Drone forensicsIdentifying, analyzing drone-collected evidentiary data

Published 31 July 2017

DHS awards nearly $1 million to a Colorado company to develop ways to increase law enforcement capabilities to identify, collect, and analyze evidentiary data from consumer and professional drones. The award is part of S&T’s Cyber Forensics, a project which focuses on development of new capabilities to help law enforcement with the forensic investigations of digital evidence from various devices such as mobile phones and automobile infotainment systems.

To increase law enforcement capabilities to identify, collect, and analyze evidentiary data from consumer and professional drones, the Department of Homeland Security (DHS) Science and Technology Directorate (S&T) has awarded a $928,541 research-and-development contract to VTO Inc. of Broomfield, Colorado.

S&T says that the award is part of the S&T Cyber Security Division’s (CSD) Cyber Forensics project, which develops cost-effective and novel cyber forensics solutions which help law enforcement keep pace with advances in technology. The project focuses on development of new capabilities to help law enforcement with the forensic investigations of digital evidence from various devices such as mobile phones and automobile infotainment systems.

“Drones are an emerging area of interest for law enforcement because they contain data that may be key in criminal investigations,” said Acting DHS Under Secretary for Science and Technology William N. Bryan. “Like other digital devices such as computers and phones, law enforcement agencies require new capabilities to recover evidence from drones and their cameras, sensors and other devices. This project will deliver these capabilities.”

The drone forensics work will focus on conducting cutting-edge research that will address key aspects of collecting digital forensics data from drone systems. During the research, VTO will target the identification and definition of the various data types residing on drones and their connected systems, including drone board systems, flight controllers, connected mobile devices and computers, onboard cameras, and network communications between a drone and its controller. The company also will seek to identify each drone’s data-acquisition method, including logical and physical acquisition opportunities such as circuit board-level interface (JTAG) and flash-memory removal (chip-off) to identify data artifacts on drones.

The project’s final deliverable will be a website that will support law enforcement officers, forensic services specialists and researchers. This website will be populated with instruction information obtained from the complete physical teardown and analysis of sample consumer- and professional-level drones as well as their connected controllers and peripheral devices.

“This drone forensics project will provide law enforcement the ability to extract and analyze evidentiary data from expensive and sophisticated professional drones to relatively simple store-bought drones,” said Megan Mahle, Program Manager in S&T’s Homeland Security Advanced Research Projects Agency (HSARPA). “This is a capability the law enforcement community needs, especially as the popularity of drones and their use in criminal activity continues to grow.”