UAV threat model as a component of the intelligent transportation systems threat model

Aim. Unmanned aerial vehicles (UAVs) are increasingly integrated into intelligent transportation systems (ITS), becoming one of the critical elements of the transportation infrastructure. At the same time, the dependence of UAVs on software, wireless communication channels, and external navigation systems makes them vulnerable to cybersecurity threats. The purpose of the paper is to conduct a comprehensive analysis of cybersecurity threats to UAVs in the context of their operation as part of ITS and to develop a threat model covering hardware, software, communication, and infrastructure components. Methods. The paper uses methods of system analysis, cybersecurity threat modelling, as well as architecture analysis of UAV software and hardware systems involving the identification of key targets. The paper uses methods based on the classification of threats according to the standards of the FSTEC of the Russian Federation, as well as methods for analysing the relationships between threats, vulnerabilities, and means of protection. Results. A threat model of UAVs as an element of ITS has been developed, covering hardware components, software, communication channels, information flows, and ground infrastructure. The most critical threats have been identified, including disruption, data compromise, and physical impact. An analysis of existing information security solutions has been carried out and it has been shown that there is no systematic approach to ensuring security. Based on the analysis, the authors substantiate the application of the security by design (SBD) methodology according to GOST R 72118-2025. Conclusion. The proposed SBD-based approach allows designing UAVs with inherent resistance to a wide range of cybersecurity threats, including cyber-physical attacks and data integrity violations, which is especially important given the requirements of UAV integration into ITS, where the failure or compromise of an element can lead to system failures. Experimental testing of the approach as part of educational projects confirms the applicability and effectiveness of the SBD methodology.

1. Rozenberg I.N., editor. [Methods and algorithms for creating intelligent geographic information systems for transportation process management]. Moscow: VINITI RAS; 2019. (in Russ.)

2. Shubinsky I.B., Rozenberg E.N, Bochkov A.V. [Dependability, risks, safety of control systems in railway transportation: a monograph]. Vologda: Infra–Engineering; 2024. (in Russ.)

3. Baranov L.A., Ivanova N.D., Mihalevich I.F. Modelling and Assessment of Security Risks of Intelligent Water Transport Systems. Transport automation research 2025;1:7-15. (in Russ.) DOI: 10.20295/2412-9186-2025-11-01-7-15 EDN FBRTKV. Available at: https://www.elibrary.ru/item.asp?id=80472960.

4. Domashkin A.D., Loginova L.N., Kovrov A.I. et al. [Use of unmanned aerial vehicles: experience, prospects, problems]. In: [Intelligent transportation systems: Proceedings of the IV International science and practice conference]. Moscow; May 22, 2025. Moscow: Russian University of Transport (MIIT); 2025. Pp. 517-525. (in Russ.) DOI 10.30932/9785002587582-2025-517-525 EDN HIIYVX.

5. Baranov L.A., Safronov A.I., Sidorenko V.G. Development of Intelligent Control Systems for Electric Transport. Automation, communications, informatics 2025;10:30-32. (in Russ.)

6. Zaikova S.N., Vinogradsky D.D. Unmanned vehicles (airships) as a threat to transportation security. (accessed: 23.03.2025). SSLA Bulletin 2024;1(56). Available at: https://cyberleninka.ru/article/n/bespilotnye-transportnyesredstva-apparaty-kak-ugroza-transportnoy-bezopasnosti. (in Russ.)

7. Aralbaev T.Z., Galimov R.R., Getman M.A. et al. Hierarchical risk analysis of unmanned aerial vehicle threat models. Izvestiya of Saratov University. Mathematics. Mechanics. Informatics 2023;23(2):241-252. (accessed: 16.07.2025). Available at: https://cyberleninka.ru/article/n/ierarhicheskiy-analiz-riskov-modeley-ugroz-bespilotnyhletatelnyh-apparatov. (in Russ.)

8. Vinokurov A.V. Vulnerability analysis complexes with unmanned aerial vehicles and classification of security threats circulating information in them. I-methods 2016;1. (accessed: 11.10.2025). Available at: https://cyberleninka.ru/article/n/analiz-uyazvimostey-kompleksov-s-bespilotnymiletatelnymi-apparatami-i-klassifikatsiya-ugroz-bezopasnosti-tsirkuliruyuschey-v-nih. (in Russ.)

9. GOST R 72118-2025. Information protection. Systems secure by design. Development methodology. Moscow: Russian Standardization Institute; 2025. (in Russ.)

10. Loginova L.N., Bobkov R.A., Kostenko S.A. et al. [Improving Hard Skills through CTF competitions]. In: [Intelligent transportation systems: Proceedings of the II International science and practice conference]. Moscow; May 25, 2023. Moscow: Russian University of Transport (MIIT); 2023. Pp. 789-793. (in Russ.) DOI 10.30932/9785002182794-2023-789-793 EDN DTKGRL.

11. How was Kaspersky Lab’s drone design hackathon. (accessed: 11.08.2025). Available at: https://codenrock.com/blog/kak-proshel-hakaton-laboratorii-kasperskogo-poproektirovaniyu-dronov/. (in Russ.)

12. Loginova L.N., Galyba L.D., Stepanov D.E. [Team spirit and innovation: participation in the hackathon on cyberimmune autonomy]. In: [Intelligent transportation systems: Proceedings of the IV International science and practice conference]. Moscow; May 22, 2025. Moscow: Russian University of Transport; 2025. Pp. 878-886. (in Russ.)

13. Loginova L.N., Domashkin A.D. [Applying cyberimmunity principles to ensure security in transportation systems]. In: [Intelligent transportation systems: Proceedings of the III International science and practice conference]. Moscow; May 30, 2024. Moscow: Russian University of Transport (MIIT); 2024. Pp. 645-649. DOI 10.30932/9785002446094-2024-645-649 EDN HCNJYS. (in Russ.)