Free/open source software and drones Security and privacy issues

Free/open source software and drones

Security and privacy issues

Avv. Giovanni Battista GallusLL.M. Phd ISO 27001 Lead Auditor

gallus@array.eu - gallus@gm-lex.eu

https://www.flickr.com/photos/eschipul/

@gbgallusAvv. Giovanni Battista Gallus

The power of drones

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

https://www.youtube.com/watch?v=umRdt3zGgpU&feature=youtu.be

@gbgallusAvv. Giovanni Battista Gallus

http://www.dronejournalismlab.org/

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

Autonomous swarms

@gbgallusAvv. Giovanni Battista Gallus

3D3D Operations

DDirtyDDull

DDangerous

@gbgallusAvv. Giovanni Battista Gallus

Drone risks

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

What about drones & FOSS?

@gbgallusAvv. Giovanni Battista Gallus

Free/open source software at the core

@gbgallusAvv. Giovanni Battista Gallus

Free/open source software at the core

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

Every rose has its thorn

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

What about data protection?

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

EU Regulation 2016/679 and drones

@gbgallusAvv. Giovanni Battista Gallus

Article 12 Transparent information, communication and modalities for the exercise of the rights of the data subject7. The information to be provided to data subjects

pursuant to Articles 13 and 14 may be provided in combination with standardised icons in order to give in an easily visible, intelligible and clearly legible manner a meaningful overview of the intended processing. Where the icons are presented electronically they shall be machine-readable.

Transparency

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

Data protection by design

Data protection by default

Certificationsystems

Clear identification of controller & processor

Privacy impact assessment

@gbgallusAvv. Giovanni Battista Gallus

EmbeddingPrivacy

into drones

@gbgallusAvv. Giovanni Battista Gallus

What about aviation safety regulations?

@gbgallusAvv. Giovanni Battista Gallus

The (near) future2019-2020?

@gbgallusAvv. Giovanni Battista Gallus

The Open Category< 250 g – compliant with 2009/48/EC directive (safety of toys) – CE mark

negligible risk - 50 mt. max height – 100 mt. from pilot – 54 kmh No pilot license – OK FPV and follow me

< 25 kg – injuries level AIS (Abbreviated Injury Scale) 250 mt. max height – VLOS – OK FPV and follow me

No pilot license - Registered operators

< 25 kg – geofencing and electronic identificationInjuries level AIS 4

50 mt. max height and 50 mt. distance from persons - VLOS – NO FPVNo pilot license - Registered operators

< 25 kg – geofencing and electronic identificationInjuries level > AIS 4 - 50 mt. max height

50 mt. distance from persons – VLOS – EVLOS – NO FPVPilot license - Registered operators

@gbgallusAvv. Giovanni Battista Gallus

The Open Category

In every other category, the operations can be performed with a UAS placed in the market that has not been modified

in a way that breaches compliance with the product requirements

Sub-category A0 can be “privately build” (but has to comply with the requirements)

The Regulation should apply to model aircraft as well

@gbgallusAvv. Giovanni Battista Gallus

In conclusion, we need to fully apply data protection rules to

drones, that’s why...

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

Or...

@gbgallusAvv. Giovanni Battista Gallus

@gbgallusAvv. Giovanni Battista Gallus

Credits: Fabio Pietrosanti●

@gbgallusAvv. Giovanni Battista Gallus

Questions?Questions?

@gbgallusAvv. Giovanni Battista Gallus

Thank youAvv. Giovanni Battista Gallus

gallus@array.eu @gbgallus

Unless stated otherwise, all texts are distributed under a Creative Commons Attribution – non commercial – sharealike 3.0 Unported license