DRONE USE AND DEFENSE BY ENTERPRISE SECURITY … · PRESENTATION DISCLAIMER REGARDING RECOMMENDATIONS Safeguards Consulting is an independent consulting company and not affiliated

DRONE USE AND DEFENSE BY ENTERPRISE SECURITY MANAGEMENTUAS Applications, Concerns, and Countermeasures

ASIS International 2017 Annual SeminarDallas, Texas, USASeptember 27th, 2017Presenters: Jason Cansler, Nathan Ruff, & Mark Schreiber

PRESENTATION DISCLAIMERREGARDING RECOMMENDATIONS

Safeguards Consulting is an independent consulting company and not affiliated with any manufacturer. The Coalition of UAS

Professionals is not commercially affiliated with any organization and is platform agnostic. This presentation simply provides

information on sample technologies and products, and is not intended to represent a recommendation or infer any specific

guidance to anyone. Quoted statements from the manufacturer are included for information, but are not verified

by Safeguards Consulting. Technology decisions should be made with professional consultation and based upon an organization’s security operations and facilities, not just

technology benefits. Images and quotations used are from public sources.

COPYRIGHT 2017

PRESENTER BACKGROUND

Nathan RuffExecutive DirectorCoalition of UAS Professionals

• 17+ Years Strategy Consulting

• UAS Liaison, Colorado Pilots Association

• SIA: Public Safety Working Group Member

• Robolliance Expert (SME)

• Publications:

• Smithsonian Institute

• Security Industry Association

• Robolliance

• Security Sales & Integration

• Institute for the Study of Diplomacy

• Part 61 Private Pilot, USPA Certified Skydiver, USPPG Certified Power Paraglider

• B.A., Brown University

• Masters of Science, Georgetown University

• Co-Founder/CEO, UASidekick

• Airspace De-confliction Application

• Search & Rescue Tool

• Privacy Management Platform


Jason Cansler, PICOwner Under the Sun Imaging

• 13+ Years in Security Industry

• Decorated Law Enforcement Officer

• Licensed Armed Security Officer

• Campus Security Director

• General Aviation Private Pilot

• FAA 333 Waiver

• FAA 107 Commercial UAV Operator

• Night Flight Waiver

• Board Member of the Coalition of UAS Professionals

• ASIS Chapter Volunteer

• Co-Founder/COO, UASidekick

4COPYRIGHT 2017


Mark Schreiber, CPP, CPDPresident & Principal ConsultantSafeguards Consulting, Inc.

• 18+ Years in Security Industry

• B.S. Electrical Engineering Technology

• ASIS InternationalCertified Protection Professional

• NICP CPTED Professional Designation

• Security & Telecommunications SME

• ASIS International Council Vice President

• Chair of Western SC ASIS Chapter

• Past Chairperson and Member of multiple ASIS Councils

COPYRIGHT 2017

COPYRIGHT 2017

DRONE PRIMER

• It’s a bird, it’s a plane, …

• Capabilities and Industry Applications

• Current Drivers & Future Trends: Drones 2020

DRONE INCLUSION

• Complex Environment

• UAS Legislation

• Approach Recommendations

• UAS Statistics

IMPACT TO THE SECURITY INDUSTRY

• Foundational Protection Principles

• Criminal Precedents

• Potential Threats

• Security Impact (Awareness & Response)

• ESRM Applications

• Multiple Potential Case Studies to Demonstrate

• Specific & Overall Takeaways

PRESENTATION AGENDA

*Acronyms: UAS - Unmanned Aircraft System, UAV - Unmanned Aerial Vehicle

DRONES: A Brief Primer

(If you would like a more detailed background on this emerging technology, please come grab

one of us at the end of the presentation)

COPYRIGHT 2017 MARK SCHREIBER

DRONES RANGE DRAMATICALLY IN SIZE


8 Gram Blade Pico Quadcopter 14,950 Pound RQ-4 Global Hawk

DRONES ARE IN SERVICE ALL OVERPhoto/Video (real-time streaming capabilities)

