journal article·2026-01-04Open access

Manna SafeioD: A Framework and Roadmap for Secure Design in the Internet of Drones

Luiz H. C. M. Marques, Linnyer B. Ruiz

Applied Sciences· Volume 16· Issue 1

Abstract

With the increasing adoption of advanced drone technologies across diverse fields, the Internet of Drones (IoD) has emerged as a novel mobility paradigm, particularly enhancing Intelligent Transportation Systems (ITS) in urban environments. Despite its significant potential, the IoD faces substantial challenges due to inherent resource constraints such as limited computational power and energy capacity, which hinder the implementation of robust cybersecurity solutions. These limitations expose IoD networks to various security vulnerabilities and privacy threats, necessitating an exhaustive analysis and understanding of these risks. In this paper we introduce SafeIoD, a comprehensive security framework designed to establish standardized procedures for proactive risk identification in Internet of Drones (IoD) devices. It involves sequential steps to determine the trustworthiness of devices subjected to these certification. Therefore, SafeIoD seeks to ensure a basic security level before implementation in a real scenario, where the network devices are evaluated in regards to the specific security requirements. Validation through experimental testing with 15 participants across four IoD deployment scenarios and one military certification case demonstrated the framework’s effectiveness: the tool achieved 73% user satisfaction rating, successfully identified an average of 3.0 security requirements per device, and provided specific lightweight cryptographic algorithm recommendations for 62.2% of elicited requirements. In a tactical military scenario simulation, the framework accurately predicted risk propagation patterns, with COOJA network simulations confirming that implementation of framework-recommended protocols reduced successful attack propagation from 60% to below 5% of the network.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: UAV Applications and Optimization · IoT and Edge/Fog Computing · Vehicular Ad Hoc Networks (VANETs)

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Department of Informatics, Manna Team—State University of Maringá (UEM), Maringá 87020-900, Brazil

References (100+)

Show source-provided references
1. Internet of drones10.1109/ACCESS.2016.2537208 ↗
2. Ozmen, M.O., Behnia, R., and Yavuz, A.A. (2019). IoD-crypt: A lightweight cryptographic framework for Internet of drones. arXiv.
3. Batth, R.S., Nayyar, A., and Nagpal, A. (2018, January 30–31). Internet of robotic things: Driving intelligent robotics of future-concept, architecture, applications and technologies. Proceedings of the 2018 4th International Conference on Computing Sciences (ICCS), Jalandhar, India.10.1109/ICCS.2018.00033 ↗
4. Choudhary, G., Sharma, V., Gupta, T., Kim, J., and You, I. (2018). Internet of Drones (IoD): Threats, Vulnerability, and Security Perspectives. arXiv.
5. Security and Privacy for the Internet of Drones: Challenges and Solutions10.1109/MCOM.2017.1700390 ↗
6. Is 5G ready for drones: A look into contemporary and prospective wireless networks from a standardization perspective10.1109/MWC.2018.1800229 ↗
7. Bhunia, S., and Sengupta, S. (2017, January 26–29). Distributed adaptive beam nulling to mitigate jamming in 3D UAV mesh networks. Proceedings of the 2017 International Conference on Computing, Networking and Communications (ICNC), Santa Clara, CA, USA.10.1109/ICCNC.2017.7876113 ↗
8. Zhang, M., Chen, Y., Tao, X., and Darwazeh, I. (2019, January 8–10). Power allocation for proactive eavesdropping with spoofing relay in UAV systems. Proceedings of the 2019 26th International Conference on Telecommunications (ICT), Hanoi, Vietnam.10.1109/ICT.2019.8798768 ↗
9. Internet of Drones Security and Privacy Issues: Taxonomy and Open Challenges10.1109/ACCESS.2021.3072030 ↗
10. Risk management framework for information systems and organizations
11. (2018). Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy (Standard No. NIST SP 800-37 Rev. 2).
12. The Common Criteria for Information Technology Security Evaluation-Implications for China’s Policy on Information Security Standards
13. (2024). Internet of Things (IoT) and Digital Twin—Vocabulary (Standard No. ISO/IEC 20924:2024).
