The Paradigm Shift in Aerial Combat: Autonomous Drone-on-Drone Warfare and the Future of Layered Interception

Full report

On this page

1. Introduction: The Evolution of Autonomous Aerial Warfare

The character of modern warfare is undergoing a fundamental transformation, driven by the unprecedented proliferation of unmanned aerial systems (UAS) and the rapid maturation of artificial intelligence. Initially utilized for asymmetrical reconnaissance and targeted strikes, drones have now saturated the airspace to such a degree that a new paradigm has emerged: autonomous drone-on-drone warfare. This evolution is necessitated by the physical and cognitive limitations of human operators, the crippling effects of modern electronic warfare (EW), and the sheer volume of low-cost aerial threats that overwhelm traditional air defense architectures1. Historically, drone warfare evolved quickly through the 2010s and 2020s, with nations such as Azerbaijan, China, Iran, Russia, Turkey, and Ukraine leveraging these systems with increased ubiquity1. By 2019, operational unmanned combat aerial vehicles (UCAVs) were fielded by numerous nations, fundamentally altering intelligence, surveillance, target acquisition, and reconnaissance (ISTAR) missions1. However, the strategic environment has shifted from remote-controlled operations to Lethal Autonomous Weapons Systems (LAWS) that utilize AI and pre-programmed algorithms to execute kill chains without human intervention1. As geopolitical conflicts demonstrate the strategic necessity of massed autonomous forces, global defense establishments are pivoting from human-in-the-loop systems to fully autonomous networks. The future of airspace denial is being defined by decentralized swarms capable of executing complex target allocation, navigating GPS-denied environments through visual-inertial odometry, engaging in aerial dogfights utilizing deep reinforcement learning, and deploying a spectrum of kinetic and non-kinetic interception mechanisms.

2. Strategic Posture and Organizational Realignment

The realization that low-cost, mass-produced drones can impose strategic-level effects has forced a massive organizational realignment within the world's leading military powers. The economic asymmetry of utilizing exquisite, high-cost interceptors to destroy cheap, attritable drones has rendered legacy air defense models unsustainable, driving a mandate for systemic innovation.

2.1 The Ukrainian Catalyst and the Vision of Human Replacement

The Russo-Ukrainian War has served as the primary crucible for autonomous drone warfare, demonstrating how drones have disrupted traditional military doctrines in a manner akin to the advent of gunpowder1. The strategic objective of the Ukrainian military has fundamentally shifted toward replacing human warfighters with autonomous unmanned systems in direct combat roles2. This vision aims to conserve human forces and circumvent biological limitations such as fatigue, stress, and the restricted capacity to process immense volumes of data2. In 2024 alone, Ukraine manufactured and assembled over 1.5 million first-person-view (FPV) drones and approximately 2 million total unmanned systems, achieving a domestic self-sufficiency rate of 96.2% for its deployed UAVs2. Because Russian electronic warfare creates a 60-kilometer-wide jamming strip along the front lines, severing the command link between drones and human operators, autonomy is no longer a luxury but a baseline operational requirement2. Ukrainian forces have deployed basic AI machine vision algorithms allowing drones to compare real-time sensor views with preloaded satellite data, executing final target approaches deep into enemy territory without human input2. Onboard standalone modules, utilizing compact, low-power chips, enable automatic target recognition (ATR) that can bypass camouflage and lock onto targets from distances up to two kilometers2. This localized AI processing elevates strike success rates from a manual average of 10–20% to approximately 70–80%2. The integration of these systems into platforms like the Delta system—which processes tens of terabytes of multi-modal data daily—creates a unified operational picture that relies on AI to synthesize intelligence, effectively replacing 99% of manual human labor in footage and acoustic analysis2. Furthermore, reports indicate that fully autonomous drones have already achieved lethality in combat; tests conducted two years prior demonstrated autonomous drones destroying designated targets, marking a highly significant threshold in the history of warfare4. Ukrainian forces have also pioneered hybrid deployments, such as strapping autonomous hornet drones to balloons that drift hundreds of kilometers before deploying AI terrain-guided software to hunt targets4.

2.2 The United States Replicator Initiative and JIATF 401

Observing the rapid commoditization of drones and the strategic damage inflicted by low-cost FPVs—such as Ukraine's Operation Spiderweb, which utilized 117 FPVs to inflict an estimated $7 billion in damage on Russian air missile carriers—the United States Department of Defense launched the Replicator initiative in August 20235. While Replicator 1 focused on fielding thousands of all-domain attritable autonomous systems to counter near-peer military mass, the subsequent phase, Replicator 2, explicitly pivots to countering the small UAS threat5. To operationalize this rapid fielding, the Pentagon established the Joint Interagency Task Force 401 (JIATF 401\) to centralize, accelerate, and coordinate counter-UAS procurement across all branches, moving away from fragmented, service-by-service acquisition models6. Bypassing traditional acquisition cycles—which can take up to 64 months simply to replace an SM-3 interceptor—JIATF 401 focuses on deploying layered, scalable technologies at the speed of relevance9. The urgency of this mission was underscored by the January 2024 drone attack on Tower 22 in Jordan, which resulted in the deaths of three U.S. service members due to gaps in drone identification and defensive equipment6. Consequently, JIATF 401 has mandated the deployment of low-collateral kinetic interceptors across all homeland installations, emphasizing systems that neutralize threats without generating explosive collateral damage12. This organizational shift acknowledges that securing domestic and forward-deployed airspace requires an adaptable marketplace of kinetic and non-kinetic interceptors, ready to integrate into an overarching command-and-control framework6. Future projections of this doctrine include the deployment of the LUCAS one-way attack drone, projected for 2025 at a unit cost of $35,000, and autonomous USVs like the Global Autonomous Reconnaissance Craft (GARC) slated for deployment in complex littoral engagements1.