Police/Fire/EMS/First Response/Search & Rescue

Agriculture

Mapping/Inspections/Volumetric Calculations

Humanitarian / Environmental

7 Million Drones Estimated in US

Airspace by 2020

FAA AuthorizationsHarvey – 140

Irma – 176+

Photo Credit: Brian EmfingerPhoto Credit: Harold Joss

SO WHAT’S THE BIG DEAL


• Current Global Market: $2 Billion USD1

• Price Waterhouse Coopers 2020 Estimate: $127 Billion USD1

• sUAS Market size in the next 24 months: $8.4 Billion USD2

• Creation of 70,000 new jobs by 2020

• Average estimated annual salary of drone operator: $100,000 USD3

• Commercial Compounded Annual Growth Rate4 (5 years): 51%

• Universities scrambling to create degree-programs and training to meet the expected demand

• Drones can capture aerial data at 10-20% of traditional costs (vs. Helos)

Source: 1- PwC 5/9/16, 2 - ABI Research , 3- UAVSI, 4- Business Insider

• It’s not about flying ability

• Autonomous operations unlock the future (BVLOS) - IoT

• Industry maturation (when we start seeing major consolidation)

• Big bucks, even by the security industry’s standards

• Major Players Engaged: Intel, Cisco, IBM, Airbus Industries, Amazon, NVIDIA, Facebook, FedEx/DHL (vs. VC)

• The technology is here to stay

• 21st Century Tool / 21st Century Threat

KEY TAKEAWAYS

- Non-Profit Organization (no fee structure)

- Dedicated to improving industry safety and professionalism

- +1000 members across 50 states and 16 countries

- The organization is focused on education

- New Operators

- Existing Operators

- General Public

- State and National Regulatory Agencies (educate not lobby)

- Resources/expertise to support industry growth

- UASidekick Situational Awareness App = Airspace, SAR, Privacy

- www.uascoalition.org - All Are Welcome

INDUSTRY GROUPS ARE EMERGING TO ENSURE SAFETY AND PROFESSIONALISM

Coalition of UAS Professionals


www.uascoalition.org

DRONE INCLUSION:KEYS TO SUCCESS

COPYRIGHT 2017

WHAT THE UAV INTEGRATION LOOKS LIKE TO SITE MANAGERS & BUSINESS OWNERS….

Complicated

Management Responsibility

Multi Faceted

Workflow Integration

Untested

Legal Impacts & Exposure

Expensive

Training, Equipment, InsuranceImage By: Image Bank

COPYRIGHT 2017

WHAT THE UAV INDUSTRY REGULATIONS LOOKS LIKE TO PILOTS AND UAV START-UPS….

Litigious

Liabilities and Risk

Uncertain

FAA Regulations

State Interaction

Crowded

80,000 Commercial Pilots

Evolving

Expensive Technology Advancements

Image By: Lim Ngo Hock,

Collaboration with Andy Yang.

Client: BBDO

COPYRIGHT 2017

RESOURCES

Unmanned Aerial Traffic

Management (UTM): utm.arc.nasa.gov

Low Altitude Authorization and Notification Capability (LAANC):

https://faaco.faa.gov/index.cfm

/attachment/download/75780

Jonathan Rupprecht: www.jrupprechtlaw.com

National Conference of State

Legislators (NCSL): http://www.ncsl.org

National Conference of State Legislators

COPYRIGHT 2017

NASA: UTM

HOW CAN WE THRIVE IN THE NEW UAS WORLD?

• Rely on qualified professionals internally and

externally

• Develop clear goals for what you want to

accomplish with your program

• Utilize a phased approach to minimize the affect of

the changing UAS landscape

• Design, build and grow your business with the UAV industry in mind (UAV’s are not going away)

COPYRIGHT 2017

RELY ON QUALIFIED PROFESSIONALS TO:

• Understand Current Environment

• Training, Certifications, Networking, Insurance

• Forecast Change (Never Ending Task)

• Technology, Regulation, Legal Enforcement

• Direct Future Program Phases

The key to a successful integration of UAS is in the timely collection then interpretation of pertinent and viable

information.

Due to the age of this industry and the speed of its growth the

selection of the right professionals can be a daunting task but well worth the effort.

