Analysis of Intentional Electromagnetic Interference Effects on PWM Command Interpretation in UAV BLDC Motor Controllers

Multirotor unmanned aerial vehicles (UAVs) rely on electronic speed controllers (ESCs) that decode motor commands from pulse-width modulation (PWM) signals, making the flight-controller-to-ESC command path a physical-layer attack surface for intentional electromagnetic interference (IEMI). This paper presents a mechanism-based analysis of IEMI attacks that induce motor stoppage in UAV brushless DC motor controllers. We develop a timing-error model in which a sinusoidal disturbance on the PWM line shifts the detected edge instants and drives the decoded pulse width into stop-equivalent regimes, and we show that the disturbance reaching the ESC’s thresholding node is shaped by a frequency-selective cascade of the PWM cable’s coupling response and the ESC’s input-path transfer function. We experimentally characterize this model on five commercial ESCs through conducted and radiated injection. The measured thresholds differ by more than an order of magnitude across ESCs and are reordered between frequency bands and injection modes; comparing conducted and radiated results allows us to attribute these differences primarily to the cable coupling response and reveals cases where it either hides or amplifies an ESC’s susceptibility. The susceptible frequency also shifts with PWM cable length in qualitative agreement with transmission-line resonance, confirming that observed radiated susceptibility reflects the joint design of ESC and cable rather than a single intrinsic property. The cable lengths examined here (45–125 cm) are longer than those of compact multirotors and were chosen to place resonances within our antenna’s band; we discuss the implications of this choice and identify shorter, deployment-realistic cables as a priority for future work.