无人机游戏-从加密的FPV通道检测流式传输的POI
Game of Drones - Detecting Streamed POI from Encrypted FPV Channel
摘要:
无人机对人们的隐私造成了新的威胁。我们现在处于这样一个时代,任何人都可以使用配备有摄像机的无人机,通过加密的第一人称视角(FPV)频道在他/她的私人空间中流式传输主题,从而侵犯主题的隐私。虽然已经提出了许多方法来检测附近的无人机,但它们都有相同的缺点:他们无法准确识别捕获的是什么,因此他们无法区分无人机的合法使用(例如,使用无人机从空中拍摄自拍)以及侵犯他人隐私的非法使用(当同一操作员使用无人机将视图流式传输到他邻居公寓的窗户中时),在某些情况下,这种区别取决于无人机的摄像机的方向而不是无人机的位置。在本文中,我们打破了普遍持有的信念,即使用加密来保护FPV通道,防止拦截器提取正在流传输的POI。我们展示了利用物理刺激来检测无人机的相机是否实时的指向目标的方法。我们研究改变像素对FPV通道的影响(在实验室设置中)。基于我们的观察,我们演示了拦截器如何执行侧信道攻击,以通过分析从真实无人机(DJI Mavic)传输的加密FPV信道来检测目标是否正在流式传输,这是在两种用例中:当目标是私人房屋时和当目标是主体时。
英文摘要:
Drones have created a new threat to people's privacy. We are now in an era in which anyone with a drone equipped with a video camera can use it to invade a subject's privacy by streaming the subject in his/her private space over an encrypted first person view (FPV) channel. Although many methods have been suggested to detect nearby drones, they all suffer from the same shortcoming: they cannot identify exactly what is being captured, and therefore they fail to distinguish between the legitimate use of a drone (for example, to use a drone to film a selfie from the air) and illegitimate use that invades someone's privacy (when the same operator uses the drone to stream the view into the window of his neighbor's apartment), a distinction that in some cases depends on the orientation of the drone's video camera rather than on the drone's location. In this paper we shatter the commonly held belief that the use of encryption to secure an FPV channel prevents an interceptor from extracting the POI that is being streamed. We show methods that leverage physical stimuli to detect whether the drone's camera is directed towards a target in real time. We investigate the influence of changing pixels on the FPV channel (in a lab setup). Based on our observations we demonstrate how an interceptor can perform a side-channel attack to detect whether a target is being streamed by analyzing the encrypted FPV channel that is transmitted from a real drone (DJI Mavic) in two use cases: when the target is a private house and when the target is a subject.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。