3. Algorithmic Foundations of Autonomous Aerial Engagement

The transition from automated way-point flying to true autonomy in drone-on-drone combat relies on advanced algorithms capable of handling navigation, multi-agent coordination, and terminal interception guidance without human oversight.

3.1 Deep Reinforcement Learning for Aerial Dogfighting

Once an autonomous drone detects a threat, it must execute a highly complex interception. Traditional guidance laws, such as proportional navigation, often struggle with the non-linear aerodynamics and continuous three-dimensional action spaces required to intercept highly maneuverable, low-slow-small (LSS) drones13. Moreover, earlier deep reinforcement learning (DRL) models often required strict initial launch scenarios, such as perfectly constructed collision triangles, which are rarely available in dynamic combat environments13. Consequently, autonomous target interception is increasingly formulated as a Competitive Reinforcement Learning problem, typically modeled as a Partially Observable Markov Decision Process (POMDP)13. Utilizing simulators like the Harfang3D sandbox, autonomous UCAVs are trained to master a multi-stage "pursuit-lock-launch" policy15. During training, the RL agent attempts to maximize a reward signal based on minimizing the miss distance (typically targeting a lethal radius of under 5 meters) while remaining constrained by the aerodynamic overload of the airframe13. Recent breakthroughs involve Imitative Reinforcement Learning, which blends behavior cloning from expert pilot data with the autonomous exploration capabilities of RL15. This hybrid approach overcomes the weak exploration capabilities of pure RL in high-dimensional spaces15. Furthermore, researchers have introduced Recurrent Proximal Policy Optimization (RPPO), integrating Long Short-Term Memory (LSTM) networks with standard PPO algorithms13. The LSTM extracts hidden temporal information from the drone's continuous observation sequences, allowing the interceptor to anticipate evasive maneuvers without relying on a perfect initial launch angle13. Simulation experiments utilizing RPPO have demonstrated interception success rates exceeding 95.3% with an average miss distance of just 1.29 meters, showcasing strong generalization against previously unknown target maneuvers13. These RL models are also being applied as strategic decision-support systems. Rather than solely managing low-level flight actuators, deep RL agents are employed to prioritize interceptions across multiple effectors, evaluating the varying dangerosity of incoming swarm elements and allocating defensive assets to minimize damage to high-value target zones18.

3.2 Swarm Coordination: Consensus-Based Bundle Algorithm (CBBA)

When multiple autonomous interceptor drones are deployed against an incoming swarm, the defensive network must rapidly and efficiently assign specific targets to specific interceptors. Centralized assignment models are computationally heavy, suffer from high latency, and present a single point of failure20. To resolve this, researchers leverage the Consensus-Based Bundle Algorithm (CBBA), a decentralized, auction-based protocol designed precisely for dynamic multi-agent task allocation20. CBBA operates through two distinct, iterative phases that cycle across the swarm network:

1. Bundle Building Phase: Each drone greedily generates an ordered list (a "bundle") of target tasks based on a local scoring scheme. The drone calculates the marginal utility of intercepting a specific target, factoring in diminishing marginal gains, fuel constraints, and spatial proximity20.

2. Consensus Phase: Drones broadcast their bid vectors to neighboring units. Upon receiving peer data, the drones apply local deconfliction rules to resolve conflicting claims on the same target, ensuring that every target is assigned to exactly one agent without conflict20.

Because CBBA is decentralized and scales polynomially, it ensures conflict-free global task allocation even as new tasks dynamically enter the airspace20. However, in highly contested environments with massive swarm sizes, standard CBBA can suffer from bandwidth saturation. To address this, variants such as Asynchronous CBBA (ACBBA) allow for consistent handling of out-of-order messages and minimize communication overhead20. The most advanced iteration is the Two-Level Clustered CBBA (TLC-CBBA). In the first layer, the algorithm groups drones based on graph-theoretic centrality, designating group heads to manage inter-cluster communication, thereby mitigating network sparsity and redundancy24. In the second layer, a resource-balanced K-medoids clustering strategy refines the sub-clusters based on UAV resource features and spatial proximity24. This hierarchical approach dramatically outperforms standard CBBA in runtime, communication efficiency, and total task completion, making it the theoretical backbone for massive drone-on-drone fleet engagements24.