COPYRIGHT 2017

INDUSTRY BY THE NUMBERS:

• 900,000+ drones registered in the US

• 80,000 commercial drones registered (Aug 2017)

• 60,000 part 107 UAV pilots with 92% pass rate (Aug 2017)

• 320,000 registered manned aircraft in the US (FAA Feb 2016)

• 584,362 active airman certificates (FAA Dec 2016)

• 7,000 planes in the air at any one time in the US (FAA Feb 2016)

• 59 lives saved by civilian drones since 2013 (DJI March 2017)

• 347 local and state agencies have acquired UAV’s across the US (Center for the Study of the Drone at Bard College April 2017)

• 70+ authorizations granted during Hurricane Harvey for UAV flights (FAA Huerta @ Interdrone 2017)

MANNED

AIRCRAFT60 YEARS FAA

UNMANNED

AIRCRAFT5 YEARS HR 658

COPYRIGHT 2017

IMPACT TO SECURITY INDUSTRY:

POTENTIAL SECURITY CASE STUDIES

COPYRIGHT 2017

NOT TO NEGLECT UNMANNED GROUND VEHICLES (UGV)

COPYRIGHT 2017

• Less Regulations

• Less Danger

• Easier to Deploy

• Easier to align with current Security Operations

UAS IMPACT TO SECURITY -PROTECTION PRINICPLES

DETER (Limited)

• Legal Implications (i.e. FAA, FCC)

• Property Statements, Signage, Agreements

DETECT

• Multiple Technologies Being Applied

• Capability to Layer Solutions

• Still in first wave of practical commercial applications

COPYRIGHT 2017

DELAY (Limited)

• Cannot slow aerial vehicles

• Facility Redesign to Bunker Approach

DENIAL/RESPONSE

• Several Technologies Emerging

• Major Legal Implications

• Destruction is Illegal

POTENTIAL CASE #1 -TRESPASS INCIDENT

Precedents:

• White House - January 26, 2015

• Kitsap-Bangor Naval Base - Feb. 2016

• SRS Nuclear Weapons Site - June 2016

Potential Threats:

• Potential Goal of Disruption

• Damage to Employees/Users

• Operational Interference

• Wasted Use of Resources• Intentional/Unintentional - Same Impact

COPYRIGHT 2017

IMAGE FROM THE ATLANTIC- AP/SECRET SERVICE

IMAGE FROM GLOBALSECURITY.ORG


Security Impact - Detection/Awareness:

• Security Officers

• Proper Training

• Part of Patrol Procedures

• Facility Users

• Part of Security Awareness

• Proper Training if a Responsibility

COPYRIGHT 2017




Security Impact - Detection/Awareness (continued):

• Technology Crowdsourcing

• Uses common sensors on smartphones

• Detects Drones within 300 feet

• Aggregates crowdsourced information

• Can complement with detection software

COPYRIGHT 2017

IMAGES FROM DETECT


Security Impact - Denial/Response:

• Legal Rights/Property Statements

• Proper Signage for Restriction of Drones

• Security Procedures to Document Incidents

• Security Policies for Drones

COPYRIGHT 2017




ESRM:

• “If you can’t measure it, you can’t improve it” -Need to detect threat to determine risk frequency.

• Unauthorized visitors can burden resources, disrupt normal operations.

Take-Aways:

• Update Security Policies and Procedures to address UAS

• Provide proper training for ALL security-responsible personnel.

• Revise/Implement Security Awareness Training to address UAS.

• Develop Incident/Evidence procedures for UAS events.

COPYRIGHT 2017



POTENTIAL CASE #2 -SURVEILLANCE INCIDENT

Precedents:

• None to Date - But Laws Are Changing

Potential Threats:

• Goal of Intelligence Collection

• Adversary Information Gathering

• Corporate/Political Espionage

• Reconnaissance Technologies:• Quiet / High Altitude Flight Capability

• Audio

• Visible Video

• Thermal Video - Under Cover of Darkness

• LIDAR - Under Cover of Darkness

• Electronic/Cyber (Sniffing)

COPYRIGHT 2017

VIDEO FROM PHOENIX AERIAL



• Potentially NONE


• No Response without Detection

COPYRIGHT 2017

IMAGE FROM PHOENIX AERIAL



• Document Incident (Internal & LEO)

• Video Evidence

• Video Recording Equipment Available

• Mobile Devices

• Body Cams

• Handheld Cameras

• Proper Training on Equipment

COPYRIGHT 2017

IMAGE FROM KJZZ

IMAGE FROM GENETEC


ESRM:

• Intelligence about your organization in the wrong hands can be used against you…

• Is R&D and Intellectual Property susceptible to aerial surveillance?