14. Mohamed, A.M.A., and Hamad, Y.A.M. (2020, January 9–10). IoT security: Review and future directions for protection models. Proceedings of the 2020 International Conference on Computing and Information Technology (ICCIT-1441), Tabuk, Saudi Arabia.
15. Fagan, M., Fagan, M., Megas, K.N., Scarfone, K., and Smith, M. (2020). IoT Device Cybersecurity Capability Core Baseline.10.6028/NIST.IR.8259a ↗
16. Cybersecurity, C.I. (2025, September 03). Framework for Improving Critical Infrastructure Cybersecurity, Available online: https://nvlpubs.nist.gov/nistpubs/cswp/nist.cswp.04162018.pdf.
17. The EU Cybersecurity Act and European standards: An introduction to the role of European standardization10.1365/s43439-020-00008-1 ↗
18. Certification Report
19. A survey of cyberattack countermeasures for unmanned aerial vehicles10.1109/ACCESS.2021.3124996 ↗
20. Survey on unmanned aerial vehicle networks: A cyber physical system perspective10.1109/COMST.2019.2962207 ↗
21. Di Pietro, R., Oligeri, G., and Tedeschi, P. (2019, January 10–12). JAM-ME: Exploiting jamming to accomplish drone mission. Proceedings of the 2019 IEEE Conference on Communications and Network Security (CNS), Washington, DC, USA.10.1109/CNS.2019.8802717 ↗
22. Evaluation of the vulnerabilities of unmanned aerial vehicles (uavs) to global positioning system (GPS) jamming and spoofing
23. Kang, J., and Joe, I. (2018, January 20–22). Security vulnerability analysis of Wi-Fi connection hijacking on the Linux-based robot operating system for drone systems. Proceedings of the International Conference on Parallel and Distributed Computing: Applications and Technologies, Jeju, Republic of Korea.10.1007/978-981-13-5907-1_49 ↗
24. Threat modeling of a multi-UAV system10.1016/j.tra.2020.11.004 ↗
25. Veerappan, C.S., Keong, P.L.K., Balachandran, V., and Fadilah, M.S.B.M. (2021, January 1–4). Drat: A penetration testing framework for drones. Proceedings of the 2021 IEEE 16th Conference on Industrial Electronics and Applications (ICIEA), Chengdu, China.10.1109/ICIEA51954.2021.9516363 ↗
26. The uav ground control station: Types, components, safety, redundancy, and future applications
27. A survey on the convergence of edge computing and AI for UAVs: Opportunities and challenges10.1109/JIOT.2022.3176400 ↗
28. A constructive direst security threat modeling for drone as a service
29. Khan, R., McLaughlin, K., Laverty, D., and Sezer, S. (2017, January 26–29). STRIDE-based threat modeling for cyber-physical systems. Proceedings of the 2017 IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe), Torino, Italy.10.1109/ISGTEurope.2017.8260283 ↗
30. Górniak, S., Atoui, R., Fernandez, J., Quemard, J.-P., and Schaffer, M. (2020). Standardisation in Support of the Cybersecurity Certification, European Union Agency for Cybersecurity (ENISA). Available online: https://www.enisa.europa.eu/publications/recommendations-for-european-standardisation-in-relation-to-csa-i.
31. Common criteria for usability review
32. ICSA (2016). Internet of Things (IoT) Security Testing Framework, ICSA.
33. Toward a cybersecurity certification framework for the Internet of Things10.1109/MSEC.2019.2904475 ↗
34. Dynamic Security and Privacy Seal Model Analysis
35. (2022). Information Security, Cybersecurity and Privacy Protection—Evaluation Criteria for IT security—Part 1: Introduction and General Model (Standard No. ISO/IEC 15408).
