A Systematic Security Testing Approach for InterUSS-based environments

TL;DR

This paper introduces a security testing methodology for InterUSS-based UTM ecosystems, focusing on infrastructure security challenges and providing a comprehensive testing guide.

Contribution

It develops a systematic security testing approach tailored for InterUSS environments, including a practical testing guide based on real infrastructure analysis.

Findings

Identified key security components in InterUSS infrastructure

Developed specific security tests aligned with standards like mTLS and OAuth 2.0

Provided a comprehensive testing guide for ecosystem validation

Abstract

Unmanned Traffic Management (UTM) federated ecosystems, such as InterUSS, enable secure coordination among UAS Service Suppliers (USSs). However, they bring up some security challenges at the infrastructure level that haven't been fully explored. This paper presents a security testing approach for InterUSS-based environments from the maintainer's perspective. By deploying and analyzing a working InterUSS infrastructure, we pinpoint key components and develop specific security tests aligned with established standards and protocols, such as mTLS and OAuth 2.0. We compiled these tests into a Testing Guide that aids both component validation and interaction analysis across InterUSS-based ecosystems, filling a gap in current research.