3.3 Navigation and State Estimation: Visual-Inertial Odometry

The execution of complex swarm logic and intercept maneuvers requires absolute spatial awareness. However, the battlefield is heavily subjected to electronic warfare, rendering GPS/GNSS navigation highly unreliable. In GPS-denied environments, autonomous interceptors rely on onboard sensor fusion, specifically Visual-Inertial Odometry (VIO)25. VIO systems fuse high-frequency acceleration and rotation data from an Inertial Measurement Unit (IMU) with optical data from onboard cameras25. While inexpensive and lightweight, IMUs suffer from time-varying biases that cause the accumulation of large drift in pose estimates over time26. To mitigate this during agile, high-speed dogfighting maneuvers, state-of-the-art algorithms couple model-based filters, such as the Multi-State Constraint Kalman Filter (MSCKF), with learning-based modules that utilize optical flow and thrust measurements to correct drift continuously25. Advanced implementations of Visual-Inertial Simultaneous Localization and Mapping (VI-SLAM) have proven capable of driving volumetric occupancy mapping directly on edge-compute hardware27. Researchers have demonstrated MAV systems utilizing purely passive visual sensors and IMUs to navigate autonomously through highly unstructured environments—such as dense forests with over 467 trees per hectare—at speeds of 3 meters per second without a single collision27. This level of robust, onboard state estimation is what allows autonomous interceptors to track high-speed adversarial targets through complex topographies while maintaining the continuous map representations necessary for path planning30.

4. Software Architectures and Runtime Assurance

The deployment of these complex algorithms requires robust, hardware-agnostic software architectures. The defense industry is moving away from bespoke, platform-locked software toward modular, open-architecture ecosystems that allow capabilities developed in simulation to port seamlessly to physical hardware.

4.1 Shield AI and the Hivemind Ecosystem

A premier example of this architectural paradigm is Shield AI's Hivemind, an end-to-end AI-enabled mission autonomy software stack31. Hivemind replaces traditional autopilots—which blindly follow pre-programmed waypoints—with an intelligent agent capable of sensing, deciding, and acting in real-time, independent of GPS or human communication links31. Hivemind operates through a composable framework where autonomous behaviors (e.g., zone reconnaissance, integrated air defense breach, beyond-visual-range strike, and read-and-react swarming) are trained using deep reinforcement learning in proprietary high-fidelity simulators32. These trained models are then ported to the Hivemind Edge software layer, which integrates with third-party hardware via a platform-agnostic middleware32. This approach allows the same core algorithmic intelligence to pilot small quadcopters (like the Nova 2), vertical takeoff and landing systems (like the V-BAT), and large-scale Collaborative Combat Aircraft (CCA)33. The efficacy of this system was publicly validated during late-2025 and early-2026 testing with the U.S. Navy. Integrating Hivemind onto the Kratos BQM-177A subsonic aerial target, Shield AI successfully flew autonomous missions within a Live-Virtual-Constructive (LVC) environment32. Operating alongside a virtual F-18 and constructive adversary aircraft, two Hivemind-controlled BQM-177As executed coordinated defensive behaviors, autonomously maneuvering to protect designated Combat Air Patrol (CAP) positions against encroaching threats32. This milestone proved that AI could handle complex manned-unmanned teaming (MUM-T) roles on fast-moving, tactically relevant platforms while adhering to the DoD's Autonomy Government Reference Architecture (A-GRA)32.

4.2 Multi-Monitor Runtime Assurance (MM-RTA)

A critical barrier to deploying fully autonomous interceptors is safety certification. An autonomous system operating at supersonic or high-subsonic speeds must be trusted to operate without causing unintended fratricide or collateral damage. In response, autonomy architectures employ Multi-Monitor Runtime Assurance (MM-RTA) frameworks34. The MM-RTA functions as an independent, deterministic safety layer positioned between the AI mission commander (such as Hivemind) and the aircraft's low-level flight control laws (AVCL)32. It continuously monitors the AI's commands against established kinematic constraints and airspace boundaries. If the AI issues a command that would result in a collision or an illegal maneuver, the MM-RTA overrides the AI, triggering deterministic safety protocols such as an Air Collision Avoidance System (ACAS) or Ground Collision Avoidance System (GCAS)34. Compliant with aviation standards such as ASTM F3269-21, this modular assurance architecture bridges the gap between probabilistic neural network outputs and deterministic safety requirements, enabling the eventual certification of autonomous platforms for widespread fleet integration34.

5. Modalities of Drone-on-Drone Interception

The physical neutralization of an adversary drone requires an interceptor tailored to the specific threat profile, speed, and operational environment. The counter-UAS market is broadly divided into kinetic systems (which rely on physical disruption) and non-kinetic systems (which rely on electronic, acoustic, or directed-energy disruption)36.

