Regulating Drones in Restricted Spaces

Vijeev, Abhishek; Ganapathy, Vinod; Bhattacharyya, Chiranjib

doi:10.1145/3301293.3302370

Cited by 8 publications

(6 citation statements)

References 18 publications

(16 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Localities in a city may likewise identify drone lanes that border public spaces at a comfortable distance away from private homes. These policies have been discussed in prior work [48,83], but are by no means a comprehensive listing of policies that Privaros can enforce. Hosts may choose different combinations of these or other policies to enforce in their airspaces.…”

Section: Drone Fleet Operatormentioning

confidence: 99%

Privaros: A Framework for Privacy-Compliant Delivery Drones

Beck

Vijeev

Ganapathy

2020

Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security

Self Cite

View full text Add to dashboard Cite

We present Privaros, a framework to enforce privacy policies on drones. Privaros is designed for commercial delivery drones, such as the ones that will likely be used by Amazon Prime Air. Such drones visit various host airspaces, each of which may have different privacy requirements. Privaros uses mandatory access control to enforce the policies of these hosts on guest delivery drones. Privaros is tailored for ROS, a middleware popular in many drone platforms. This paper presents the design and implementation of Privaros's policy-enforcement mechanisms, describes how policies are specified, and shows that policy specification can be integrated with India's Digital Sky portal. Our evaluation shows that a drone running Privaros can robustly enforce various privacy policies specified by hosts, and that its core mechanisms only marginally increase communication latency and power consumption. CCS CONCEPTS• Security and privacy → Mobile platform security.

show abstract

Section: Drone Fleet Operatormentioning

confidence: 99%

Privaros: A Framework for Privacy-Compliant Delivery Drones

Beck

Vijeev

Ganapathy

2020

Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security

Self Cite

View full text Add to dashboard Cite

show abstract

“…Few attempts exist to provide secure extensions for MQTT [50], but none of them rely on TEEs. Despite, TEEs (and in particular TRUSTZONE) are used in several different domains, from cardiac signal processing over untrusted clouds [48] to control-based TRUSTZONE policy framework for air drones [57]. For the sake of conciseness, we shortly review secure messaging libraries on top of TEEs, as well as presenting a short survey of different usages of TEEs.…”

Section: Related Workmentioning

confidence: 99%

MQT-TZ: Hardening IoT Brokers Using ARM TrustZone

Segarra,

Delgado-Gonzalo,

Schiavoni

2020

Preprint

View full text Add to dashboard Cite

The publish-subscribe paradigm is an efficient communication scheme with strong decoupling between the nodes, that is especially fit for large-scale deployments. It adapts natively to very dynamic settings and it is used in a diversity of real-world scenarios, including finance, smart cities, medical environments, or IoT sensors. Several of the mentioned application scenarios require increasingly stringent security guarantees due to the sensitive nature of the exchanged messages as well as the privacy demands of the clients/stakeholders/receivers. MQTT is a lightweight topic-based publish-subscribe protocol popular in edge and IoT settings, a de-facto standard widely adopted nowadays by the industry and researchers. However, MQTT brokers must process data in clear, hence exposing a large attack surface. This paper presents MQT-TZ, a secure MQTT broker leveraging ARM TRUSTZONE, a trusted execution environment (TEE) commonly found even on inexpensive devices largely available on the market (such as Raspberry Pi units). We define a mutual TLS-based handshake and a two-layer encryption for end-to-end security using the TEE as a trusted proxy. The experimental evaluation of our fully implemented prototype with micro-, macro-benchmarks, as well as with real-world industrial workloads from a MedTech use-case, highlights several tradeoffs using TRUSTZONE TEE. We report several lessons learned while building and evaluating our system. We release MQT-TZ as open-source.

show abstract

“…These policies have been discussed in prior work [64,36], but are by no means a comprehensive listing of policies that Privaros can enforce. AliDrone [36] enforces UseDroneLanes by providing proof-of-alibi; it securely logs GPS coordinates using trusted hardware for later verification.…”

Section: Background and Threat Modelmentioning

confidence: 99%

“…AliDrone [36] enforces UseDroneLanes by providing proof-of-alibi; it securely logs GPS coordinates using trusted hardware for later verification. Vijeev et al's [64] vision paper outlines information flow control to enforce all three policies. This paper is an in-depth exploration of Vijeev et al's approach, and presents the challenges in the design and implementation of Privaros atop ROS.…”

Section: Background and Threat Modelmentioning

confidence: 99%

“…To our knowledge, there has not been much prior work focusing on enforcing privacy policies in drones. Vijeev et al [64] proposed the vision of restricted airpsaces for drones, in which hostspecified policies would be enforced on guest drones. Although this paper is motivated by Vijeev et al's work, this paper makes significant contributions over it.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Privaros: A Framework for Privacy-Compliant Delivery Drones

Beck,

Vijeev,

Ganapathy

2020

Preprint

Self Cite

View full text Add to dashboard Cite

We present Privaros, a framework to enforce privacy policies on drones. Privaros is designed for commercial delivery drones, such as the ones that will likely be used by Amazon Prime Air. Such drones visit a number of host airspaces, each of which may have different privacy requirements. Privaros provides an information flow control framework to enforce the policies of these hosts on the guest delivery drones. The mechanisms in Privaros are built on top of ROS, a middleware popular in many drone platforms. This paper presents the design and implementation of these mechanisms, describes how policies are specified, and shows that Privaros's policy specification can be integrated with India's Digital Sky portal. Our evaluation shows that a drone running Privaros can robustly enforce various privacy policies specified by hosts, and that its core mechanisms only marginally increase communication latency and power consumption.

show abstract

Regulating Drones in Restricted Spaces

Cited by 8 publications

References 18 publications

Privaros: A Framework for Privacy-Compliant Delivery Drones

Privaros: A Framework for Privacy-Compliant Delivery Drones

MQT-TZ: Hardening IoT Brokers Using ARM TrustZone

Privaros: A Framework for Privacy-Compliant Delivery Drones

Contact Info

Product

Resources

About