A Study on Threat Modeling in Smart Greenhouses
محتوى المقال
الملخص
In the era of agriculture 4.0, cutting-edge technologies including Information and communication technology (ICT) is being introduced into traditional agriculture. As farm intelligence emerges as a key area of smart agriculture, the scope of agriculture has expanded from the seed industry to distribution and logistics, however the area that is still most directly connected to the physical agricultural environment is smart farming. Cybersecurity incidents or cybercrimes in smart farming can directly damage crops and harm human safety. Research on individual technical elements that constitute smart farming has been ongoing for a long time relatively, however it has not been long since the work of systematically identifying and classifying threats to smart agriculture as a whole. In this study, STRIDE threat modeling is used to identify cyber threats to greenhouse and make system design more robust. Through this work, we have derived 126 threats and have created 4 types of attack trees. It will be the basis to allow systematic threat classification more clearly in smart greenhouse.
الكلمات المفتاحية
Smart Agriculture، Smart Farming، Cybercrime، Cyber-attack، Internet of Things، Threat Modeling
التنزيلات
المراجع
N. Zhang, M. Wang and N. Wang, “Precision agriculture – a worldwide overview,” in Comput. Electron. Agric., vol. 36, no. 2-3, pp. 113-132, Nov. 2002, doi: 10.1016/S0168-1699(02)00096-0.
P. Reidsma, et al., “Sustainable agricultural development in a rural area in the Netherlands? Assessing impacts of climate and socio-economic change at farm and landscape level,” in Agric. Syst., vol. 141, pp. 160-173, Dec. 2015, doi: 10.1016/j.agsy.2015.10.009.
M. Kernecker, A. Knierim, A. Wurbs, T. Karus and F. Borges, “Experience versus expectation: farmer’s perceptions of smart faming technologies for cropping systems across Europe,” in Precis. Agric., vol. 21, no. 1, pp. 34-50, Apr. 2020, doi: 10.1007/s11119-019-09651-z.
S. Sontowski, et al., “Cyber Attacks on Smart Farming Infrastructure,” in Proc. 6th IEEE Int. Conf. Collab. Internet Comput. (IEEE CIC 2020), Oct. 2020.
S. Linsner, R. Varma and C. Reuter, “Vulnerability Assessment in the Smart Farming Infrastructure through Cyberattacks,” in 38th GIL-Jahrestagung in Wien: Digitalisierung für landwirtschaftliche Betriebe in kleinstrukturierten Regionen - ein Widerspruch in sich, Wein, Austria, Feb. 18-19, 2019. pp. 119-124.
A. Boghossian, et al., “Threat to Precision Agriculture,” 2018 Analytic Exchange Program, USA, 2018.
M. M. Jahn el at., “ Cyber Risk and Security Implications in Smart Agriculture and Food Systems,” Jan. 2019. [Online]. Available: https://jahnresearchgroup.webhosting.cals.wisc.edu/wp-content/uploads/sites/223/2019/01/Agricultural-Cyber-Risk-and-Security.pdf (accessed Nov. 14, 2019).
I. S. Kocher, C.-O. Chow, H. Ishii and T. A. Zia, “Threat Models and Security Issues in Wireless Sensor Networks,” in Int. J. Comput. Theory Eng., vol. 5, no. 5, pp. 830-835, Oct. 2013, doi: 10.7763/IJCTE.2013.V5.806.
J. West, “A Prediction Model Framework for Cyber-Attacks to Precision Agriculture Technologies,” in J. Agric. Food Inf., vol. 19, no. 4, pp. 307-330, Feb. 20, 2018, doi: 10.1080/10496505.2017.1417859.
K. Kim, el at., “What’s your protocol: Vulnerabilities and security threats related Z-Wave protocol,” in Pervasive Mob. Comput., vol. 66. July 2020, doi: 10.1016/j.pmcj.2020.101211.
K. K. Gon and K. S. Hoon, “Using Threat Modeling for Risk Analysis of SmartHome,” in Proc. Symp. Korean Inst. Commun. Inf. Sci., 2015, pp. 378-379.
I.-K. Oh, et al. “Derivation of Security Requirements of Smart TV Based on STRIDE Threat Modeling,” in J. Korea Inst. Inf. Secur. Cryptol., vol. 30, no. 2, pp. 213-230, 2020, doi: 10.13089/JKIISC.2020.30.2.213.
