So, good news for DJI drone users who are regularly baffled by reports of alleged “Chinese drone spy threats”. New independent audit of DJI Mavic 3, Mini 2 and Air 2S drones, as well as his DJI Fly app for iOS and Android, ensures products meet major cybersecurity and privacy protection requirements established by both the US and Europe It turns out that
While there have been several independent audits in the past to review and clear cybersecurity protocols for DJI drones used in sensitive government and corporate operations, drones designed for fun and entertainment only. There were no focused audits.
As part of the audit process, German testing and certification company TÜV SÜD purchased the consumer-focused DJI Mavic 3, Mini 2 and Air 2S drones individually through open commercial channels and tested them on both iOS and Android. I downloaded the DJI Fly app that supports .
Auditors then screen aircraft in accordance with cybersecurity standards established by the U.S. National Institute of Standards and Technology (NIST) and the European Telecommunications Standards Institute (ETSI), as well as the industry-recognized Open Web Application Security Project (OWASP) Mobile. tested. Application Security, and Penetration Testing Execution Standard (PTES).
This is what TÜV SÜD, who has been monitoring technology-related risks for over 150 years, concluded in its report:
DJI drones are equipped with comprehensive security features based on best practices, confidential information in the communication process of the app DJI Fly v1.5.10 (iOS and Android) and the cloud flight data synchronization process of DJI drones are encrypted. , sent over SSL, avoiding the most common security risks. Cybersecurity features and privacy protection aspects of DJI drones meet the requirements of the NIST IR 8259 and ETSI EN 303645 standards subject to this test.
Of course, DJI has taken this opportunity to reiterate its strong commitment to protecting customer data in drones and apps for the consumer market. Just last week, the tech giant shared that its drones have been validated against key security benchmarks jointly established by the U.S. Department of Commerce and the Canadian Center for Cybersecurity.
Below, Christina Zhang, Senior Director of Corporate Strategy at DJI, discusses the new TÜV SÜD audit.
DJI builds strong data protection into all of its products, and enterprise customers know their professional drones and apps are built from the ground up to protect their photos, videos, and flight logs. increase. With this new TÜV SÜD audit, DJI can offer the same assurance to people using consumer products around the world. From small backyard drones to large drones for life-or-death public safety operations, independent experts have shown that DJI products give users complete control over their data.
It is worth noting that a German auditor also conducted independent evaluations on select enterprise products, including the DJI Matrice 300 drone, the DJI Pilot flight control app, and the DJI Assistant 2 computer app. The review also confirmed that the product has comprehensive security features to protect sensitive information.
A summary of these reports can be found here and here.
See also 18 Awesome Drone Photos From Weekly Selections From DJI And SkyPixel’s Annual Contest
Subscribe to DroneDJ on YouTube to get exclusive videos
