LC-2 · Software Danger Reports

LrrK Kinematic Software Danger Report

# LrrK Kinematic Software Danger Report

**LRRK Watch / Software Assurance** — Monthly filing.

| Field | Value |
| --- | --- |
| Collection cutoff | 30 June 2015 |
| Platform | Quiet Systems |
| Series | DKSR-M-2015-06 |
| Status | short |
| Data label | Open-source intelligence // LRRK analytic product |
| Handling | Public-source material. Retrospective monthly. Image rights require separate verification before publication. |

## Executive read

### BLUF

Independent 2015 experimental confirmation that civil UAV GNSS remains spoofable after Kerns 2014. Spoofing takes the vehicle off course; chosen-point capture is a harder claim.

### Key judgments

1. **[Assessment — High confidence]** 15 June 2015, Journal of Positioning, Navigation, and Timing 4(2):57–65.
2. **[Assessment — High confidence]** Authors conclude taking the UAV to a chosen target point is hardly feasible without knowing guidance internals.
3. **[Uncertainty]** Specific airframe SKU is not established. Paper is GNSS-effect, not a named consumer SKU.

### Analytic labels

- **Fact** — verified reporting or primary record
- **Assessment** — analytic judgment
- **Inference** — reasoned but not directly observed
- **Uncertainty** — unresolved information gap

### Source grades

- **A1** — authoritative primary record / directly confirmed
- **B1–B2** — generally reliable and corroborated
- **C3** — useful but requires caution

## 01. Seo / Lee / Im / Jee: GPS spoofing effect on a civil UAV

*Event / publication dates: 15 June 2015 (JPNT 4(2):57–65)*

| Field | Value |
| --- | --- |
| Component | hardware |
| Product | Civil GNSS receiver on an autonomous-navigation UAV (field experiment) |
| CVE / advisory | no CVE |
| Patch | none |
| Exploit status | public writeup |
| Taxonomy | CWE-345 (class) · CAPEC-148 · OWASP IoT I7 |

**Verified record — [Fact — A1] DOI 10.11003/jpnt.2015.4.2.057. https://doi.org/10.11003/jpnt.2015.4.2.057 · https://www.jpnt.org/wp-content/uploads/2024/03/JPNT-0402-02.pdf**

**Exposure.** Unauthenticated civil GNSS. Sense → Move.

**Intelligence assessment.** [Assessment — High confidence] Publication date. [Uncertainty] Airframe identity.

**Opportunity.** Pair with Kerns 2014. Watch Qihoo Phantom 3 geofence (August).

**LRRK relevance.** Sense-Move-Act.

**Confidence.** High on date. Moderate on SKU.

## Forward indicators

1. Qihoo Unicorn Team DEF CON 23 (August 2015).
2. Luo DEF CON 24 GPS half (August 2016).

> **Collection integrity.** One paper. Not padded. No exploit steps.

*LRRK — security assurance for systems that sense, move, and act.*

<p align="right"><span style="opacity:0.35;letter-spacing:0.18em;font-size:0.8em">L-C2</span></p>