36. Kang, S., and Kim, S. (2017). How to obtain common criteria certification of smart TV for home IoT security and reliability. Symmetry, 9.10.3390/sym9100233 ↗
37. Kaluvuri, S.P., Bezzi, M., and Roudier, Y. (2014, January 2–3). A quantitative analysis of common criteria certification practice. Proceedings of the International Conference on Trust, Privacy and Security in Digital Business, Munich, Germany.10.1007/978-3-319-09770-1_12 ↗
38. Applying the common criteria in systems engineering10.1109/MSP.2006.35 ↗
39. Davri, E.C., Darra, E., Monogioudis, I., Grigoriadis, A., Iliou, C., Mengidis, N., Tsikrika, T., Vrochidis, S., Peratikou, A., and Gibson, H. (2021, January 26–28). Cyber Security Certification Programmes. Proceedings of the 2021 IEEE International Conference on Cyber Security and Resilience (CSR), Virtual.10.1109/CSR51186.2021.9527974 ↗
40. Flatt, H., Schriegel, S., Jasperneite, J., Trsek, H., and Adamczyk, H. (2016, January 6–9). Analysis of the Cyber-Security of industry 4.0 technologies based on RAMI 4.0 and identification of requirements. Proceedings of the 2016 IEEE 21st International Conference on Emerging Technologies and Factory Automation (ETFA), Berlin, Germany.10.1109/ETFA.2016.7733634 ↗
41. Denney, E., Pai, G., and Johnson, M. (2018, January 23–27). Towards a rigorous basis for specific operations risk assessment of UAS. Proceedings of the 2018 IEEE/AIAA 37th Digital Avionics Systems Conference (DASC), London, UK.10.1109/DASC.2018.8569475 ↗
42. UAV operations safety assessment: A systematic literature review10.1145/3723871 ↗
43. GCACS-IoD: A certificate based generic access control scheme for Internet of Drones10.1016/j.comnet.2021.107999 ↗
44. iGCACS-IoD: An Improved Certificate-Enabled Generic Access Control Scheme for Internet of Drones Deployment10.1109/ACCESS.2021.3089871 ↗
45. Regulation, C. (2016, January 22–31). 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Proceedings of the 6th International Multidisciplinary Scientific Conference on Social Sciences and Art Sgem, Albena, Bulgaria. OJ L119/1.
46. A survey of cybersecurity certification for the internet of things10.1145/3410160 ↗
47. Cellular Telecommunications Industry Association (2020). CTIA Cybersecurity Certification Test Plan for IoT Devices, Cellular Telecommunications Industry Association.
48. Privacy and security challenges in federated learning for uav systems: A systematic review10.1109/ACCESS.2025.3570538 ↗
49. VANet Security Challenges and Solutions: A Survey
50. A survey of cyber security threats and solutions for UAV communications and flying ad-hoc networks10.1016/j.adhoc.2022.102894 ↗
51. An extensive survey on the Internet of Drones10.1016/j.adhoc.2021.102600 ↗
52. Opportunities and challenges of drones and internet of drones in healthcare supply chains under disruption10.1080/09537287.2024.2437041 ↗
53. Survey on Collaborative Smart Drones and Internet of Things for Improving Smartness of Smart Cities10.1109/ACCESS.2019.2934998 ↗
54. Applications, deployments, and integration of internet of drones (iod): A review10.1109/JSEN.2021.3114266 ↗
55. Unmanned Aerial Vehicles (UAVs): A survey on Civil Applications and Key Research Challenges10.1109/ACCESS.2019.2909530 ↗
56. Jońca, J., Pawnuk, M., Bezyk, Y., Arsen, A., and Sówka, I. (2022). Drone-assisted monitoring of atmospheric pollution—A comprehensive review. Sustainability, 14.10.3390/su141811516 ↗
57. Nooralishahi, P., Ibarra-Castanedo, C., Deane, S., López, F., Pant, S., Genest, M., Avdelidis, N.P., and Maldague, X.P. (2021). Drone-based non-destructive inspection of industrial sites: A review and case studies. Drones, 5.10.3390/drones5040106 ↗
58. Khanpour, A., Wang, T., Vahidi-Shams, A., Ectors, W., Nakhaie, F., Taheri, A., and Claudel, C. (2025). UAV-Based Intelligent Traffic Surveillance System: Real-Time Vehicle Detection, Classification, Tracking, and Behavioral Analysis. arXiv.