5.1 Net Capture and Low-Collateral Kinetic Systems

For environments where falling debris or explosive shrapnel poses unacceptable risks—such as urban centers, airports, or forward operating bases with dense personnel concentrations—net capture systems offer a highly effective, low-collateral solution36. The Fortem DroneHunter F700 exemplifies this approach. Operating autonomously via an onboard TrueView R20 radar, the F700 tracks its target and employs specialized net effectors based on the target's size38. For small Group-1 drones, the F700 fires a tethered net, ensnaring the target and autonomously towing it to a designated safe zone38. For larger, heavier Group-2 drones, it utilizes a "DrogueChute" net, which entangles the target and deploys a parachute, arresting the enemy drone's momentum and forcing a slow, predictable descent38. Beyond minimizing collateral damage, net capture preserves the enemy drone for forensic exploitation. Retrieving an intact drone allows intelligence personnel to analyze the unexploded payload, extract programmed flight paths, and identify the manufacturer or origin point39. Recognizing the domestic applicability of this technology, JIATF 401 initiated its Replicator 2 procurements by acquiring F700 systems for testing at U.S. installations7.

5.2 Kinetic Collision and Hit-to-Kill Mechanics

Kinetic collision, colloquially known as ramming, utilizes the interceptor's own mass and velocity to destroy the target37. Ukrainian defense contractors have heavily leaned into this methodology to counter the proliferation of Russian Shahed/Geran long-range attack drones. Systems like the jet-powered "Last Shadow T200" have demonstrated the ability to intercept targets at ranges exceeding 120 kilometers and speeds of 300 km/h40. Produced using rapid 3D printing techniques, these interceptors utilize AI-driven terminal guidance to lock onto targets and execute the final collision autonomously, mitigating the effects of Russian 'Shtora' systems designed to spoof video feeds40. Similarly, Anduril has developed the Anvil-M, a ground-launched rotary-wing interceptor that physically engages higher-end, fast-moving Group-2 threats based on cues from the Lattice AI network42. The preference for Hit-to-Kill (HTK) over traditional blast-fragmentation in certain scenarios stems from lessons learned during Operation Desert Storm. During ODS, proximity-fused fragmentation warheads often succeeded in damaging the aerodynamic surfaces of incoming Scud missiles, but failed to destroy the heavily armored warhead itself, allowing the payload to continue its ballistic trajectory and strike the target area44. HTK exchanges the semi-random spread of blast fragmentation for extreme precision; by directly transferring immense kinetic energy, HTK ensures the absolute pulverization of the enemy payload, which is particularly vital if the adversary drone is carrying chemical, biological, or deeply shielded explosive payloads1.

5.3 Blast-Fragmentation and Reusable Architectures

Despite the advantages of HTK, blast-fragmentation remains highly effective for broad area denial and destroying highly evasive targets where direct physical contact is mathematically difficult37. Traditional air defense interceptors utilize single-use rocket motors and blast-fragmentation warheads; however, the economic cost of launching a multi-million-dollar missile (such as a PAC-3 or SM-3) to destroy a $20,000 drone is strategically ruinous11. To invert this cost curve, systems like the Anduril Roadrunner-M introduce a paradigm-shifting concept: the reusable, VTOL (Vertical Take-Off and Landing) loitering interceptor45. Stored in environmentally controlled "Nest" enclosures, the Roadrunner-M is powered by twin thrust-vectoring turbojets, achieving high-subsonic speeds and high-G maneuverability45. When a threat is detected, the Roadrunner-M can be launched rapidly to investigate. If the threat is validated, it uses its high-explosive blast-fragmentation warhead to destroy the target46. Crucially, if the target is deemed a decoy, or if the engagement is aborted, the Roadrunner-M can autonomously return to base, land vertically, and be refueled for reuse at near-zero marginal cost46. By severing the link between interceptor launch and interceptor loss, the Roadrunner-M drastically increases the decision space for air defense commanders, allowing them to scramble massed interceptors at the first hint of danger without the financial penalty of wasting an exquisite munition on a false alarm46. The strategic value of this architecture was cemented in October 2024, when the Pentagon ordered over 500 Roadrunner-M systems for operational deployment45.

5.4 Non-Kinetic Airborne High-Power Microwave (HPM)

As adversaries transition from deploying single drones to deploying coordinated swarms, the mathematical limits of one-to-one kinetic interception become apparent. A swarm of fifty attack drones would rapidly exhaust the magazine depth of traditional defensive batteries. To address the swarm threat, the defense industry is miniaturizing directed energy weapons for airborne deployment. Lockheed Martin’s MORFIUS X-Rotor is a prime example of an airborne High-Power Microwave (HPM) counter-drone system49. Launched from the ground and capable of vertical recovery, MORFIUS carries a payload that fires directed electromagnetic pulses, instantly overheating and frying the electronic circuit boards of targeted drones50. Unlike kinetic effectors that trade themselves for a single target, the MORFIUS X-Rotor can execute "one-to-many" engagements, reportedly neutralizing upwards of fifty adversary drones in a single sortie before returning to base for reuse50. Because HPM systems neutralize targets by disrupting electronics rather than causing physical explosions, they minimize the risk of explosive collateral damage, making them highly suitable for defending urban areas or critical infrastructure53. Other systems, such as the Epirus Leonidas, utilize software-defined, solid-state HPM technology to generate long-pulse waves that provide unmatched counter-electronics effects55. This transition to directed energy represents the ultimate scalable response to massed autonomous threats, providing an incredibly low cost-per-kill metric50.

