Toward Cybersecurity of Unmanned Aircraft System operations under "Specific" category

Nowadays, the increasing number of Unmanned Aircraft System (UAS) operations raises public concerns on cybersecurity issues. Therefore, it requires a methodology to address these issues during the UAS development. The Specific Operation Risk Assessment (SORA) is a risk assessment methodology developed by Joint Authorities for Rulemaking on Unmanned Aircraft System (JARUS). This methodology is endorsed by the European Union Aviation Safety Agency (EASA) as an acceptable means to fulfill the requirements of EU regulation related to UAS operations under the Specific category. The original SORA methodology focus on Safety risk scenarios only, which relate to unintentional threats and the harms to people's life. In this paper, we introduce our solution to extend the methodology toward cybersecurity aspects. The extended methodology concerns risk scenarios relating to intentional digital threats and some other harms (e.g privacy violation, damage to critical infrastructure). A part of this solution is developed and is presented in this paper.