Security Analysis of DJI Phantom 3 Standard

This paper comprises a security analysis of the DJI Phantom 3 Standard [1], a popular consumer drone with an onboard camera and standard set of features. Drones present a novel airborne platform for new commercial and consumer work, and this, in addition to their increasing ubiquity, makes a security analysis especially worthwhile. We present a collection of fatal attacks, minor observations, and associated security vulnerabilities, discovered over the course of a month of research. These vulnerabilities affect both the physical integrity of the drone and the security of user data. Finally, we make a set of recommendations that, if implemented, will dramatically bolster the security of the drone.