Framework of smart greenhouse service, Rec. ITU-T Y.4466, International Telecommunication Union, Geneva, Switzerland, Jan. 2020. [Online]. Available: http://handle.itu.int/11.1002/1000/14169
M. S. Farooq, S. Riaz, A. Abid, K. Abid and M. A. Naeem, "A Survey on the Role of IoT in Agriculture for the Implementation of Smart Farming," in IEEE Access, vol. 7, pp. 156237-156271, 2019, doi: 10.1109/ACCESS.2019.2949703.
B. E. Storm, A. Applebaum, D. P. Miller, K. C. Nickels, A. G. Pennington and C. B. Thomas, “MITRE ATT&CKTM: DESING AND PHILOSOPHY,” MITRE Corp., McLean, VA, USA, Tech. Rep. July 2018.
L. Kohnfelder and P. Garg, “The threats to our products,” Apr. 1, 1999. [Online]. Available: https://adam.shostack.org/microsoft/The-Threats-To-Our-Products.docx
A. Shostack, Threat Modeling: Designing for Security, Indianapolis, IN, USA: Wiley, 2014.
M. Kamal, “ICS Layered Threat Modeling,” SANS Institute Reading Room, Jan. 22, 2019. [Online]. Available: https://www.sans.org/reading-room/whitepapers/ICS/ics-layered-threat-modeling-38770
A. S. Elmaghraby and M. M. Losavio, “Cyber security challenges in Smart Cities: Safety, security and privacy,” in J. Adv. Res., vol. 5, no. 4, pp. 491-497, July 2014, doi: 10.1016/j.jare.2014.02.006.
M. A. Hussain, H. Jin, Z. A. Hussien, Z. A. Abduljabbar, S. H. Abbdal and A. Ibrahim, "DNS Protection against Spoofing and Poisoning Attacks," 2016 3rd Int. Conf. Inf. Sci. Control Eng. (ICISCE), Beijing, 2016, pp. 1308-1312, doi: 10.1109/ICISCE.2016.279.
S. Neethirajan, “Recent advances in wearable sensors for animal health management,” in Sens. Bio-Sens. Res., vol. 12, pp. 15-29, Feb. 2017, doi: 10.1016/j.sbsr.2016.11.004.
State-Federal Animal Disease Traceability Working Group, “Animal Disease Traceability,” Animal and Plant Health Inspection Service, USA, Apr. 2018. [Online]. Available: https://www.aphis.usda.gov/publications/animal_health/adt-summary-program-review.pdf
Activeherd, “Livestock Tracking System,” NFC Group, 2018. [Online]. Available: https://www.tracks360.com/asset-tracking-solutions/assettracking-applications/livestock-tracking-system/
“World Trade Statistical Review,” World Trade Organization, 2017. [Online]. Available: https://www.wto.org/english/res_e/statis_e/wts2017_e/wts2017_e.pdf
N. Kshetri, "The simple economics of cybercrimes," in IEEE Secur. Priv., vol. 4, no. 1, pp. 33-39, Jan.-Feb. 2006, doi: 10.1109/MSP.2006.27.
J. A. López, H. Navarro, F. Soto, N. Pavón, J. Suardíaz and R. Torres, “GAIA2: A multifunctional wireless device for enhancing crop management,” in Agric. Water Manag., vol. 151, pp. 75-86, Mar. 31, 2015, doi: 10.1016/j.agwat.2014.10.023.
A. Kumar and P. Paul, "Security analysis and implementation of a simple method for prevention and detection against Evil Twin attack in IEEE 802.11 wireless LAN," 2016 Int. Conf. Comput. Tech. Inf. Commun. Technol. (ICCTICT), New Delhi, 2016, pp. 176-181, doi: 10.1109/ICCTICT.2016.7514574.
N. Pimple, T. Salunke, U. Pawar and J. Sangoi, "Wireless Security — An Approach Towards Secured Wi-Fi Connectivity," 2020 6th Int. Conf. Adv. Comput. Commun. Syst. (ICACCS), Coimbatore, India, 2020, pp. 872-876, doi: 10.1109/ICACCS48705.2020.9074350.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.