59. Zheng, B., Zhou, J., Hong, Z., Tang, J., and Huang, X. (2025). Vehicle Recognition and Driving Information Detection with UAV Video Based on Improved YOLOv5-DeepSORT Algorithm. Sensors, 25.10.3390/s25092788 ↗
60. Fang, Z., and Savkin, A.V. (2024). Strategies for optimized uav surveillance in various tasks and scenarios: A review. Drones, 8.10.3390/drones8050193 ↗
61. Shastri, M., and Shrivastav, U. (2025). Optimizing Delivery Logistics: Enhancing Speed and Safety with Drone Technology. arXiv.
62. Chang, S.Y., Park, K., Kim, J., and Kim, J. (2023). Securing UAV flying base station for mobile networking: A review. Future Internet, 15.10.3390/fi15050176 ↗
63. Abdelmaboud, A. (2021). The Internet of Drones: Requirements, Taxonomy, Recent Advances, and Challenges of Research Trends. Sensors, 21.10.3390/s21175718 ↗
64. DJI Enterprise (2024). Saving the Planet, One Renewable Energy Drone Inspection at a Time, DJI Enterprise.
65. (2024). Drones in Energy Sector Market Trends, Size, Share and Forecast 2032, SkyQuest Technology.
66. Internet of drones security: Taxonomies, open issues, and future directions
67. Security threats and mitigation techniques in uav communications: A comprehensive survey10.1109/ACCESS.2022.3215975 ↗
68. Blockchain envisioned UAV networks: Challenges, solutions, and comparisons10.1016/j.comcom.2020.01.023 ↗
69. Security, privacy, and safety aspects of civilian drones: A survey10.1145/3001836 ↗
70. Dey, V., Pudi, V., Chattopadhyay, A., and Elovici, Y. (2018, January 6–10). Security vulnerabilities of unmanned aerial vehicles and countermeasures: An experimental study. Proceedings of the 2018 31st International Conference on VLSI Design and 2018 17th International Conference on Embedded Systems (VLSID), Pune, India.10.1109/VLSID.2018.97 ↗
71. Ramadan, R.A., Emara, A.H., Al-Sarem, M., and Elhamahmy, M. (2021). Internet of drones intrusion detection using deep learning. Electronics, 10.10.3390/electronics10212633 ↗
72. PiNcH: An effective, efficient, and robust solution to drone detection via network traffic analysis10.1016/j.comnet.2019.107044 ↗
73. Fernández-Hernández, I., Walter, T., Alexander, K., Clark, B., Châtre, E., Hegarty, C., Appel, M., and Meurer, M. (2019, January 28–31). Increasing international civil aviation resilience: A proposal for nomenclature, categorization and treatment of new interference threats. Proceedings of the 2019 International Technical Meeting of The Institute of Navigation, Reston, VA, USA.10.33012/2019.16699 ↗
74. Davidson, D., Wu, H., Jellinek, R., Singh, V., and Ristenpart, T. (2016, January 8–9). Controlling UAVs with sensor input spoofing attacks. Proceedings of the 10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16), Austin, TX, USA.
75. Blazy, O., Bonnefoi, P.F., Conchon, E., Sauveron, D., Akram, R.N., Markantonakis, K., Mayes, K., and Chaumette, S. (2017, January 18–20). An efficient protocol for UAS security. Proceedings of the 2017 Integrated Communications, Navigation and Surveillance Conference (ICNS), Herndon, VA, USA.10.1109/ICNSURV.2017.8011987 ↗
76. Rodday, N.M., Schmidt, R.d.O., and Pras, A. (2016, January 25–29). Exploring security vulnerabilities of unmanned aerial vehicles. Proceedings of the NOMS 2016-2016 IEEE/IFIP Network Operations and Management Symposium, Istanbul, Turkey.10.1109/NOMS.2016.7502939 ↗
77. Pu, C., and Zhu, P. (2021, January 7–11). Defending against flooding attacks in the internet of drones environment. Proceedings of the 2021 IEEE Global Communications Conference (GLOBECOM), Madrid, Spain.10.1109/GLOBECOM46510.2021.9686017 ↗
78. Salamh, F.E., Karabiyik, U., Rogers, M., and Al-Hazemi, F. (2019, January 24–28). Drone disrupted denial of service attack (3DOS): Towards an incident response and forensic analysis of remotely piloted aerial systems (RPASs). Proceedings of the 2019 15th International Wireless Communications & Mobile Computing Sonference (IWCMC), Tangier, Morocco.10.1109/IWCMC.2019.8766538 ↗
79. Li, J., Li, S., Yang, T., Xie, Y., and Zhang, G. (2021). Survey of Attack Detection and Defense Technologies in Wireless Sensor Networks. Advances in Intelligent Information Hiding and Multimedia Signal Processing, Springer.10.1007/978-981-33-6420-2_54 ↗
80. Fast, reliable, and secure drone communication: A comprehensive survey10.1109/COMST.2021.3097916 ↗
81. Pleban, J.S., Band, R., and Creutzburg, R. (2014, January 2–6). Hacking and securing the AR. Drone 2.0 quadcopter: Investigations for improving the security of a toy. Proceedings of the Mobile Devices and Multimedia: Enabling Technologies, Algorithms, and Applications 2014, San Francisco, CA, USA.10.1117/12.2044868 ↗
82. Roder, A., Choo, K.K.R., and Le-Khac, N.A. (2018). Unmanned aerial vehicle forensic investigation process: Dji phantom 3 drone as a case study. arXiv.
