Vulnerability Assessment of Sensor Systems

Abstract

There are more and more applications of sensors in today’s world. Moreover, sensor systems are getting more complex and they are used for many high-risk security-critical purposes. Security assurance is a key issue for sensors and for other information technology (IT) products. Still, sensor security facilities and methodologies are relatively poor compared to other IT products. That is why a methodical approach to the sensor IT security is needed, i.e., risk management, implementation of countermeasures, vulnerability removal, and security evaluation and certification. The author proposes to apply the main security assurance methodology specified in ISO/IEC 15408 Common Criteria to solve specific security problems of sensors. A new Common Criteria compliant method is developed which specifies the vulnerability assessment process and related data in a structured way. The input/output data of the introduced elementary evaluation processes are modeled as ontology classes to work out knowledge bases. The validation shows that sensor-specific knowledge can be acquired during the vulnerability assessment process and then placed in knowledge bases and used. The method can be applied in different IT products, especially those with few certifications, such as sensors. The presented methodology will be implemented in a software tool in the future.

The Role of Information and Communication Technology in Climate Change Mitigation and Adaptation.

“…This predictive capability ensures that new infrastructures are 'climateproofed' from the onset (Azevedo de Almeida and Mostafavi, 2016). Furthermore, assessment tools, often sensor-driven, can evaluate the current state of infrastructure, detecting vulnerabilities (Bialas, 2019;Soga and Schooling, 2016). Drones equipped with high-resolution cameras can inspect structures like bridges or dams, identifying areas of wear and tear that might be exacerbated by climate impacts (Ridolfi et al, 2017).…”

Vulnerability and risk assessment for operating system (OS) with framework STRIDE: comparison between VulnOS and Vulnix

“…The risk value will then be used as a graph for easy viewing, which types of exploitation and vulnerability occur frequently. The assurance of an IT product means that the product meets its security objectives, that the security measures implemented by the product will be able to counter the threat as it occurs [26]- [28]. The frequency of penetration testing responds to many factors, from industry type to network technology and regulatory compliance.…”

Security and Privacy in Wireless Sensor Networks: Advances and Challenges

“…Reference [7] presents a vulnerability assessment of sensor systems. The authors develop a new Common Criteria-compliant method to specify the vulnerability assessment process and related data in a structured way for WSNs.…”