UAVs and Hostile Reconnaissance: Understanding an Emerging Protective Security Challenge

Safeguarding Today's Priorities. Preparing for Tomorrow's Challenges.

Recent reports of unidentified drones operating within restricted airspace above RAAF Base Williamtown have highlighted an increasingly important protective security issue:

the use of Unmanned Aerial Vehicles (UAVs) for hostile reconnaissance and intelligence collection. Recent reporting indicates multiple unidentified drones entered restricted airspace above one of Australia's most significant military air bases, raising questions regarding surveillance, security and counter-UAS capability. [7news.com.au]

While investigations into specific incidents may continue, the broader security implications are clear.

UAV technology is becoming increasingly accessible, affordable and capable. What was once primarily a military capability is now available to hobbyists, commercial organisations and potentially malicious actors.

For security professionals, the key question is no longer whether drones present a threat.

The question is:

How might drones be used by threat actors to collect information, identify vulnerabilities and support future hostile activity?

What Is Hostile Reconnaissance?

Hostile reconnaissance refers to deliberate efforts by a threat actor to gather information about a target before conducting a criminal, extremist, espionage-related or other malicious act.

This activity may involve collecting information about:

• Security measures

• Access points

• Patrol routines

• Building layouts

• Critical assets

• Personnel movements

• Arrival and departure patterns

• Emergency response arrangements

Traditionally, this activity required physical observation.

Today, UAVs provide threat actors with a new and increasingly effective method of collecting information remotely.

Why UAVs Are Attractive to Threat Actors

Small commercial drones provide several advantages.

Accessibility

Many platforms are inexpensive, readily available and simple to operate.

Stand-Off Collection

Operators can remain hundreds or even thousands of metres away from the target location.

Low Visibility

Small UAVs can be difficult to identify, track and attribute.

Advanced Sensors

Modern systems may carry:

• High-resolution cameras

• Thermal imaging

• Mapping capability

• Real-time video transmission

Operational Flexibility

UAVs can rapidly change location and observe targets from positions difficult for

traditional surveillance methods to access.

These characteristics make UAVs attractive tools for hostile reconnaissance activities.

Beyond Photography

Protective security discussions often focus on the imagery captured by UAVs.

However, information collection is only one potential concern.

Depending on capability and intent, UAVs may also support:

Intelligence Collection

Gathering information about facilities, critical infrastructure and security measures.

Operational Planning

Identifying vulnerabilities, access routes and timing opportunities.

Target Validation

Confirming the location of assets, personnel or activities.

Disruption Activities

Causing operational interruptions or safety concerns.

Psychological Effects

Creating uncertainty regarding security effectiveness and situational awareness.

Not every drone sighting is malicious.

However, organisations should recognise that UAVs can support a broader range of activities than simple photography.

Why Critical Infrastructure Sites Are Attractive Targets

Reports surrounding the Williamtown incident highlighted concerns regarding the potential collection of information about military capabilities and operations. [7news.com.au]

The same principles apply across many sectors.

Potential targets may include:

• Defence facilities

• Airports

• Ports

• Energy infrastructure

• Water infrastructure

• Telecommunications facilities

• Higher education institutions

• Government precincts

These locations often contain:

• Critical assets

• Sensitive information

• Strategic capabilities

• Significant concentrations of people

Where information is valuable, reconnaissance activity may follow.

Indicators of UAV-Enabled Hostile Reconnaissance

Not every drone represents a threat.

However, organisations should be alert to patterns that may warrant further investigation.

Examples may include:

• Repeated flights over the same location

• Persistent observation of sensitive areas

• Flights outside normal operating patterns

• UAV activity coinciding with major events

• Observation of security infrastructure

• Activity occurring during changes in routine operations

Viewed individually, these indicators may not be significant.

Viewed collectively, they may provide valuable context.

A Threat-Informed Response

Protective security programs should consider UAV activity as part of the broader threat environment.

A threat-informed approach may include:

Understanding the Threat

Identify threat actors who may possess the capability, intent and opportunity to utilise UAVs.

Managing the Risk

Assess how UAV activity could affect people, information, assets and operations.

Building Resilience

Develop procedures, awareness programs and response arrangements that support organisational preparedness.

Importantly, UAV security should not be treated solely as a technology problem.

It is fundamentally a threat assessment and risk management issue.

The Montane UAV Threat Spectrum

The Montane UAV Threat Spectrum demonstrates how unmanned aerial systems may be used across a continuum ranging from legitimate recreational and commercial activities through to hostile reconnaissance, criminal enablement and support to strategic or high-consequence threat activity.

Understanding where UAV activity sits on this spectrum helps organisations implement proportionate protective security measures and make informed security decisions.

The Spectrum is a threat-informed framework for assessing UAV activity based on capability, intent, opportunity and consequence.

Supporting the Montane Threat Actor Framework

UAV-enabled reconnaissance may be relevant across several categories of the Montane Threat Actor Framework.

Strategic Threat Actors

Potential intelligence collection, surveillance and information-gathering activities.

Motivated Threat Actors

Issue-motivated groups or insiders seeking to collect information or support campaigns.

Criminal Opportunity Threat Actors

Criminal actors seeking information to support theft, fraud or other unlawful activity.

Apex Threat Actors

Individuals or groups conducting reconnaissance in preparation for high-consequence attacks.

Understanding who may be operating a UAV is often more important than understanding the UAV itself.

Final Thoughts

Recent reports of unauthorised UAV activity around sensitive Australian defence facilities have reinforced an important reality for security practitioners: understanding the platform is less important than understanding the operator and their intent. Reports relating to drone incursions near RAAF Base Williamtown have highlighted the growing security implications of increasingly capable and accessible unmanned aerial systems.

The Montane UAV Threat Spectrum demonstrates that UAV activity exists across a continuum ranging from legitimate recreational and commercial applications through to hostile reconnaissance, criminal enablement and support to strategic or high-consequence threat activity.

Importantly, not every drone represents a threat.

However, organisations should recognise that UAVs can provide threat actors with an increasingly effective means of collecting information, identifying vulnerabilities, validating targets and supporting future hostile activity.

The key protective security challenge is therefore not the UAV itself.

The challenge is understanding:

• Who is operating it

• Why they are operating it

• What information or capability they are seeking

• How that activity may support future threat actions

As capability, intent, opportunity and consequence increase, so too does the potential impact on people, information, assets and operations.

This is where the Montane UAV Threat Spectrum provides value. By viewing UAV activity through a threat-informed lens, organisations can move beyond simply detecting drones and begin assessing how UAV activity may relate to hostile reconnaissance, criminal activity, intelligence collection or attack planning.

Effective security is not achieved by focusing solely on technology.

It is achieved by understanding how threat actors may exploit technology to advance their objectives.

Because understanding the threat remains the first step towards managing risk and building resilience.

Ready to take the next step?

Contact Us ➜  

---

Montane Protective Security

UNDERSTAND THE THREAT.

MANAGE THE RISK.

BUILD RESILIENCE.

Safeguarding Today's Priorities.

Preparing for Tomorrow's Challenges.

Threat-informed protective security, risk management and resilience solutions.

---