How increasing drone use is ushering in a new threat vector for data centers

Drones are becoming big business. The use of unmanned aerial vehicles (UAVs) is predicted to see huge increases as their legitimate function within enterprise environments such as agriculture, construction, media, and law enforcement deliver significant operational benefits. But the expected growth of drones, given by one source to be as much as 67% CAGR over the next few years, will not be without its security drawbacks.

As drone use grows, so too does the potential to cause massive disruption when their application is put to more nefarious purposes. In 2018 the UK’s Gatwick Airport was closed for 33 hours, resulting in the cancellation of 1,000 flights and affecting more than 140,000 passengers over the busy Christmas period. Despite a lengthy police investigation, the definite presence of a drone or multiple drones at the site could not be verified, despite multiple eyewitness accounts.

The helplessness of police and security personnel highlighted a very real problem. Traditional perimeter protection methods comprising physical barriers as well as advanced technologies were effectively bypassed by a drone, available for as little as £200, and costing the aviation industry millions. The security and incident response team’s less than effective outcome was mainly due to a lack of ability to detect and verify the presence of aerial devices in good time.

When one thinks of the possible payloads that drones are capable of carrying, ranging from a camera to conduct hostile reconnaissance, to equipment designed for hijacking a wi-fi signal to disrupt software and systems, or even a biological weapon, the issue is brought into very sharp focus.

Detect, identify and locate

As data centers increasingly provide the infrastructure that underpins daily digital lives, monitoring operations and guaranteeing high levels of security is a critical capability. Personnel are under growing pressure to guard against threats both physical and cyber in nature. Any disruption to operations could prove catastrophic, with periods of downtime having significant cost implications and causing massive disruption to the people and businesses that now rely so heavily on a seamless transfer of data.

And while the data centre has become infinitely more secure in recent years, being wise to new threats is the key to being one step ahead. Modern network-enabled systems bring considerable advances to perimeter protection capabilities on the ground incorporating video surveillance cameras, thermal cameras and radar to track intruders’ movements; and inside, cameras and sensors placed inside server rooms detect and deter criminal activity. But the new threat may now come from the skies above.

The use of dedicated software to complement network-enabled physical security solutions now allows drones to be detected based on the radio frequency (RF) signals that they omit. This can be used to identify the make and model of more than 200 drones, including commercial, hobbyist and DIY, even pinpointing the location of the operative. Far more powerful than relying on the eyes and ears of security personnel alone, this technology can provide data centre operatives with advanced warning of a drone approaching and early indications of its intent.

Drone analysis and threat mitigation

Once detected, it’s important to establish the reason for a drone’s presence. Data centers typically operate a no-fly zone, so security officers or police need to be able to very swiftly establish the difference between a careless drone pilot and a threat actor involved in malicious endeavour. By pinpointing a drone and detecting the signals given out by its operator’s equipment, security personnel can be dispatched to have a conversation with the pilot. In genuine cases of misunderstanding there may be a need for improved signage, the use of network audio speakers to issue pre-recorded audio messages or alerts, or other means of communicating that the location is out of bounds to aerial vehicles and devices, making it clear that drone operators will be challenged.

Of course, where an incident is verified, swift identification is imperative to aid early decision making. Drone detection software, capable of sending a signal to a PTZ (pan/tilt/zoom) camera can be used to lock-on to and track the movements of a drone, with crystal clear imagery used to ascertain the substance of its payload to distinguish friend from foe. This could include, for example, a biological weapon or even a device which might be used by hackers to attempt to infiltrate the data center’s systems to cause disruption or capture lucrative data.

Effective drone detection solutions

With the threat presented by drone activity increasing, it’s essential to deploy integrated solutionsv – such as those from Axis partner Dedrone – for smarter airspace security. Data gathering is key to their success: millions of drone images are being used to train camera-based AI/ML software to accurately identify drones that are friend or foe, even when heavily disguised. Moreover, remote identification protocols, known as RemoteID, are to become more commonplace among police, logistics or medical drones to provide information to verify a drone’s legitimacy, will also serve to enhance threat detection capabilities.

Drone use promises much when in the right hands, but as with many things, we should be wise to its pitfalls.

With such a solution in place, the skies around the data center can be monitored as successfully as the ground. Integration with existing video management systems (VMS) also means that a drone detection solution can be part of an overarching and integrated system to improve security posture and ensure a smarter, safer world for all.

Learn more about Axis’ solutions for data centres:

Data center solutions

 

 

A version of this post was recently published in Built Environment.