The Need for Threat Modelling in Unmanned Aerial Systems

Abdelkader Magdy Shaaban; Oliver Jung; Christoph Schmittner

doi:10.1007/978-3-031-40953-0_7

The Need for Threat Modelling in Unmanned Aerial Systems

Abdelkader Magdy Shaaban (Author and Speaker), Oliver Jung, Christoph Schmittner

Security & Communication Technologies

Research output: Chapter in Book or Conference Proceedings › Conference Proceedings with Oral Presentation › peer-review

Abstract

Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.

Original language	English
Title of host publication	Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE
Editors	Jérémie Guiochet, Stefano Tonetta, Erwin Schoitsch, Matthieu Roy, Friedemann Bitsch
Publisher	Springer
Pages	73-84
Number of pages	12
Volume	14182
ISBN (Electronic)	978-3-031-40953-0
ISBN (Print)	978-3-031-40952-3
DOIs	https://doi.org/10.1007/978-3-031-40953-0_7
Publication status	Published - 19 Sept 2023
Event	SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security: DECSoS 2023: 18th International Workshop on Dependable Smart Embedded Cyber-Physical Systems and Systems-of-Systems - Toulouse, Toulouse, France Duration: 19 Sept 2023 → 22 Sept 2023 https://safecomp2023.cnrs.fr/workshops/

Workshop

Workshop	SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security
Country/Territory	France
City	Toulouse
Period	19/09/23 → 22/09/23
Internet address	https://safecomp2023.cnrs.fr/workshops/

Research Field

Cyber Security
Dependable Systems Engineering

Keywords

Cybersecurity
Potential Threats
Security Requirements
Threat Modelling
Unmanned Aerial Systems

Access to Document

10.1007/978-3-031-40953-0_7

Cite this

Shaaban, A. M., Jung, O., & Schmittner, C. (2023). The Need for Threat Modelling in Unmanned Aerial Systems. In J. Guiochet, S. Tonetta, E. Schoitsch, M. Roy, & F. Bitsch (Eds.), Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE (Vol. 14182, pp. 73-84). Springer. https://doi.org/10.1007/978-3-031-40953-0_7

Shaaban, Abdelkader Magdy ; Jung, Oliver ; Schmittner, Christoph. / The Need for Threat Modelling in Unmanned Aerial Systems. Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE. editor / Jérémie Guiochet ; Stefano Tonetta ; Erwin Schoitsch ; Matthieu Roy ; Friedemann Bitsch. Vol. 14182 Springer, 2023. pp. 73-84

@inproceedings{b452ac0a39894b17ba1895f61047e9e5,

title = "The Need for Threat Modelling in Unmanned Aerial Systems",

abstract = "Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.",

keywords = "Cybersecurity, Potential Threats, Security Requirements, Threat Modelling, Unmanned Aerial Systems",

author = "Shaaban, {Abdelkader Magdy} and Oliver Jung and Christoph Schmittner",

year = "2023",

month = sep,

day = "19",

doi = "10.1007/978-3-031-40953-0_7",

language = "English",

isbn = " 978-3-031-40952-3",

volume = "14182",

pages = "73--84",

editor = "J{\'e}r{\'e}mie Guiochet and Stefano Tonetta and Erwin Schoitsch and Matthieu Roy and Friedemann Bitsch",

booktitle = "Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE",

publisher = "Springer",

address = "Germany",

note = "SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security : DECSoS 2023: 18th International Workshop on Dependable Smart Embedded Cyber-Physical Systems and Systems-of-Systems ; Conference date: 19-09-2023 Through 22-09-2023",

url = "https://safecomp2023.cnrs.fr/workshops/",

}

Shaaban, AM , Jung, O & Schmittner, C 2023, The Need for Threat Modelling in Unmanned Aerial Systems. in J Guiochet, S Tonetta, E Schoitsch, M Roy & F Bitsch (eds), Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE. vol. 14182, Springer, pp. 73-84, SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security, Toulouse, France, 19/09/23. https://doi.org/10.1007/978-3-031-40953-0_7

The Need for Threat Modelling in Unmanned Aerial Systems. / Shaaban, Abdelkader Magdy (Author and Speaker); Jung, Oliver ; Schmittner, Christoph.
Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE. ed. / Jérémie Guiochet; Stefano Tonetta; Erwin Schoitsch; Matthieu Roy; Friedemann Bitsch. Vol. 14182 Springer, 2023. p. 73-84.

Research output: Chapter in Book or Conference Proceedings › Conference Proceedings with Oral Presentation › peer-review

TY - GEN

T1 - The Need for Threat Modelling in Unmanned Aerial Systems

AU - Jung, Oliver

AU - Schmittner, Christoph

A2 - Shaaban, Abdelkader Magdy

A2 - Guiochet, Jérémie

A2 - Tonetta, Stefano

A2 - Schoitsch, Erwin

A2 - Roy, Matthieu

A2 - Bitsch, Friedemann

PY - 2023/9/19

Y1 - 2023/9/19

N2 - Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.

AB - Detecting cybersecurity vulnerabilities in Unmanned Aerial Systems (UAS) is essential to ensure the safe operation of drones. This supports the determination of cybersecurity objectives and the description of security requirements needed to achieve these objectives. However, it is challenging to automate this process to identify potential cyber threats and ensure the correctness of the applied security requirements, especially in a complex system such as a UAS network. In this work, we use ThreatGet as a threat modelling tool to identify potential cyber threats in UAS and highlight existing security vulnerabilities. This assists in determining the appropriate security requirements that could be implemented to achieve our security goal. We then develop a novel ontology-based threat modelling approach to infer a set of security threats based on the applied security requirements and then check the effectiveness of these requirements against threats to ensure these requirements are fulfilled.

KW - Cybersecurity

KW - Potential Threats

KW - Security Requirements

KW - Threat Modelling

KW - Unmanned Aerial Systems

UR - https://doi.org/10.1007/978-3-031-40953-0_7

U2 - 10.1007/978-3-031-40953-0_7

DO - 10.1007/978-3-031-40953-0_7

M3 - Conference Proceedings with Oral Presentation

SN - 978-3-031-40952-3

VL - 14182

SP - 73

EP - 84

BT - Computer Safety, Reliability, and Security. SAFECOMP 2023 Workshops: ASSURE, DECSoS, SASSUR, SENSEI, SRToITS, and WAISE

PB - Springer

T2 - SAFECOMP 2023: 42nd International Conference on Computer Safety, Reliability and Security

Y2 - 19 September 2023 through 22 September 2023

ER -