IT Forensics · Drones

Proving drone-based jamming and spoofing through forensic analysis – Investigating targeted signal jamming and spoofing

Jamming refers to the deliberate interference with radio signals, whilst spoofing refers to the transmission of falsified signals that appear genuine, for example to manipulate a drone’s GPS positioning.

Enquire without obligation

Both types of attack can be used either against a drone itself or, via a drone, against other systems, each of which requires a detailed forensic analysis.

Why LanCologne?

Since its foundation, LanCologne has specialised in professional IT forensics. Our staff have decades of experience in the field of information technology and assist companies, solicitors, private individuals and, on a regular basis, the courts in the technical investigation of complex digital matters.

The examination is, as a matter of principle, carried out exclusively on a forensic copy, a forensic image or a data source captured in a technically equivalent manner that preserves the integrity of the evidence. The original evidence remains unchanged and is stored in a manner that preserves its integrity.

Our services

We systematically examine available signal, connection and position data for characteristic signs of jamming or spoofing and document our findings in a transparent manner.

Typical areas of application

•Evidence of deliberate radio jamming directed at a drone
•Investigation into manipulated GPS position data
•Investigation into the use of a drone as a means of disruption
•Supplementary studies on loss of control
•Judicial and non-judicial expert reports
•Forensic analysis of a drone losing control

This is how a jamming/spoofing investigation is carried out

Once the data has been secured, signal, connection and position data are checked for characteristic patterns typical of jamming or spoofing, such as sudden, implausible position jumps or atypical signal interruptions. These are distinguished from natural interference.

Why is the investigation into jamming and spoofing relevant from a forensic perspective?

Evidence of a targeted act of interference can be of considerable significance for the criminal assessment of an incident and can distinguish between a technical cause and deliberate external interference.

The reverse scenario – the use of a drone as a carrier platform for a jamming device – may also be of forensic relevance and requires a separate technical assessment.

Frequently Asked Questions

Can jamming be clearly distinguished from natural signal interference?+
In many cases, yes, on the basis of characteristic patterns; however, it is not always possible to distinguish them with 100 per cent certainty.
How does GPS spoofing manifest itself in the data?+
Often due to sudden, physically implausible position jumps that are not supported by the rest of the sensor data.
Is the use of jamming devices legal?+
This depends on the applicable legal situation and must be distinguished from a purely technical forensic finding.

🔗 Related topics

LanCologne – IT Forensics Drones Cologne

Do you require a professional forensic investigation to „provide forensic evidence of drone-based interference (jamming/spoofing)"? LanCologne can assist you in securing digital evidence in a manner that stands up in court, as well as in the transparent analysis of relevant drone artefacts.

Get in touch now