This paper presents a security testing approach for InterUSS-based Unmanned Traffic Management (UTM) ecosystems, which coordinate drone operations across multiple service providers. The authors deploy a working InterUSS infrastructure, identify key components, and develop security tests aligned with standards like mTLS and OAuth 2.0. They compile these into a Testing Guide for component validation and interaction analysis.
Main takeaways:
- InterUSS is a federated ecosystem for drone traffic management, with security challenges at the infrastructure level (authentication, authorization, component interaction).
- The authors deploy and analyze a working InterUSS system to pinpoint security-relevant components and interaction patterns.
- Security tests focus on mTLS (mutual TLS for component authentication) and OAuth 2.0 (authorization) compliance.
- The Testing Guide fills a gap in current research by providing a maintainer-focused approach to validating both individual components and their interactions.
- The work is aimed at UTM infrastructure maintainers, not necessarily AI/ML safety researchers.