Take-Aways:

• Implement Drone Response plans within existing processes and capabilities.

• Effective Drone Detection cannot solely depend on Human Capabilities

• Detection Capabilities will be necessary for this Threat Profile, especially in low visibility situations.

COPYRIGHT 2017

IMAGE FROM PHOENIX AERIAL

POTENTIAL CASE #3 -EVENT DISRUPTION INCIDENT

Precedents:

• German Chancellor - Sept. 2013

• U.S. Open Tennis Match - Sept. 2015

• English Football - Sept. 2016

Potential Threats:

• Potential Goal of Disruption

• Direct Interruption

• Indirect Interruption

• Unauthorized Broadcasts

COPYRIGHT 2017

IMAGE FROM ARS TECHNICA


Security Impact -Detection/Awareness:

• Radar Detection System in a controlled area

• Security Cameras (Fixed & PTZ)

• Integrated Systems & Tracking

• Facility Exterior Detection• Roof presence detection

(i.e. PIR, laser scanning)

• Video Analytics on hide areas

• Security Patrol Detection

COPYRIGHT 2017

VIDEO AND IMAGE FROM SPOTTERRF



• Manual Intervention -Handler & Trained Raptors

• Targeted Response

• Catch & Return

• Animal Operations Precedent

• Drone provided to Authorities

COPYRIGHT 2017

VIDEO FROM GUARD FROM ABOVE

*EXTRA TIP:UAS FORENSICS

UAS Security Operations Forensic Capabilities

• Cutting Edge Tech for Law Enforcement Also

• Utilize Experts for Critical Needs

• Visual clues may show intent

• Serial Numbers may have no value

• Destruction necessary for digital artifacts

• Home location, flight path might be available

• Information on software and tablet/phone may be available

COPYRIGHT 2017

IMAGES FROM DAVID KOVAR & JACKS DRONES


ESRM:

• Event disruption can demand all available resources and create excessive unplanned costs (downtime, lost revenue, etc.) if the incident is not contained.

Take-Aways:

• In a controlled property, promising technology is being introduced to detect UAS intrusions.

• Legal approval may be necessary to deploy (public partnerships may help)

• Response options may exist, but are unconventional with low assurance, and best for limited timeframes.

COPYRIGHT 2017

IMAGE FROM ARS TECHNICA

POTENTIAL CASE #4 -CYBER/ESPIONAGE INCIDENT

Precedents:

• 2015 Singapore Digital Theft (Demonstration)

Potential Threats:

• Goal of Intelligence Collection

• Corporate Competitors

• Governmental Agents

• Criminal Agents

• Methodologies:• Hide Drone at inaccessible location (i.e. Roof)

• Surveillance while in close proximity of facility

• Electronic Eavesdropping

• Wi-Fi & Cellular SnoopingCOPYRIGHT 2017

IMAGE

FROM

ALM

MEDIA

IMAGE FROM

ITRUST CENTRE

IN CYBER

SECURITY

RESEARCH



• Security UAS Operations

• Drone Patrols

• Potential to combine with UAS Detection

• Video Surveillance Integration

• Limited General Surveillance

• Can Provide Situational Awareness

• Guard Tour Capable

• Response Capable

• Communications to Adversary

• Strobes/Focused Laser Light

• Sound Deterrence (i.e. LRAD)

• Geo-Fencing Limited

COPYRIGHT 2017

VIDEO FROM INDIGOVISION

IMAGE FROM HIKVISION



• Security UAS Operations

• Capture by trained Security Personnel

• Drone provided to Authorities

• Video Evidence

• Geo-Fencing Limited

COPYRIGHT 2017

VIDEO FROM CBS


ESRM:

• Corporate Theft can have devastating

impacts to a business, whether via

duplication of critical intellectual property

or via competitive advantage.

Take-Aways:

• Active Security Surveillance Operations can

be expanded to include UAS as a tool.

• Expectations to detect and respond to a

UAS threat via video surveillance should be

limited (low assurance)

• Provide proper training to Security

Personnel for detection and capture.

