Forensic Analysis of sUAS aka Drones - SANS DFIR Summit 2015

Подробнее о видео

David Kovar, @dckovar, Senior Manager, Ernst & Young’s Advisory Center of Excellence

Small Unmanned Aerial Systems (sUAS) aka “drones” are all the rage – they are invading your privacy, they are delivering your packages (and illegal drugs), they are even landing on the White House lawn. Where have they been? Where are they going? Who launched them? Let’s find out.

sUAS – emphasis on the final ‘S’ – are complex systems. The aerial platform alone often consists of a radio link, an autopilot, a photography sub-system, a GPS, and multiple other sensors. Each one of these components might contain a wealth of pieces to the answer to the above questions.

Add in the ground control stations, the radio controller, and the video downlink system and you have a very complex computing environment running a variety of commercial, closed source, open source, and home brew software. And yes, there is already malware specifically targeting drones.

During this presentation, we will walk through all of the components of a representative drone and discuss the forensic process and potential artifacts of each component, along with a presentation of the overall story told by the individual components.

David Kovar, @dckovar, Senior Manager, Ernst & Young
David Kovar is a senior manager in EY’s Cybersecurity practice. He’s also been an entrepreneur, ediscovery consultant, software engineer, SAR incident commander, executive protection agent, and lethal forensicator. He has collected images in China, rescued wayward Americans in Australia, and conducted disaster preparedness assessments in Tajikistan. Oh, and he flies sailplanes, fixed wings, helicopters, and drones.