6. Vulnerabilities: Adversarial Machine Learning in Autonomous Warfare

While the shift toward autonomous, AI-driven interception offers immense operational advantages, it simultaneously introduces novel vectors of algorithmic vulnerability. Deep Neural Networks (DNNs) utilized for visual target tracking, acoustic detection, and autonomous navigation are inherently susceptible to Adversarial Machine Learning (AML) attacks, exposing autonomous fleets to mission-critical failures and safety breaches59.

6.1 Attacks on Visual and Multimodal Tracking Systems

Autonomous interceptors rely heavily on computer vision to detect, track, and physically engage dynamic targets. Adversaries can exploit these neural networks by introducing carefully engineered, imperceptible perturbations into the visual data stream, or by physically deploying adversarial patches on a drone's fuselage63. These adversarial samples trick the neural network into misclassifying the object or failing to detect it entirely63. Because visual object tracking involves continuous spatio-temporal localization, successful adversarial attacks must break the temporal consistency of the tracker across multiple consecutive frames60. To counter modern multi-modal trackers that fuse standard RGB camera data with high-temporal-resolution Event streams, researchers have developed cross-modal adversarial attack algorithms60. By injecting gradient-guided spatial perturbations into discrete Event voxels and optimizing adversarial loss on the RGB frames, attackers can generate a universal cross-modal perturbation that drastically degrades the performance of state-of-the-art Siamese network-based trackers60. Attacks can be executed as "white-box" (where the attacker knows the exact parameters and architecture of the victim's neural network) or "black-box" (where the attacker relies on transferability to fool an unknown model)63. Advanced techniques, such as the Dense Adversary Generation (DAG) and the Unified and Efficient Adversary (UEA) framework, utilize Generative Adversarial Networks (GANs) to compute optimal noise distributions across multi-scale feature maps63. By doing so, the adversarial patch remains scale-invariant and highly stealthy, effectively blinding the interceptor's object detection models even during high-speed approaches63.

6.2 Data Poisoning, Sensor Spoofing, and Defensive Mitigations

Beyond visual tracking, acoustic localization systems used by ground-based counter-UAS sensors are vulnerable to Projected Gradient Descent (PGD) attacks. By broadcasting adversarial audio noise, attackers can degrade the acoustic sensor's ability to classify the unique acoustic signature of a drone platform, generating false positives or masking an approach61. Furthermore, defensive VIO systems can be compromised if the visual data fed into the odometry algorithm is spoofed or radically altered by adversarial light projections or lasers, causing the drone to lose its spatial orientation25. In a documented simulation of this vulnerability, researchers successfully used Reinforcement Learning to train an "attacker" drone to position itself in front of a delivery drone's sensors. By spoofing the target's obstacle avoidance system (ACAS), the attacker safely forced the autonomous drone to alter its trajectory, effectively hijacking it into a designated interception zone without firing a shot68. To defend against these vectors, engineers are implementing passive detection methods. One highly effective technique involves extracting attribution maps using model visualization technology62. Because adversarial perturbations markedly alter the attribution mapping of a clean image, training a secondary classifier on these attribution maps allows the drone's processor to differentiate between genuine images and adversarial examples (such as those generated by Carlini & Wagner or FGSM attacks), filtering out poisoned data before it triggers an erroneous kinematic response62.

7. Geopolitical and Strategic Implications

The operationalization of autonomous drone-on-drone warfare carries profound implications that extend far beyond the immediate tactical environment, reshaping defense economics and geopolitical strategy.

7.1 Supply Chain Vulnerabilities and the Rare Earth Nexus

The mass production of millions of autonomous interceptors and attack drones requires a massive industrial base capable of sustaining high-attrition warfare. A critical bottleneck in this supply chain is the reliance on rare earth materials required to manufacture the permanent magnets used in drone electric motors and high-performance sensors69. Acknowledging this vulnerability, the U.S. Department of Defense is aggressively investing in "mine-to-magnet" domestic supply chains to ensure continued access to these critical minerals, insulating the autonomous weapons pipeline from foreign embargoes or supply shocks69.

7.2 The Commoditization of Air Denial

Historically, achieving air superiority required dominant, technologically exquisite fighter fleets, effectively restricting this capability to wealthy superpowers. The advent of cheap, networked drone swarms and reusable AI interceptors fundamentally alters this dynamic. As highlighted by military analysts at the highest levels, states no longer need to fight for absolute air or maritime superiority; they merely need to deny it to the adversary70. The proliferation of affordable, autonomous counter-UAS systems commoditizes air denial70. This allows smaller or resource-constrained militaries to establish formidable anti-access/area denial (A2/AD) bubbles that make traditional manned assaults cost-prohibitive, shifting the geopolitical balance of power from aggressors to defenders70.

7.3 The Inversion of the Cost-per-Kill Metric

The fundamental crisis of the early drone age was economic: defending against a drone was orders of magnitude more expensive than deploying one4. The introduction of reusable autonomous interceptors (like the Roadrunner-M) and multi-engagement non-kinetic systems (like the MORFIUS X-Rotor) successfully inverts this curve46. By driving the marginal cost per kill down to the cost of aviation fuel, battery recharge, or software-defined electrical pulses, defenders can theoretically scale their defenses at parity with an attacker's ability to mass-produce cheap offensive drones46. This economic parity is essential for sustaining prolonged engagements in conflicts like Ukraine or potential future near-peer confrontations.

