aircrack-ng, a wireless key cracking
application. Finds the drones by looking for MAC addresses owned by Parrot
• GPS spoofing or jamming
• Unencrypted. Can be spoofed to tell your machine it is somewhere else
• No-fly zone? Prison?
• Can be jammed (although illegal in most countries)
Risks
• Guns and Drones
• Illegal according to FAA
KEY AUDIT ISSUES
• Defined Business Use?
• What business purpose does it fulfill?
• Does it require senior management approval?
• Can any department buy/use one?
• Defined Plan?
• Why do it?
• Current state of business? What will Drone adoption look like?
• What capabilities do you need?
• How will you get there? Strategy
KEY AUDIT ISSUES
• Are Regulatory rules and Laws understood?
• Documented list?
• Flight rules
• No Fly zones
• Privacy
• Certification
Key Audit issues
• Is there a Policy?
http://www.bentley.edu/campus-life/safety-transit/policy-on-use-drones-and-uavs-on-campus
Key Audit issues
• Policy Review
• Components of a good policy
• Safety
• Training
• Prohibited Zones
• Privacy
• Archive Security
• Compliance
• Roles -Responsibilities
Key Audit issues
• Permissions
• Have air traffic control permissions been sought and approved?
• FAA, ATNS (Air Traffic and Navigation Services ) etc
• Training
• Have operators received adequate training?
• In actual use of drone
• In legal and regulatory issues
• In current airspace restrictions
Key Audit issues
• Licensing
• Do operators require commercial licensing?
• Are they properly certified and licensed?
• Is there a defined job description?
• Requirements, capabilities, experience
• Maintenance
• Is there a schedule? Are inspections of the drone(s) carried out?
• Are they tested?
Key Audit issues
• Insurance
• Is adequate drone insurance in place?
• Liability – Physical Damage
• Data Policy
• Data collection and archiving policy?
• How much is kept for how long
• Data security
• Privacy Act? Other laws?
• Access rights?
Key Audit issues
• Who controls the drones?
• IT?
• Business departments?
• Operations?
• Acquisition
• Do purchases register with Finance?
• Covered in asset management program?
Key Audit issues
• Risk Assessment
• Has an assessment been done?
• Were all risks identified and dealt with appropriately?
• Procedures
• Are there documented flight procedures?
• Maintenance procedures
• Are there incident procedures should privacy or laws be accidently broken?
Key Audit issues
• Knowledge – understanding what you can and cannot do
https://www.faa.gov/uas/where_to_fly/b4ufly/
Key Audit issues
• Drone Electronic Logs
• GPS locations
• Altitude
• Flight Mode
• Speed
• Distance from home
• GPS Count
• Overall battery voltage
• Individual battery cell voltages
• Orientation
• RC inputs
Tools:Healthy Drones - NVDash
Maintained? Reviewed?
Key Audit issues
• Audit Logs
• Flight logs
• Maintained? Signed? Accurate?
• Maintenance logs?
• Regular schedule?
• Incident logs?
• Errors and accidents all logged?
• Reports
• Management reports provided?
Automated tool or manual?
Future Impact of Drones
• Societal
• Noise levels and distractions will increase
• Cybersecurity
• Massive increase in crimes using drones
• Scoping out locations
• Tracking people
• Eye in the sky lookouts
Future Impact of Drones
• Careers
• New jobs in drone technology
• Research & development
• Maintenance
• Certified drone operators
• Policing
• New tools to combat crime
• Added infrared, xray etc scanning. Scoping large areas. Photographing riots
• Enter hazardous areas
• Accidents, spills, treacherous ground (cliffs, mountains etc)
Future Impact of Drones
• War of the Drones
• DroneDefender – uses targeted radio waves
• Shoot ‘em down?
Future Impact of Drones
• Expanding surveillance and connectivity?
Resources
• Drone Policy
• http://sfcoit.org/sites/default/files/COIT%20Meetings/CCSF_DronePolicy_DRAFT_5-
5-2017_FinalDraft_v2.pdf
• http://www.theiacp.org/portals/0/pdfs/IACP_UAGuidelines.pdf
• Privacy and Security
• http://resources.infosecinstitute.com/privacy-security-issues-usage-civil-drones/
• Key issues
• http://www.gao.gov/key_issues/unmanned_aerial_systems/issue_summary
Resources
• Drone laws
• http://blogs.marketwatch.com/capitolreport/2014/06/25/are-drones-illegal-in-your-
state-this-map-can-tell-you/
• http://dronelawjournal.com/
• https://www.tc.gc.ca/eng/civilaviation/drone-safety.html
• https://www.caa.co.uk/Commercial-Industry/Aircraft/Unmanned-
aircraft/Unmanned-Aircraft/
• http://ewn.co.za/2015/05/17/New-regulations-to-affect-drone-industry
• http://www.caa.co.za/Pages/default.aspx
With Thanks
• Dr. Al Marcella
• Business Automation Consultants
• Rise of the Drones - Is Your Enterprise Prepared?
• White paper and checklist
• By linking here the participant will receive the whitepaper as well as the Checklist in its
“fillable form” format
• https://audit4security.com/rise-of-the-drones-is-your-enterprise-prepared/
