Drone Threat Evolution 

Introduction

A great deal has been written about how drones have changed since 2018. Most of it describes a battlefield, and most of it does not apply to an Australian airport, prison or port.

This page separates the two. What has genuinely changed for civilian sites in Australia, what has not, and which of the developments now driving vendor marketing are relevant to you.

We were involved in one of the first large-scale counter-drone deployments in this country, at the 2018 Commonwealth Games. That gives us a fixed reference point for what this problem looked like at the start, and a basis for saying which parts of it have actually moved.

2018 As a Baseline

In 2018 the drone problem was, for most Australian sites, a problem of surprise.

The aircraft were consumer models with limited range and modest cameras. Almost all of them broadcast a control signal that could be detected. Very few operators were deliberately attempting to avoid detection, because very few sites were looking. Most incursions were careless rather than hostile.

The defences were immature to match. Detection equipment was expensive, largely military in origin, and rarely deployed outside major events. Very few Australian organisations had ever measured their own airspace, and there was almost no operational experience of what normal looked like at a given site.

The Gatwick closure in December that year changed the conversation more than any technical development did. It established the cost of a drone incursion in terms an executive could understand, and it is the reason many organisations first asked the question.

What Has Changed

Drone activity became normal

The single biggest change is volume. Commercial and recreational drone use has grown enormously — surveying, agriculture, inspection, real estate, media, emergency services. Aircraft that would have been notable over a site in 2018 are now routine.

What this means for your site: detection is no longer the hard part. Interpretation is. A system that alerts on every airframe within range produces an unusable volume of alarms, and the operational question has shifted from “is there a drone” to “is this one different from the forty we saw last month”. That requires a baseline, which is exactly what most sites do not have.

Remote identification arrived

Regulators internationally have moved toward requiring drones to broadcast identifying information, and manufacturers have built it in. Where it works, it is genuinely useful: a cooperative aircraft can announce what it is and where its operator is standing.

What this means for your site: Remote ID resolves a large share of your alerts quickly and cheaply, because most activity over your site is lawful and cooperative. It does nothing whatsoever about an operator who does not want to be identified. Treat it as a filter for the benign majority, not as a security control.

Off-the-shelf aircraft closed the capability gap

The consumer aircraft available today do, as standard, what specialised equipment did in 2018 — longer endurance, greater range, far better cameras, stabilised night imaging, obstacle avoidance and more resilient control links.

What this means for your site: the standoff distance has grown. In 2018 someone wanting usable imagery of your site generally had to be close enough to be seen. That is no longer true, and perimeter-focused security assumptions built before about 2020 are usually out of date. It also means an ordinary aircraft bought at a retail store is now a capable surveillance platform, without any modification at all.

Non-cooperative aircraft became a real category

In 2018 a drone that could not be identified by its control signal was a rarity. Today, aircraft configured to avoid identification are an established category rather than a theoretical one, and the knowledge required to configure them has spread well beyond specialists.

What this means for your site: radio-frequency detection alone gives you a less complete picture than it did five years ago. It remains the most useful single layer, and for most Australian sites it still accounts for the overwhelming majority of activity — but a capability specified on the assumption that everything emits a detectable signal has a gap in it. This is the main reason we now recommend considering more than one detection layer at sites with a genuine security exposure.

The launch point assumption broke

Incidents internationally have repeatedly involved aircraft launched from places the site owner had not considered — from vessels offshore, from vehicles, from adjacent properties, and in some cases from inside the perimeter.

What this means for your site: a threat assessment that only considers the airspace above your fence line is incomplete. The useful questions are where someone could stand, what they could see from there, and how much warning that position would give you. For ports, maritime approaches deserve specific attention. For large sites, so does the ground you already control.

What is Coming, and What is Probably Not 

The Threat Has Changed 

The threat has changed, but not in the direction most marketing suggests.

For Australian civilian sites the shift has been from rare and obvious to constant and ordinary — which makes knowing your own baseline more valuable than it was in 2018, not less.

Tell us the site and the concern. If an assessment is not what you need yet, we will say so.