Penetration Test Drone pada Simulator dan Analisis Artefak Pasca Simulasi Serangan

Saputra, Mikhael Abie (2026) Penetration Test Drone pada Simulator dan Analisis Artefak Pasca Simulasi Serangan. Other thesis, Institut Teknologi Sepuluh Nopember.

Text 5025221113-Undergraduate_Thesis.pdf - Accepted Version Restricted to Repository staff only Download (8MB) | Request a copy

Abstract

Penggunaan teknologi drone yang semakin meluas turut meningkatkan risiko keamanan siber, khususnya pada protokol komunikasi MAVLink yang tidak memiliki mekanisme enkripsi dan autentikasi bawaan. Lingkungan simulasi berbasis Docker Container seperti Damn Vulnerable Drone (DVD) menghadirkan tantangan tersendiri dalam proses forensik digital, karena karakteristik volatil pada container menyebabkan artefak digital berpotensi hilang ketika container dihentikan. Penelitian ini bertujuan untuk mengidentifikasi karakteristik artefak digital, mengevaluasi proses akuisisi pada lingkungan Docker, serta menganalisis kemampuan rekonstruksi kronologi serangan pada simulator drone. Penelitian dilaksanakan menggunakan framework NIST SP 800-115 untuk simulasi serangan dan NIST SP 800-86 untuk investigasi forensik, dengan tiga skenario serangan aktif yang dieksekusi pada lingkungan DVD Lite Mode: Battery Spoofing, GPS Spoofing, dan Force Disarm. Hasil penelitian menunjukkan bahwa artefak flight log sisi Ground Control Station (GCS) merupakan sumber forensik paling kaya informasi, dengan anomali pada field timestamp internal MAVLink terbukti sebagai indikator deteksi paling reliabel untuk membedakan paket injeksi dari paket asli. Artefak dataflash flight controller berfungsi sebagai ground truth yang membuktikan bahwa Battery Spoofing dan GPS Spoofing hanya berdampak pada lapisan GCS, sementara Force Disarm berhasil mempengaruhi state internal flight controller secara langsung. Rekonstruksi kronologi ketiga skenario serangan berhasil dilakukan dengan tingkat kepastian yang bervariasi, bergantung pada jumlah sumber artefak independen yang saling menguatkan.
=====================================================================================================================================
The increasingly widespread use of drone technology has elevated cybersecurity risks, particularly concerning the MAVLink communication protocol, which lacks built-in encryption and authentication mechanisms. Docker container-based simulation environments such as Damn Vulnerable Drone (DVD) present distinct challenges for digital forensics, as the volatile nature of containers may cause digital artifacts to be lost once a container is stopped. This research aims to identify the characteristics of digital artifacts, evaluate the acquisition process within a Docker environment, and analyze the chronological reconstruction capability of attacks on a drone simulator. The research was conducted using the NIST SP 800-115 framework for attack simulation and NIST SP 800-86 for forensic investigation, with three active attack scenarios executed on a DVD Lite Mode environment: Battery Spoofing, GPS Spoofing, and Force Disarm. The results show that Ground Control Station (GCS)-side flight log artifacts are the richest source of forensic information, with anomalies in MAVLink's internal timestamp fields proving to be the most reliable detection indicator for distinguishing injected packets from genuine ones. Flight controller dataflash artifacts served as ground truth, confirming that Battery Spoofing and GPS Spoofing affected only the GCS layer, while Force Disarm successfully impacted the flight controller's internal state directly. Chronological reconstruction of all three attack scenarios was successfully achieved with varying degrees of certainty, depending on the number of independent artifact sources.

Item Type:	Thesis (Other)
Uncontrolled Keywords:	Forensik Digital, Docker, MAVLink, Simulasi Drone, Damn Vulnerable Drone, Digital Forensics, Docker, MAVLink, Drone Simulation, Damn Vulnerable Drone.
Subjects:	Q Science > QA Mathematics > QA76.9.A25 Computer security. Digital forensic. Data encryption (Computer science) T Technology > T Technology (General) > T57.62 Simulation U Military Science > U Military Science (General) > UG Military Engineering > UG1242.D7 Unmanned aerial vehicles. Drone aircraft
Divisions:	Faculty of Intelligent Electrical and Informatics Technology (ELECTICS) > Informatics Engineering > 55201-(S1) Undergraduate Thesis
Depositing User:	Mikhael Abie Saputra
Date Deposited:	24 Jul 2026 01:31
Last Modified:	24 Jul 2026 01:31
URI:	http://repository.its.ac.id/id/eprint/136646

Actions (login required)

View Item