Poster: Policy-Guided Enforcement in Unmanned Aerial Vehicles

Unmanned Aerial Vehicles (UAVs) operating in civilian airspace are increasingly vulnerable to remote software attacks that can manipulate flight paths and violate restricted no fly zones. Existing geofencing mechanisms that assume trustworthiness of the onboard software, fail under attacks such as command injection, memory corruption, or compromise of the complete software stack, including the operating system. We propose a novel framework consisting of a multi layered attestation and policy enforcement mechanism for the UAV equipped with a trusted execution environment. Our framework establishes trust in the navigation system by ensuring that a given flight plan is strictly followed and protected against unauthorized modifications, thereby guaranteeing mission integrity, albeit with acceptable computational overhead.