Researchers: Aerial drones vulnerable to hacking

AUSTIN, Texas — After a dress rehearsal at Royal-Memorial Stadium, University of Texas researchers traveled to New Mexico last month and demonstrated for U.S. Department of Homeland Security officials how an unmanned aerial vehicle, or drone, can be commandeered by hacking into its navigation system.

The technique, known as spoofing, created false Global Positioning System signals that tricked the drone’s GPS receiver into steering a new course.

The GPS, which uses satellites and radio signals, is not encrypted for civilian uses, and that raises concern about the federal government’s plan to permit thousands of drones in U.S. air space for commercial, law enforcement and university purposes, said Todd Humphreys, an assistant professor at the university’s Cockrell School of Engineering.

“The dirty fact is it’s an open signal, and easily hacked,” Humphreys said.

Well, maybe not easy for just anyone to hack. Although Humphreys and his students built their spoofing device for about $1,000 in off-the-shelf hardware, it took three Ph.D. students four years to write the software.

The hacking June 19 at White Sands Missile Range in New Mexico is “the first known unequivocal demonstration” that commandeering a drone via GPS spoofing is technically feasible, the engineering school said on its website. The test was performed using a civilian drone owned by the university.

Humphreys and his students knew they had nailed the technique five days earlier, during a trial run at the football stadium. Humphreys had originally planned the test for a field at the University of Texas’ Pickle Research Campus in North Austin. But looking out his office windows at the stadium, he figured “maybe there’s a chance.” Officials in the athletic department and in university President Bill Powers’ office signed off. The football team’s strength training practice was moved to accommodate the test.

Humphreys, who said he had regarded the stadium as “ugly and a gargantuan waste of money,” said athletic officials were “wonderful. They even brought out Gatorade and a tent for us.” The dress rehearsal went well. The drone, which looks a bit like a miniature helicopter that would fit on a kitchen table, hovered above the field until students sent counterfeit GPS signals that tricked it into “thinking” it was rising. That caused the drone to drop sharply. At White Sands, the team took control of the hovering drone from a little more than half a mile away.

Humphreys said the Global Positioning System needs to be fortified with “electronic watermarks” that would make its signals much harder to falsify. That would cost millions of dollars, he said. Military GPS signals are encrypted and effectively unspoofable, he said.

The Department of Homeland Security, which invited the university to conduct the test at White Sands, referred a request for comment to its Customs and Border Protection unit. Spokesman Michael Friel said that sort of hacking would not affect the security of its drones.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Trader Joe’s customers walk in and out of the store on Monday, Nov. 20, 2023 in Everett, Washington. (Olivia Vanni / The Herald)
New Trader Joe’s opens this week at Everett Mall

It’s a short move from a longtime location, essentially across the street, where parking was often an adventure.

Ian Bramel-Allen enters a guilty plea to second-degree murder during a plea and sentencing hearing on Wednesday, March 6, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
‘Deep remorse’: Man gets 17 years for friend’s fatal stabbing in Edmonds

Ian Bramel-Allen, 44, pleaded guilty Wednesday to second-degree murder for killing Bret Northcutt last year at a WinCo.

Firefighters respond to a small RV and a motorhome fire on Tuesday afternoon in Marysville. (Provided by Snohomish County Fire Distrct 22)
1 injured after RV fire, explosion near Marysville

The cause of the fire in the 11600 block of 81st Avenue NE had not been determined, fire officials said.

Ashton Dedmon appears in court during his sentencing hearing on Tuesday, March 5, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
Everett Navy sailor sentenced to 90 days for fatal hit and run

Ashton Dedmon crashed into Joshua Kollman and drove away. Dedmon, a petty officer on the USS Kidd, reported he had a panic attack.

A kindergarten student works on a computer at Emerson Elementary School on Wednesday, Feb. 28, 2024, in Everett, Washington. (Ryan Berry / The Herald)
‘¡Una erupción!’: Dual language programs expanding to 10 local schools

A new bill aims to support 10 new programs each year statewide. In Snohomish County, most follow a 90-10 model of Spanish and English.

Cassie Franklin, Mayor of Everett, delivers the annual state of the city address Thursday morning in the Edward D. Hansen Conference Center in Everett, Washington on March 31, 2022.  (Kevin Clark / The Herald)
At Everett mayor’s keynote speech: $35 entry, Boeing sponsorship

The city won’t make any money from the event, city spokesperson Simone Tarver said. Still, it’s part of a trend making open government advocates wary.

Logo for news use featuring the Tulalip Indian Reservation in Snohomish County, Washington. 220118
Woman drives off cliff, dies on Tulalip Reservation

The woman fell 70 to 80 feet after driving off Priest Point Drive NW on Sunday afternoon.

Everett
Boy, 4, survives fall from Everett fourth-story apartment window

The child was being treated at Seattle Children’s. The city has a limited supply of window stops for low-income residents.

People head out to the water at low tide during an unseasonably warm day on Saturday, March 16, 2024, at Lighthouse Park in Mukilteo, Washington. (Ryan Berry / The Herald)
Everett shatters record high temperature by 11 degrees

On Saturday, it hit 73 degrees, breaking the previous record of 62 set in 2007.

Snohomish County Fire District #4 and Snohomish Regional Fire & Rescue respond to a motor vehicle collision for a car and pole. The driver was pronounced dead at the scene, near Triangle Bait & Tackle in Snohomish. (Snohomish County Sheriff’s Office)
Police: Troopers tried to stop driver before deadly crash in Snohomish

The man, 31, was driving at “a high rate of speed” when he crashed into a traffic light pole and died, investigators said.

Alan Dean, who is accused of the 1993 strangulation murder of 15-year-old Bothell girl Melissa Lee, appears in court during opening statements of his trial on Monday, March 18, 2024, at Snohomish County Superior Court in Everett, Washington. (Ryan Berry / The Herald)
31 years later, trial opens in Bothell teen’s brutal killing

In April 1993, Melissa Lee’s body was found below Edgewater Creek Bridge. It would take 27 years to arrest Alan Dean in her death.

Logo for news use featuring the municipality of Snohomish in Snohomish County, Washington. 220118
Man dies after crashing into pole in Snohomish

Just before 1 a.m., the driver crashed into a traffic light pole at the intersection of 2nd Street and Maple Avenue.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.