India, like many nations, has witnessed a surge in the use of drones for both civilian and military applications
Global conflicts such as the Russia-Ukraine war, the Israeli-Hamas conflict, and Houthi-led offensives have increasingly underscored the pivotal role of electronic warfare, where drones are a critical asset. These battles reveal how adversaries exploit vulnerabilities in software and communication protocols to gain tactical advantages, exposing the risks associated with drone technology. This has sparked significant concerns about the security of drones in India, especially since many rely on Chinese-made components, raising fears of potential hijacking or operational compromise.
National Security Implications
India, like many nations, has witnessed a surge in the use of drones for both civilian and military applications. However, the dependence on Chinese-manufactured autopilots and software for assembling drones has emerged as a glaring vulnerability. In an interview with *FinancialExpress.com*, Sai Pattabiram, Founder and Managing Director of Zuppa Geo Navigations Pvt Ltd, highlighted the implications of this reliance.
“All recent conflicts, be it Russia-Ukraine, Israeli-Hamas, or the Houthis, have turned out to be electronic-centric wars, where the focus has been to gain a strategic advantage… by exploiting vulnerabilities in the software/code layers of the equipment’s Cyber Physical Stack (CPS),” he stated.
The use of off-the-shelf (COTS) components, particularly Chinese autopilots employing open-source frameworks, leaves drones susceptible to tampering. These vulnerabilities stem from the accessibility of their code, much of which is freely available on platforms like GitHub, providing hackers with the means to compromise these systems.
Vulnerability Of Cyber-Physical Systems
Drones, categorised as Cyber-Physical Systems (CPS), rely heavily on electronic computation to monitor and control physical devices. Their operations are driven by a continuous feedback loop of sensory inputs, making them reliant on seamless integration between hardware and software. While this architecture provides operational efficiency, it also creates avenues for external interference, particularly when sourced from unverified or untrusted suppliers.
“The primary reason for the hijacking of Indian-assembled drones that have been supplied for performing national security-critical roles has been because of the use of Chinese autopilots employing the open-source CPS as shown above,” Pattabiram elaborated. “Its survivability is very poor, as all its code elements are easily available and can be downloaded from GitHub by any hacker.”
Lessons From Global Conflicts
Recent conflicts demonstrate the increasing sophistication of electronic warfare. In the Russia-Ukraine war, drones have been integral to reconnaissance and offensive operations, often targeted by adversaries aiming to disrupt communication networks. Similarly, the Israeli-Hamas conflict has highlighted the use of drones to gain tactical advantages, while the Houthis have showcased how inexpensive drones can be used to challenge more technologically advanced adversaries.
These examples underline the importance of robust cyber defences, especially for drones deployed in national security-critical roles. The risks extend beyond battlefield scenarios, threatening civilian applications like disaster response and infrastructure monitoring.
Strengthening India’s Drone Security
India’s growing drone ecosystem demands urgent attention to address these vulnerabilities. Strengthening the domestic manufacturing of drone components, implementing stringent cyber hygiene practices, and collaborating with trusted global technology partners are pivotal steps. Moreover, fostering research and development within the country can lead to the creation of indigenous solutions that minimise dependence on foreign technologies.
The challenges posed by emerging electronic warfare tactics highlight the critical need for proactive measures. As Pattabiram aptly summarised, addressing the vulnerabilities in the Cyber-Physical Stack of drones is not just a technical imperative but a national security priority.
By building resilient systems and reducing reliance on foreign components, India can ensure its drone technology remains a strategic asset rather than a potential liability.