Over the past few years, drone usage has proliferated across the world, with many governments and organizations utilizing drones to increase their operational efficiency and reduce risk to human life. However, cheap and readily available drones have also been employed as weapons by terrorist groups and other threat actors. Indeed, despite the benefits of drones, the malign or negligent use of drones poses a significant threat to the public safety and national security, including to critical infrastructure. WaterISAC previously reported that a drone was employed in an attempted attack on an electrical substation in Pennsylvania, highlighting the threat to critical infrastructure. The drone threat “is a particularly complex advancement due to its cyber-physical nature. A drone is a physical device with cyber capabilities – and consequences,” according to Sarah Jacob, a program manager at the Cybersecurity and Infrastructure Security Agency (CISA).

CISA categorizes the drone threat landscape into three groups of threat actors: the careless recreational drone user, intentional operators and activists, and terrorists and paramilitary users. According to CISA’s analysis of drones, the careless recreational drone user represents the most prominent threat actors in the country, while terrorists and paramilitary users possess more advanced drones and intend to do harm. Additionally, drones can be used to conduct physical and cyber-attacks. Physical tactics include weaponization, disruption/harassment, and surveillance. Drones can also be used to infiltrate a network and launch a malicious cyber-attack.

Infrastructure operators and other security professionals should incorporate drone security into their preparedness planning. CISA recommends multiple legal security options for dealing with the drone threat, including knowing the airspace around your a facility and implementing a “No Drone Zone,” engaging in layered detection for drone overflights and intrusions, and engaging the general public about drone use and flight restrictions around your facility, among others. Read more at Homeland Security Today and access more information at CISA here.