Australia warned over unpreparedness for drone cyber-attacks

Researchers at the University of Canberra have warned that Australia's critical infrastructure operators may lack preparation for drone-enabled cyber-attacks, citing limited detection capability, low awareness and minimal government guidance.

The work comes from Innovation Central Canberra at the university, which teamed up with DroneShield to examine the cyber risk profile created by drones. The researchers reviewed the threat environment and spoke with critical infrastructure operators.

The report found no recorded domestic cyber incidents that used drones. It said that does not remove the risk. It pointed to rising drone use and increasing drone sophistication. It also said that industry reporting on drone-enabled cyber threats remains limited in Australia.

The report covered sectors that regulators and government typically classify as critical infrastructure, including energy, water, telecommunications and data centres. It said those sectors face a changing risk picture as drones become more accessible and capable.

Professor Frank den Hartog, Cisco Research Chair in Critical Infrastructure at the University of Canberra, said drones already play a visible role in modern conflict and security planning. He said cyber security needed the same level of attention for drone use.

"We know how drones have changed traditional warfare, but are we oblivious of the role they play in cyber security? That's a worry, and an opportunity for our drone and cyber industry," said Professor Frank den Hartog, Cisco Research Chair in Critical Infrastructure at the University.

Findings and gaps

The researchers described a widening vulnerability driven by three factors. They pointed to steadily increasing drone capability. They also cited limited awareness across industry and a lack of targeted government guidance.

The report said many operators had limited drone detection in place. It also raised concerns about how organisations assess drone threats that combine physical access with cyber techniques. The researchers said overseas activity showed malicious actors experimenting with drone-borne cyber approaches.

The report framed drones as a mature technology in practical terms. It said prices had fallen and availability had increased. It also said payload options and flight performance had improved, which changed the kinds of risks operators needed to consider.

The researchers said the next five years could bring a shift in how operators view the likelihood and relevance of drone-enabled cyber threats. They linked this to continued development in both drone hardware and cyber techniques.

Operator response

The report called for more education and knowledge-sharing. It also called for broader industry collaboration, particularly across sectors that share physical environments and network dependencies.

It said organisations should review how they use drones in their own operations. It also said operators should assess the cybersecurity implications of wider drone adoption, including the supply chain for drone systems and the integrity of the data they collect.

"This research highlights the need for greater education, more industry collaboration, improved knowledge-sharing, and broader consideration of counter-drone capabilities across critical infrastructure sectors," said Professor den Hartog.

The report also addressed internal governance and resilience programmes. It said operators should integrate drone risk into existing security processes rather than treat it as a separate issue.

"We need to encourage operators to periodically and critically review how drones are used within their operations, assess the cybersecurity implications of increased adoption, and explore strategies to integrate drone risk into existing security and resilience programs."

Research setting

The work took place through Innovation Central Canberra, a collaboration between the University of Canberra and Cisco. The lab model centres on applied research and student involvement, according to the organisations involved.

The university said the project team included den Hartog and Innovation Central Canberra students Andrew Giumelli and Simone Chitsinde. The work combined targeted analysis with interviews of operators.

DroneShield described the engagement as part of its work with research organisations. The company sells systems focused on detecting and countering drones and autonomous systems for government, defence, law enforcement and infrastructure customers.

The organisations said they were exploring options to continue the partnership as technology and risks evolve.