8. Conclusion

The era of human-operated, remote-controlled drone warfare is rapidly concluding, superseded by a highly complex, algorithmic battlespace dominated by fully autonomous systems. The integration of advanced computer vision, visual-inertial odometry for GPS-denied navigation, and deep reinforcement learning allows drones to navigate, hunt, and execute strikes at speeds and scales that exceed human cognitive capacity. To counter the existential threat posed by autonomous offensive swarms, global militaries are aggressively procuring layered interception networks. These networks combine the physical certainty of kinetic hit-to-kill systems and low-collateral net capture devices with the highly scalable, one-to-many defensive power of reusable blast-fragmentation and airborne high-power microwave platforms. As demonstrated by Ukraine's battlefield realities and the Pentagon's rapid acquisition initiatives like Replicator 2 and JIATF 401, the victor in future conflicts will not necessarily be the force with the most expensive singular platforms. Rather, it will be the force capable of manufacturing, deploying, and continually updating the most intelligent, resilient, and cost-effective autonomous networks. However, as reliance on these algorithmic models deepens, identifying and mitigating the severe vulnerabilities inherent in adversarial machine learning will become the next critical frontier in safeguarding national security and maintaining dominance in the airspace.

Works cited

1. Drone warfare \- Wikipedia, https://en.wikipedia.org/wiki/Drone\_warfare

2. https://www.csis.org/analysis/ukraines-future-vision-and-current-capabilities-waging-ai-enabled-autonomous-warfare

3. NATO to Deploy Battle-Tested AI Drone Fleet From Ukraine to Defend Eastern Flank Against Russia \- UNITED24 Media, https://united24media.com/world/nato-to-deploy-battle-tested-ai-drone-fleet-from-ukraine-to-defend-eastern-flank-against-russia-21640

4. Fully autonomous drones have killed human soldiers for the first time \- Reddit, https://www.reddit.com/r/technology/comments/1u2sam9/fully\_autonomous\_drones\_have\_killed\_human/

5. Replicator (United States military) \- Wikipedia, https://en.wikipedia.org/wiki/Replicator\_(United\_States\_military)

6. JIATF 401 Explained: How the Pentagon's New Counter-UAS Task Force Is Changing Drone Defense \- IDGA, https://www.idga.org/command-and-control/articles/jiatf-401-explained-how-the-pentagons-new-counter-uas-task-force-is-changing-drone-defense

7. Joint Interagency Task Force Announces First Replicator 2 Purchase to Counter Homeland Drone Threats \- US Army Military District of Washington, https://jtfncr.mdw.army.mil/News/Articles/Article-Display/Article/4377537/joint-interagency-task-force-announces-first-replicator-2-purchase-to-counter-h/

8. Pentagon's Replicator Initiative Sets Sights on Counter-UAS \- National Defense Magazine, https://www.nationaldefensemagazine.org/articles/2024/12/16/pentagons-replicator-initiative-sets-sights-on-counteruas

9. Joint Interagency Task Force Announces First Replicator 2 Purchase to Counter Homeland Drone Threats \- Department of War, https://www.war.gov/News/News-Stories/Article/Article/4377021/joint-interagency-task-force-announces-first-replicator-2-purchase-to-counter-h/

10. Pentagon Makes First Replicator 2 Counter-Drone Buy \- MeriTalk, https://www.meritalk.com/articles/pentagon-makes-first-replicator-2-counter-drone-buy/

11. Lockheed Martin unveils Morfius X-rotor, a new drone-killer for America's fight against swarms : r/LessCredibleDefence \- Reddit, https://www.reddit.com/r/LessCredibleDefence/comments/1v1i6ni/lockheed\_martin\_unveils\_morfius\_xrotor\_a\_new/

12. Pentagon wants 'low-collateral' drone interceptors at all U.S. military installations, task force director says | DefenseScoop, https://defensescoop.com/2026/01/28/drone-interceptors-us-military-installations-jiatf-401/

13. Deep Reinforcement Learning-Based Guidance Law for Intercepting Low–Slow–Small UAVs \- MDPI, https://www.mdpi.com/2226-4310/12/11/968

14. \[2603.16279\] Agile Interception of a Flying Target using Competitive Reinforcement Learning \- arXiv, https://arxiv.org/abs/2603.16279

15. An Imitative Reinforcement Learning Framework for Autonomous Dogfight \- arXiv, https://arxiv.org/html/2406.11562v2

16. An Imitative Reinforcement Learning Framework for Autonomous Dogfight \- arXiv, https://arxiv.org/html/2406.11562v1

17. Hierarchical Reinforcement Learning for Air Combat at DARPA's AlphaDogfight Trials, https://arxiv.org/html/2105.00990v3

18. Reinforcement Learning for Decision-Level Interception Prioritization in Drone Swarm Defense \- arXiv, https://arxiv.org/html/2508.00641v2