83. MELTWEB: A Transient Execution Attack to Capture Data in Fill Line Buffer10.1109/TLA.2022.9667137 ↗
84. Co-engineering security and safety requirements for cyber-physical systems
85. Schmittner, C., Ma, Z., and Schoitsch, E. (2015, January 22–24). Combined safety and security development lifecylce. Proceedings of the 2015 IEEE 13th International Conference on Industrial Informatics (INDIN), Cambridge, UK.10.1109/INDIN.2015.7281940 ↗
86. Sojka, M., Kreč, M., and Hanzálek, Z. (2014, January 18–20). Case study on combined validation of safety & security requirements. Proceedings of the 9th IEEE International Symposium on Industrial Embedded Systems (SIES 2014), Pisa, Italy.10.1109/SIES.2014.6871210 ↗
87. (2022). Information Security, Cybersecurity and Privacy Protection—Information Security Management Systems—Requirements (Standard No. ISO/IEC 27001).
88. Li, Z., Tang, Z., Lv, J., Li, H., Han, W., and Zhang, Z. (2020, January 12–14). An information security risk assessment method for cloud systems based on risk contagion. Proceedings of the 2020 IEEE 5th Information Technology and Mechatronics Engineering Conference (ITOEC), Chongqing, China.10.1109/ITOEC49072.2020.9141852 ↗
89. Ma, Y., Selby, N., and Adib, F. (2017, January 21–25). Drone relays for battery-free networks. Proceedings of the Conference of the ACM Special Interest Group on Data Communication, Los Angeles, CA, USA.10.1145/3098822.3098847 ↗
90. Eliciting security requirements with misuse cases10.1007/s00766-004-0194-4 ↗
91. (2018). Information Technology—Security Techniques—Information Security Management Systems—Overview and Vocabulary (Standard No. ISO/IEC 27000).
92. A lightweight authentication protocol for UAV networks based on security and computational resource optimization10.1109/ACCESS.2021.3070683 ↗
93. A data authentication scheme for UAV ad hoc network communication10.1007/s11227-017-2179-3 ↗
94. A key agreement scheme for IoD deployment civilian drone10.1109/ACCESS.2021.3124510 ↗
95. A mutual authentication and cross verification protocol for securing Internet-of-Drones (IoD)
96. Rios, J.L., Jung, J., and Johnson, M.A. (2022). Non-Repudiation for Drone-Related Data, NASA Technical Reports Server.
97. Efficient, traceable and privacy-aware data access control in distributed cloud-based IoD systems10.1109/ACCESS.2023.3272484 ↗
98. Chen, C.L., Deng, Y.Y., Weng, W., Chen, C.H., Chiu, Y.J., and Wu, C.M. (2020). A traceable and privacy-preserving authentication for UAV communication control system. Electronics, 9.10.3390/electronics9010062 ↗
99. Private blockchain-based access control mechanism for unauthorized UAV detection and mitigation in Internet of Drones environment10.1016/j.comcom.2020.12.005 ↗
100. An efficient and secure certificate-based access control and key agreement scheme for flying ad-hoc networks10.1109/TVT.2021.3055895 ↗