Uncrewed Aerial Systems (UAS) - Threat Methodology

What are Uncrewed Aerial Systems?

There are many terms which are often used interchangeably with UAS including:

• drones
• uncrewed aircraft (UA)
• remotely piloted aircraft system (RPAS)

UAS are comprised of three key components:

1. an uncrewed aerial vehicle (UAV) that can operate without a pilot being on-board.
2. a ground control system (GCS) which allows the pilot to remotely control and or monitor the operation of the UAV.
3. a method by which the UAS receives commands from the GCS which commonly involves the exchange of flight information and imagery.

UAS describes the whole system. They may be of a fixed wing or rotary wing design, all of which are all operated remotely.

Methodology

There has been significant growth in the legitimate use of UAS and they present exciting benefits to society. However, as their use expands and evolves, security risks have emerged and UAS now have the potential to facilitate a wide range of hostile activity. UAS have been used unlawfully by threat actors across the world, including terrorists, criminals, and those conducting unlawful protest. In addition, users who are simply reckless and negligent in how they fly a UAS, may often cause disruption in or around a site.

Some examples of the methods of how UAS can be used are set out below. However, it should be noted that this is not a definitive list and should only be used as a guide. It is also reasonable to assume that as UAS use continues to grow, the threats they are used to deliver will also develop. UAS provide threat actors with some key capabilities over other more traditional methodologies. These will include the ability to:

• Fly across perimeter security measures into otherwise secure areas.
• Remotely deliver a range of threats with reduced likelihood of being detected by traditional security measures.

The threat methodologies that should now be considered are as follows:

• DISRUPTION – Flying over or near the site and preventing site operations from continuing as normal. For the purposes of protest or nuisance. This may include a prolonged disruption caused by an extended flying time.
• SURVEILLANCE – Flying over or stationary (perch and stare) near the site to gather information, either obtaining images or data. This may involve the use of a camera, microphone or other electronic means.
• DELIVERY OF A PAYLOAD – Delivering or removing an item. Delivering restricted, illegal or illicit items into a controlled area or removing property from a secure site.
• USING A UAV AS A KINETIC WEAPON -The UAV can either be unmodified or modified (I.e. addition of a payload) to enhance the weapon’s effect.
• CYBER-ATTACKS – Cyber related threats involve the use of a UAS to deliver malicious attempts to damage or disrupt services and networks, including IP theft.

Case study

In December 2023 Mohamed Al Bared, an engineering student from Coventry, was jailed for life for building a ‘’Kamikaze’’ drone for use by Islamic State. This drone was made from parts manufactured by a 3D printer that was found in the perpetrators house and although the design was considered flawed it was almost certainly a work in progress. Irrespective of the flawed design, the device was assessed to have a range of approximately 3 miles and was designed to deliver a chemical weapon or another kind of device.

Protective security guidance links

For additional information on protective security options to protect against UAS we recommend:

• Uncrewed Aerial Systems