• Use proper Incident/Evidence procedures

for UAS events. COPYRIGHT 2017

IMAGE

FROM

ALM

MEDIA

IMAGE FROM

ITRUST CENTRE

IN CYBER

SECURITY

RESEARCH

POTENTIAL CASE #5 -CONTRABAND DELIVERY INCIDENT

Precedents:

• Multiple

• Example: Mansfield Correctional Institution in Ohio, July 29, 2015

Potential Threats:

• Smuggling/Contraband Delivery

• Phone Transportation

• Narcotics Transportation

• Weapons Transportation

• Prison Infiltration

COPYRIGHT 2017

IMAGE FROM UA-SP.COM



• Integrated ultrasonic and video sensors can track UAVs during flight and be displayed on a fixed video stream with analytics.

• Drone signatures will grow in complexity.

• Geospatial data and video data provided.

• Multiple sensors provides greater assurance of accuracy.

COPYRIGHT 2017

IMAGE AND VIDEO

FROM DEDRONE

IMAGE FROM DEDRONEIMAGES FROM DRONESHIELD



• Manual Intervention -Directional Jammer

• RF signal, limited collateral damage

• Focused impact

• Familiar platform

• Semi-portable

• (Currently Illegal for most)

COPYRIGHT 2017

VIDEO FROM

DRONESHIELD

IMAGE FROM

BATELLE


ESRM:

• Defeating of security capabilities and potential facility riot/shutdown.

Take-Aways:

• Drone platform has the capability to bypass current physical countermeasures and circumvent security operations. Detection and intervention needed with the current environments.

COPYRIGHT 2017

IMAGE FROM UA-SP.COM

POTENTIAL CASE #6 -INCIDENT RESPONSE OPERATIONS

Precedents:

• 2005 Graniteville Chlorine Derailment

• 2017 Hurricane Harvey Arkema Explosion

Potential Threats:

• Hazardous Events Require Response and Mitigation, which can result in additional damage to those responding.

COPYRIGHT 2017

IMAGE FROM THE AUGUSTA CHRONICLE

IMAGE FROM NBC NEWS



• Traditional Communications/Detection

• Automated UAV Response

• Video Tours/Situational Awareness

• Audible, Visual, etc. Deterrent

• Emergency Response - Intelligence

Gathering/Situational Awareness

• Emergency Response - Hazardous

Environments

• Emergency Response - Search & Rescue

• Geo-Fencing - Limiting the aerial

operations to a pre-designated area

• Video Evidence


COPYRIGHT 2017

VIDEO FROM NIGHTINGALE SECURITY

IMAGE FROM H3 DYNAMICS



• Remote UAS Operations will provide intelligence to support a proper response.

• On-site/Near-site UAS Operations will provide live intelligence when addressing the incident, in addition to provide video footage for post-event analysis.

COPYRIGHT 2017

DRONE VIDEO FROM HUMANITARIAN DRONES –

ROCKPORT, TEXAS

VIDEO FROM JEFF CLEMENTI –

MURFEESBORO FIRE RESCUE DEPT.


ESRM:

• Addressing incidents in a safer, faster method will reduce impact to the organization.

Take-Aways:

• In-House UAS Operations can not only be used for patrols, but also quick response operations, giving current data and intelligence to mitigate damage and hazards.

COPYRIGHT 2017

IMAGE FROM THE AUGUSTA CHRONICLE

IMAGE FROM NBC NEWS

POTENTIAL CASE #7 -SMALL WEAPON/PAYLOAD ATTACK

Precedents:

• Prime Minister of Japan's Official Residence (Kantei) - April 2015

• Small Bottle of Radioactive Sand

• Political Statement for Fukishima Dai-ichiNuclear Plant Disaster

• 2016 ISIS attacks in Mosul, Iraq

COPYRIGHT 2017

IMAGE FROM YOUTUBE – ‘THEREVOLUTIONBEGIN’

IMAGE FROM WIKIPEDIA PUBLIC COMMONS


Potential Threats:

• Hostile Intention

• Weaponization

• Explosives

• Firearms

• Chemicals

• Radiation

• Biological Weapons -Agricultural Sprayers

COPYRIGHT 2017

VIDEO FROM YOUTUBE - “HOGWIT”