19. Intercepting Unauthorized Aerial Robots in Controlled Airspace Using Reinforcement Learning \- arXiv, https://arxiv.org/html/2407.06909v1

20. Consensus-Based Bundle Algorithm (CBBA) \- Aerospace Controls Laboratory \- MIT, https://acl.mit.edu/projects/consensus-based-bundle-algorithm

21. A Multi-Target Consensus-Based Auction Algorithm for Distributed Target Assignment in Cooperative Beyond-Visual-Range Air Combat \- MDPI, https://www.mdpi.com/2226-4310/9/9/486

22. Consensus-Based Bundle Algorithm (CBBA) \- Emergent Mind, https://www.emergentmind.com/topics/consensus-based-bundle-algorithm-cbba

23. Uav swarm mission planning in dynamic environment using consensus-based bundle algorithm \- Deakin University \- Figshare, https://dro.deakin.edu.au/articles/journal\_contribution/UAV\_swarm\_mission\_planning\_in\_dynamic\_environment\_using\_consensus-based\_bundle\_algorithm/20707315

24. A Two-Level Clustered Consensus-Based Bundle Algorithm for Dynamic Heterogeneous Multi-UAV Multi-Task Allocation \- PMC, https://pmc.ncbi.nlm.nih.gov/articles/PMC12610533/

25. Fusion of Optical Flow and Dead Reckoning Algorithms for UAV Navigation Without GPS \- TransNav Journal, https://www.transnav.eu/files/Fusion\_of\_Optical\_Flow\_and\_Dead\_Reckoning\_Algorithms\_for\_UAV\_Navigation\_Without\_GPS,1592.pdf

26. \[2210.15287\] Learned Inertial Odometry for Autonomous Drone Racing \- arXiv, https://arxiv.org/abs/2210.15287

27. \[2403.09596\] Scalable Outdoors Autonomous Drone Flight with Visual-Inertial SLAM and Dense Submaps Built without LiDAR \- arXiv, https://arxiv.org/abs/2403.09596

28. Drift-Corrected Monocular VIO and Perception-Aware Planning for Autonomous Drone Racing \- arXiv, https://arxiv.org/html/2512.20475v1

29. \[1712.00036\] Robust Stereo Visual Inertial Odometry for Fast Autonomous Flight \- arXiv, https://arxiv.org/abs/1712.00036

30. Scalable Autonomous Drone Flight in the Forest with Visual-Inertial SLAM and Dense Submaps Built without LiDAR \- arXiv, https://arxiv.org/html/2403.09596v1

31. Hivemind: Autonomous Drone & AI Pilot Software \- Shield AI, https://shield.ai/hivemind/

32. Shield AI demonstrates AI-enabled autonomy for future Collaborative Combat Aircraft, https://shield.ai/shield-ai-demonstrates-ai-enabled-autonomy-for-future-collaborative-combat-aircraft/

33. Hivemind for Operational, Read-and-React Swarming \- Shield AI, https://shield.ai/hivemind-for-operational-read-and-react-swarming/

34. Resilient Shield: Strengthening Hivemind for Safe, Real-World Flight, https://shield.ai/resilient-shield-strengthening-hivemind-for-safe-real-world-flight/

35. From Concept to Combat: How Hivemind SDK Powers Next-Gen Autonomy \- Shield AI, https://shield.ai/from-concept-to-combat-how-hivemind-sdk-powers-next-gen-autonomy/

36. Kinetic vs. Non-Kinetic Drone Mitigation: Key Differences | Anvil Labs, https://anvil.so/post/kinetic-vs-non-kinetic-drone-mitigation-key-differences

37. Four Major Types of Interceptor Drones Based on Kill Mechanism, https://www.hbsyzn.com/four-major-types-of-interceptor-drones-based-on-kill-mechanism.html

38. DroneHunter® F700 \- Fortem Technologies, https://fortemtech.com/products/dronehunter-f700/

39. What Is a Drone Interceptor? \- Fortem Technologies, https://fortemtech.com/blog/discussions/2022-08-08-introduction-to-drone-interceptors/

40. Ukraine unveils new 'drone hunter' built to take down Russian UAVs \- TVP World, https://tvpworld.com/94856614/ukraines-last-shadow-t200-interceptor-reaches-122-km-in-combat-trials

41. Ukraine starts testing interceptor drones that can bring down Russia's new jet-powered drones \- bne IntelliNews, https://www.intellinews.com/ukraine-starts-testing-interceptor-drones-that-can-bring-down-russia-s-new-jet-powered-drones-461113/

42. Anduril Announces Anvil-M Munition Variant Of Interceptor Platform, https://www.anduril.com/news/anvil-m-launch

43. Counter UAS \- Anduril, https://www.anduril.com/counter-uas

44. Why is Hit-To-Kill preferred over fragmentation warheads in missile defense? \- Reddit, https://www.reddit.com/r/LessCredibleDefence/comments/1kfrxnr/why\_is\_hittokill\_preferred\_over\_fragmentation/

