 |
A digital forensic examination on a drone is normally done on the aircraft (sometime commonly known as drone) shown on the slide annotated as number 1. The drone also has external and internal SD card as storage. Next, number 2 is the remote control device and the application on the mobile phone (number 3) as well as the computer (number 4) for any data related to an incident. Not to forget on the radio communication channels between drone, remote controller and mobile device (number 2 5 and 6).
To add-on, the related data can be obtained from the File Transfer Protocol (FTP) channel through the USB port of the aircraft (number 1) and the data stored on the mobile phone (number 3) by the DJI flight application. These data are normally extracted through rooting the aircraft or exploiting the vulnerability of the FTP service in the older firmware.
There are numbers of research and published papers on forensic areas on any touch point along the drone eco system, these related papers will be discussed in the following slides presentation.
|
IEEE/ICACT20210119 Slide.03
[Big Slide]