• Area Detection Systems with Multi-layered Technologies

• Radio Frequency Sensors

• Spectrum Array Sensors

• Passive or Active

• Directional Antennas

• Sensors Aggregated in Software

• Complement with Video Surveillance

COPYRIGHT 2017

IMAGE FROM CERBAIR

IMAGE FROM SRC/GRYPHON SENSORS



• Manual Intervention - Netting Projectile

• Fired Projectile

• Focused impact & capture

• Familiar platform


COPYRIGHT 2017

VIDEO FROM OPEN WORKS ENGINEEERING

VIDEO FROM YOUTUBE - “HOGWIT”


ESRM:

• Potential fatalities have unforeseeable impact to the organization.

Take-Aways:

• Even small drones (sUAS) can carry lethal weapons which require advanced detection and response solutions, especially if the goal is to prevent the attack.

COPYRIGHT 2017IMAGE FROM WIKIPEDIA PUBLIC COMMONS

IMAGE FROM YOUTUBE – ‘THEREVOLUTIONBEGIN’

POTENTIAL CASE #8 -LARGE/MULTIPLE WEAPON ATTACK

Precedents:

• U.S Capitol & Pentagon Attack Plan -September 2011• Plot to Ferry C-4 Explosives (up to 25 lbs) into

the U.S. Capitol and the Pentagon

• FBI Sting, U.S. Citizen, Al-Qaeda Sympathizer

Potential Threats:

• Hostile Intention

• State Actor Attack

• Terrorism

• “Swarm” Attack with Multiple Drones

COPYRIGHT 2017

IMAGE FROM CBS NEWS

IMAGES FROM AVEILLANT


Security Impact -Detection/Awareness:

• Large Area Detection Systems using multi-layered technologies for Drone Detection.• Radio Frequency Sensors and

Spectrum Array Sensors• Passive or Active

• Directional Antennas

• Large Area Radar• Up to 5km area

• Sensors Aggregated in Software

• Complement with Video

COPYRIGHT 2017

IMAGES FROM SENSOFUSION



• Tactical anti-drone destruction

• High-Powered Lasers

• Counter Drone Swarms

• Military Technologies under Development

• Illegal for Commercial Purposes

• Potential Collateral Damage

• Potential Crash Damage

COPYRIGHT 2017

IMAGE

FROM U.S.

NAVY

VIDEO FROM

YOUTUBE - AIRBOYD


ESRM:

• Large weapon attacks have country-wide (and even international) impact with fatalities and large economic repercussions.

Take-Aways:

• The impact of a coordinated UAS attack is new ground, which will require new technologies that are still under development.

COPYRIGHT 2017

IMAGE FROM CBS NEWS

OVERALL TAKEAWAYS

• UAS/UAV – An important, emerging technology with significant security impact

• UAS technology has advanced greatly to make them capable tools

• Legislation and Oversight is behind the technology curve

• Find resources; national and local to continue your education & understanding

• Operation of UAS for Security Operations requires appropriate planning, implementation and additional staffing/service resources

• UAS countermeasures are advancing, but not proven technologies

• Sandia Labs: “No sensor type alone is able to provide sufficient tracking and identification capability to offer a reliable and effective defense against the LSS threat”… “To provide a satisfactory performance, the use of an adequate mix of sensors will be crucial.”

• Be adaptable in your security planning to support legal & technology advancements

COPYRIGHT 2017

QUESTIONS?

(Answers not guaranteed…)

COPYRIGHT 2017

THANK YOU!AND BE SAFE

Mark Schreiber, CPP, CPD

President & Principal Consultant

Safeguards Consulting, Inc.

MSchreiber@ SafeguardsConsulting.com

864 - 569 - 4845

www.safeguardsconsulting.com

Jason Cansler, PIC

Owner / Operator

Under the Sun Imaging

[email protected]

864 - 505 - 2478

www.underthesunimaging.com

Nathan Ruff

Executive Director

Coalition of UAS Professionals

[email protected]

617 - 905 - 2220

www.uascoalition.org

COPYRIGHT 2017

Documents

DRONE USE AND DEFENSE BY ENTERPRISE SECURITY … · PRESENTATION DISCLAIMER REGARDING RECOMMENDATIONS Safeguards Consulting is an independent consulting company and not affiliated