 |
Next, we will touch on the last item for our research contribution which is on FTP service of the drone.
Users of the drone can extract out and send files via the FTP service. However, whenever files are being extracted out, the file will be encrypted. Likewise this is also the case when files are extracted using the DJI Assistant.
The tools that were used to do static binary analysis are IDA Pro and Ghidra and for dynamic analysis, we executed the application on a Raspberry Pi board. One of the things to monitor during dynamic analysis is DUML packets.
DUML stands for DJI Universal Markup Language. However, the name DUML is a misnomer as DUML is a binary protocol rather than a Markup Language. DJI drones communicate via DUML at the low level with various other devices such as the remote control
|
IEEE/ICACT20210119 Slide.19
[Big Slide]