A Cyber-Physical Risk Assessment Approach for Internet of Things Enabled Transportation Infrastructure

Abstract

A critical transportation infrastructure integrated with the Internet of Things based wireless sensor network, operates as a cyber-physical system. However, the new form of IoT enabled transportation infrastructure is susceptible to cyber-physical attacks in the sensing area, due to inherent cyber vulnerabilities of IoT devices and deficient control barriers that could protect it. Traditional risk assessment processes, consider the physical and cyber space as isolated environments, resulting in IoT enabled transportation infrastructure not being assessed by stakeholders (i.e., operators, civil and security engineers) for cyber-physical attacks. In this paper, a new risk assessment approach for cyber-physical attacks against IoT based wireless sensor network is proposed. The approach relies on the identification and proposal of novel cyber-physical characteristics, in the aspect of threat source (e.g., motives), vulnerability (e.g., lack of authentication mechanisms) and types of physical impacts (e.g., casualties). Cyber-physical risk is computed as a product of the level and importance of these characteristics. Monte Carlo simulations and sensitivity analysis are performed to evaluate the results of an IoT enabled bridge subjected to cyber-physical attack scenarios. The results indicate that 76.6% of simulated cases have high-risk and control barriers operating in physical and cyber space can reduce the cyber-physical risk by 71.8%. Additionally, cyber-physical risk differentiates when the importance of the characteristics that are considered during risk assessment is overlooked. The approach is of interest to stakeholders who attempt to incorporate the cyber domain in risk assessment procedures of their system.

Smart Cities and Urban Energy Planning: An Advanced Review of Promises and Challenges

“…This emphasizes the interconnectedness of buildings and urban design and planning, showcasing the seamless integration of energy efficiency from individual buildings to the urban landscape. In the realm of smart transportation and mobility, technologies such as ITS, IoT-enabled solutions, V2G, and EVs represent a broader application of intelligent systems and technologies [106,123,124,145]. Grid modernization and smart grids mark the convergence of these initiatives.…”

“…V2G technology, for instance, demands secure bidirectional communication between EVs and the grid to prevent unauthorized access or control, which is crucial to safeguard against manipulation of charging cycles that could damage the grid and deplete vehicle battery life [135,144]. Moreover, as transport networks evolve to become more automated and IoT-based, they become increasingly susceptible to cyber-physical threats [145,146]. A single breach in such an interconnected system could have cascading effects, potentially disrupting traffic management systems and leading to road chaos, accidents, and injuries [147][148][149][150].…”

An Integrated Approach of Threat Analysis for Autonomous Vehicles Perception System

“…This factor contains controllability (C USecX ) and detectability (D USecX ) of attacks and values from 0 to 2 are assigned for different levels of these parameters, as illustrated in Eq. ( 3) [73], [77], [78]. The mitigation factor is a critical component in a risk value analysis, and most previous research did not consider this factor in their modeling.…”

Risk Assessment Model and Sensitivity Analysis of Ordinary Arterial Highways Based on RSR–CRITIC–LVSSM–EFAST

“…Road risk object identification [19][20][21][22][23][24][25][26] SVD SVD is a widely used algorithm in the field of machine learning. It is used for feature decomposition in dimensionality reduction algorithms.…”

“…Most of the road safety risk assessment and operation management methods use the MCDM algorithm [18] (multi-criteria decision-making). Among them, the analytic hierarchy process, the fuzzy comprehensive evaluation method, and TOPSIS are the most widely used methods in multi-objective decision-making, but these methods have certain limitations when used alone [19][20][21][22]. At the same time, in terms of project operation management, data development analysis (DEA) was found to be the most effective operation management method for mine blasting [23].…”