Securing the Unprotected: Enhancing Heartbeat Messaging for MAVLink UAV Communications

Despite MAVLink's broad adoption and its flexible architecture that encourages vendor-specific customization, the flexibility introduces substantial cybersecurity vulnerabilities. This paper presents a novel security design aimed at reinforcing the MAVLink protocol against these vulnerabilities, focusing particularly on protecting the heartbeat function, which is essential for maintaining communication links yet previously overlooked in security considerations. Focusing on the vulnerability in heart- beat messaging, we propose a multifaceted security approach that includes a detailed vulnerability analysis, development, and simulation of specific countermeasures such as physical controls, advanced encryption, token authentication, and the use of short-lived tokens for dynamic security. Utilizing a simulated flight plan via QGroundControl for our experiments, we rigorously assess the efficacy of these strategies. Our research significantly advances the conversation on UAV cybersecurity, underscoring the necessity for comprehensive security frameworks that address every aspect of communication protocols, even those previously considered non-critical. By enhancing the security of heartbeat messages within the MAVLink protocol, our work establishes a foundation for more secure and reliable UAV operations across various applications, thus bolstering the overall integrity and reliability of these indispensable systems.