Drones as Databases

This post is also available in: עברית (Hebrew)

The recent events at London’s Gatwick Airport is a real-life example of how even an amateur drone pilot can disrupt major infrastructure. Now that a drone has been captured, what’s next? Drone forensics is an emerging field that finds hidden clues inside these popular flying gadgets.

In recent years, drones have caused problems around the world by delivering contraband to prisons, crashing into crowds during a baseball game, carrying drugs over international borders, and disrupting aviation and passengers flow.
Drones are emerging as an important part of investigations. The US Department of Homeland Security contracted Colorado-based digital forensics and cybersecurity firm VTO Labs to study drone forensics. “Drones were starting to land in places where we didn’t want them to. They were landing at government facilities and military bases; they were coming across the border,” VTO Labs CEO, Steve Watson, told zdnet.com.
The problem for investigators is there are many types of drones, so data extraction is complicated. That’s why VTO Labs flew 30 different models of drones ranging in price from $100 to $35,000. Then the researchers took the drones apart to find out what kind of information was hidden inside. Within a drone, the onboard cameras and chips contain data. Plus, more information is available on the controller and remotely connected devices such as a PC or an app that the drone partners with for pilot controls. “When you show up at a crime scene, you usually don’t find all of the pieces lined up neatly for you,” Watson says. He adds, “We were able to get data off of all of the pieces of every model we touched.”
The information they compiled wasn’t only valuable for Homeland Security; the scientific community and other government agencies also started to take notice. The National Institute of Standards and Technology (NIST) compiled the drone images in Computer Forensic Reference Datasets that contain device specifications and sample digital evidence that investigators can download for free to learn what’s inside a drone.
Barbara Guttman, leader of the Digital Forensics program at NIST explained that drones are equipped with computers and cameras that contain data including personal details about pilots. She said, “They might have accidentally taken a picture of themselves or their house. A drone is just taking pictures, when it takes off it might include their license plate or all kinds of things. Never underestimate the ability of people to do dumb things.”
Guttman explains that investigators primarily want video from drones, but also GPS coordinates of all flight paths. For example, investigators could notice that a drone frequently takes off from the same location. Plus, drones might have user information such as username or credit card details that could link the drone to its owner. “These are reasonably useful targets for an investigation if the drone did something bad. They want to know who owned it and what it did,” Guttman says.