The Need for Threat Modelling in Unmanned Aerial Systems

Abdelkader Magdy Shaaban; Oliver Jung; Christoph Schmittner

doi:10.1007/978-3-031-40953-0_7

The Need for Threat Modelling in Unmanned Aerial Systems

Abdelkader Magdy Shaaban (Autor:in und Vortragende:r)
, Oliver Jung
, Christoph Schmittner

Publikation: Beitrag in Buch oder Tagungsband › Vortrag mit Beitrag in Tagungsband › Begutachtung

Abstract

Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.

Originalsprache	Englisch
Titel	Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE
Redakteure/-innen	Jérémie Guiochet, Stefano Tonetta, Erwin Schoitsch, Matthieu Roy, Friedemann Bitsch
Herausgeber (Verlag)	Springer
Seiten	73-84
Seitenumfang	12
Band	14182
ISBN (elektronisch)	978-3-031-40953-0
ISBN (Print)	978-3-031-40952-3
DOIs	https://doi.org/10.1007/978-3-031-40953-0_7
Publikationsstatus	Veröffentlicht - 19 Sept. 2023
Veranstaltung	SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security: DECSoS 2023: 18th International Workshop on Dependable Smart Embedded Cyber-Physical Systems and Systems-of-Systems - Toulouse, Toulouse, Frankreich Dauer: 19 Sept. 2023 → 22 Sept. 2023 https://safecomp2023.cnrs.fr/workshops/

Workshop

Workshop	SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security
Land/Gebiet	Frankreich
Stadt	Toulouse
Zeitraum	19/09/23 → 22/09/23
Internetadresse	https://safecomp2023.cnrs.fr/workshops/

Research Field

Cyber Security
Dependable Systems Engineering

Zugriff auf Dokument

10.1007/978-3-031-40953-0_7

Andere Dateien und Links

https://doi.org/10.1007/978-3-031-40953-0_7

Diese Publikation zitieren

Shaaban, A. M., Jung, O., & Schmittner, C. (2023). The Need for Threat Modelling in Unmanned Aerial Systems. in J. Guiochet, S. Tonetta, E. Schoitsch, M. Roy, & F. Bitsch (Hrsg.), Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE (Band 14182, S. 73-84). Springer. https://doi.org/10.1007/978-3-031-40953-0_7

Shaaban, Abdelkader Magdy ; Jung, Oliver ; Schmittner, Christoph. / The Need for Threat Modelling in Unmanned Aerial Systems. Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE. Hrsg. / Jérémie Guiochet ; Stefano Tonetta ; Erwin Schoitsch ; Matthieu Roy ; Friedemann Bitsch. Band 14182 Springer, 2023. S. 73-84

@inproceedings{b452ac0a39894b17ba1895f61047e9e5,

title = "The Need for Threat Modelling in Unmanned Aerial Systems",

abstract = "Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.",

keywords = "Cybersecurity, Potential Threats, Security Requirements, Threat Modelling, Unmanned Aerial Systems",

author = "Shaaban, \{Abdelkader Magdy\} and Oliver Jung and Christoph Schmittner",

year = "2023",

month = sep,

day = "19",

doi = "10.1007/978-3-031-40953-0\_7",

language = "English",

isbn = " 978-3-031-40952-3",

volume = "14182",

pages = "73--84",

editor = "J{\'e}r{\'e}mie Guiochet and Stefano Tonetta and Erwin Schoitsch and Matthieu Roy and Friedemann Bitsch",

booktitle = "Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE",

publisher = "Springer",

address = "Germany",

note = "SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security : DECSoS 2023: 18th International Workshop on Dependable Smart Embedded Cyber-Physical Systems and Systems-of-Systems ; Conference date: 19-09-2023 Through 22-09-2023",

url = "https://safecomp2023.cnrs.fr/workshops/",

}

Shaaban, AM , Jung, O & Schmittner, C 2023, The Need for Threat Modelling in Unmanned Aerial Systems. in J Guiochet, S Tonetta, E Schoitsch, M Roy & F Bitsch (Hrsg.), Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE. Bd. 14182, Springer, S. 73-84, SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security, Toulouse, Frankreich, 19/09/23. https://doi.org/10.1007/978-3-031-40953-0_7

The Need for Threat Modelling in Unmanned Aerial Systems. / Shaaban, Abdelkader Magdy (Autor:in und Vortragende:r); Jung, Oliver ; Schmittner, Christoph.
Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE. Hrsg. / Jérémie Guiochet; Stefano Tonetta; Erwin Schoitsch; Matthieu Roy; Friedemann Bitsch. Band 14182 Springer, 2023. S. 73-84.

Publikation: Beitrag in Buch oder Tagungsband › Vortrag mit Beitrag in Tagungsband › Begutachtung

TY - GEN

T1 - The Need for Threat Modelling in Unmanned Aerial Systems

AU - Jung, Oliver

AU - Schmittner, Christoph

A2 - Shaaban, Abdelkader Magdy

A2 - Guiochet, Jérémie

A2 - Tonetta, Stefano

A2 - Schoitsch, Erwin

A2 - Roy, Matthieu

A2 - Bitsch, Friedemann

PY - 2023/9/19

Y1 - 2023/9/19

N2 - Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.

AB - Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.

KW - Cybersecurity

KW - Potential Threats

KW - Security Requirements

KW - Threat Modelling

KW - Unmanned Aerial Systems

UR - https://doi.org/10.1007/978-3-031-40953-0_7

U2 - 10.1007/978-3-031-40953-0_7

DO - 10.1007/978-3-031-40953-0_7

M3 - Conference Proceedings with Oral Presentation

SN - 978-3-031-40952-3

VL - 14182

SP - 73

EP - 84

BT - Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE

PB - Springer

T2 - SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security

Y2 - 19 September 2023 through 22 September 2023

ER -