45. Anduril Roadrunner \- Designation-Systems.Net, https://www.designation-systems.net/dusrm/app4/roadrunner.html

46. Anduril unveils Roadrunner & Roadrunner-M, https://www.anduril.com/news/anduril-unveils-roadrunner-and-roadrunner-m

47. Roadrunner \- Anduril, https://www.anduril.com/roadrunner

48. Anduril's Roadrunner is a unique reusable missile interceptor \- Sandboxx, https://www.sandboxx.us/news/andurils-roadrunner-is-a-unique-reusable-missile-interceptor/

49. Farnborough 2026 – Lockheed Martin develops counter-drone swarm system and low-cost interceptor \- Unmanned airspace, https://www.unmannedairspace.info/counter-uas-systems-and-policies/farnborough-2026-lockheed-martin-develops-counter-drone-swarm-system/

50. Lockheed Martin Unveils MORFIUS™ X-Rotor: The New Drone‑Killer Set to Power America's Fight Against Swarms, https://news.lockheedmartin.com/2026-07-20-Lockheed-Martin-Unveils-MORFIUS-TM-X-Rotor-The-New-Drone-Killer-Set-to-Power-Americas-Fight-Against-Swarms

51. Lockheed Martin Unveils MORFIUS™ X-Rotor: The New Drone‑Killer Set to Power America's Fight Against Swarms \- PR Newswire, https://www.prnewswire.com/news-releases/lockheed-martin-unveils-morfius-x-rotor-the-new-dronekiller-set-to-power-americas-fight-against-swarms-302829200.html

52. Lockheed's new drone killer packs a microwave weapon \- YouTube, https://www.youtube.com/watch?v=nAkLNHVJeF4

53. US Makes 'Microwave Cannon' That Kills 50 Drones In One Second | Vantage on Firstpost, https://www.youtube.com/watch?v=vDDXUbjWOCQ

54. Meet MORFIUS: The Drone Designed To Zap Other Drones \- TWZ, https://www.twz.com/news-features/meet-morfius-the-drone-designed-to-zap-other-drones

55. Epirus Leonidas High-Power Microwave: Directed Energy for cUAS, cUAS Swarms, Counter Electronics, https://www.epirusinc.com/electronic-warfare

56. Epirus \- Home of Leonidas, the Premier High-Power Microwave cUAS Swarm Solution, https://www.epirusinc.com/

57. Army Puts $43M Bet On Next Gen Leonidas High Power Microwave Counter Drone Tech, https://www.twz.com/land/army-puts-50m-bet-on-next-gen-leonidas-high-power-microwave-counter-drone-tech

58. Lockheed Martin's Morfius X-Rotor built to fry 50 enemy drones in one flight \- Defense News, https://www.defensenews.com/industry/techwatch/2026/07/20/lockheed-martins-morfius-x-rotor-built-to-fry-50-enemy-drones-in-one-flight/

59. Vision-Based Anti Unmanned Aerial Technology: Opportunities and Challenges \- arXiv, https://arxiv.org/html/2507.10006v1

60. Adversarial Attack for RGB-Event based Visual Object Tracking \- arXiv, https://arxiv.org/html/2504.14423v1

61. On Adversarial Attacks In Acoustic Drone Localization \- arXiv, https://arxiv.org/html/2502.20325v1

62. A Novel Adversarial Detection Method for UAV Vision Systems via Attribution Maps \- MDPI, https://www.mdpi.com/2504-446X/7/12/697

63. Adversarial Attack on Object Detection via Object Feature-Wise Attention and Perturbation Extraction \- SciOpen, https://www.sciopen.com/article/10.26599/TST.2024.9010029

64. Visual Adversarial Attacks and Defenses in the Physical World: A Survey \- arXiv, https://arxiv.org/html/2211.01671v6

65. One-Shot Adversarial Attacks on Visual Tracking With Dual Attention \- CVF Open Access, https://openaccess.thecvf.com/content\_CVPR\_2020/papers/Chen\_One-Shot\_Adversarial\_Attacks\_on\_Visual\_Tracking\_With\_Dual\_Attention\_CVPR\_2020\_paper.pdf

66. Drone Detection Radar | C-UAS Radar Technology Suppliers \- Defense Advancement, https://www.defenseadvancement.com/suppliers/drone-detection-radar/

67. Hall Lidar Launches Low Cost Acoustic Sensing Drone Detection Technology for Counter-UAS systems and Stealth Monitoring \- Autonomy Global, https://www.autonomyglobal.co/hall-lidar-launches-low-cost-acoustic-sensing-drone-detection-technology-for-counter-uas-systems-and-stealth-monitoring/

68. Autonomous drone interception with Deep Reinforcement Learning \- CEUR-WS.org, https://ceur-ws.org/Vol-3173/8.pdf

69. DOD Looks to Establish 'Mine-to-Magnet' Supply Chain for Rare Earth Materials, https://www.dodmantech.mil/News/News-Display/Article/3700059/dod-looks-to-establish-mine-to-magnet-supply-chain-for-rare-earth-materials/

70. 'It's alive': Biden-era Replicator drone initiative lives on as DAWG, looking at bigger UASs, https://breakingdefense.com/2025/12/its-alive-biden-era-replicator-drone-initiative-lives-on-as-dawg-looking-at-bigger-uass/