Cyber Attacks on Smart Farming Infrastructure

Sontowski, Sina; Gupta, Maanak; Chukkapalli, Sai Sree Laya; Abdelsalam, Mahmoud; Mittal, Sudip; Joshi, Anupam; Sandhu, Ravi

doi:10.1109/cic50333.2020.00025

Cited by 91 publications

(50 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…These connected yet distributed systems are supporting services in domains including manufacturing, energy, transportation [12,13], medical, city, building, and agriculture [14,15], offering data driven and intelligent AI driven efficient environments. With emergence of fully automated manufacturing and CPS domains, trustworthiness and security when considering a action related to AI and operations in the system is critical.…”

Section: Access Control Requirements In Smart and Connected Ecosystemsmentioning

confidence: 99%

Towards Activity-Centric Access Control for Smart Collaborative Ecosystems

Gupta

Sandhu

2021

Proceedings of the 26th ACM Symposium on Access Control Models and Technologies

Self Cite

View full text Add to dashboard Cite

The ubiquitous presence of smart devices along with advancements in connectivity coupled with the elastic capabilities of cloud and edge systems have nurtured and revolutionized smart ecosystems. Intelligent, integrated cyber-physical systems offer increased productivity, safety, efficiency, speed and support for data driven applications beyond imagination just a decade ago. Since several connected devices work together as a coordinated unit to ensure efficiency and automation, the individual operations they perform are often reliant on each other. Therefore, it is important to control what functions or activities different devices can perform at a particular moment of time, and how they are related to each other. It is also important to consider additional factors such as conditions, obligation or mutability of activities, which are critical in deciding whether or not a device can perform a requested activity. In this paper, we take an initial step to propose and discuss the concept of Activity-Centric Access Control (ACAC) for smart and connected ecosystem. We discuss the notion of activity with respect to the collaborative and distributed yet integrated systems and identify the different entities involved along with the important factors to make an activity control decision. We outline a preliminary approach for defining activity control expressions which can be applied to different smart objects in the system. The main goal of this paper is to present the vision and need for the activity-centric approach for access control in connected smart systems, and foster discussion on the identified future research agenda. CCS CONCEPTS• Security and privacy → Security requirements; Access control; Authorization.

show abstract

Section: Access Control Requirements In Smart and Connected Ecosystemsmentioning

confidence: 99%

Towards Activity-Centric Access Control for Smart Collaborative Ecosystems

Gupta

Sandhu

2021

Proceedings of the 26th ACM Symposium on Access Control Models and Technologies

Self Cite

View full text Add to dashboard Cite

show abstract

“…The vulnerability of Wireless Local Area Networks (WLANs) to direct cyber-attacks is already a generally recognized problem across all industries [66]. Demonstration of the damage potential in a Denial of Service (DoS) attack has been shown in the research of Sontowski et al, by disrupting in-field sensors and obstructing device network connectivity in smart farm operations [67].…”

Section: Prospective Areas For Can Technology Inclusionmentioning

confidence: 99%

An Overview of CAN-BUS Development, Utilization, and Future Potential in Serial Network Messaging for Off-Road Mobile Equipment

Boland¹,

Burgett²,

Etienne³

et al. 2021

Technology in Agriculture

View full text Add to dashboard Cite

A Controller Area Network (CAN) is a serial network information technology that facilitates the passing of information between Electronic Control Units (ECUs, also known as nodes). Developed by BOSCH in 1986 to circumvent challenges in harness-connected systems and provide improved message handling in automobiles, the CAN interface allows broadcast communication between all connected ECUs within a vehicle’s integrated electronic system through distributed control and decentralized measuring equipment. Since the early uses of CAN in car engine management, improvements in bitrate, bandwidth, and standardization protocols (such as ISO 11898 and SAE J1939) have led to CAN utilization in various industry applications, such as factory automation, aviation, off-highway vehicles, and telematics. Alternative wired and wireless technologies have been used to connect and network with CAN-BUS (such as Ethernet, Bluetooth, Wi-Fi, ZigBee, etc.), further expanding the diversity of applications in which the serial network is employed. In this chapter, the past, present, and prospective future developments of CAN technology, with focused attention on applications in the agricultural and off-road sectors are broadly examined. CAN technology fundamentals, standards creation, modern day uses, and potential functionalities and challenges specific to CAN in the wake of precision agriculture and smart farming are discussed in detail.

show abstract

“…Table 5 lists well-known security threats discussed in the literature [15][16][17][18][19][20][21][22][23].…”

Section: Definition Of System Threatsmentioning

confidence: 99%

Security Assessment of Agriculture IoT (AIoT) Applications

et al. 2021

View full text Add to dashboard Cite

Cybersecurity is an important field in our digital world. It protects computer systems and communication networks against theft or sabotage of information to guarantee trouble-free operation in a trustworthy working environment. This article gives an overview of a cybersecurity assessment process and an appropriate Cybersecurity Management (CSM) implementation for future digital agriculture applications. The cybersecurity assessment follows the IEC 62443 cybersecurity standard for Industrial Automation Control Systems (IACS), adapted to Agriculture Automation Control Systems (AACS). However, the research results showed application differences; thus, an expansion of the standard is necessary to fill the existing open security gaps in agriculture. Agriculture differs from industrial control systems because of the outdoor located field area, which requires other forms of security. An appropriate cybersecurity standard for the agriculture domain is not currently available. However, such a standard will be necessary to define generally applicable procedures to protect agricultural assets against cyberattacks. The cybersecurity standards and regulations existing today (2021) are not sufficient for securing the agriculture domain against new and domain-specific cyberattacks. This article describes some of the cyber vulnerabilities identified and provides initial recommendations for addressing them.

show abstract

Cyber Attacks on Smart Farming Infrastructure

Cited by 91 publications

References 34 publications

Towards Activity-Centric Access Control for Smart Collaborative Ecosystems

Towards Activity-Centric Access Control for Smart Collaborative Ecosystems

An Overview of CAN-BUS Development, Utilization, and Future Potential in Serial Network Messaging for Off-Road Mobile Equipment

Security Assessment of Agriculture IoT (AIoT) Applications

Contact Info

Product

Resources

About