Options
Key Establishment for Maintenance with Machine to Machine Communication in Transportation : Security Process and Mitigation Measures
Publikationstyp
Journal Article
Date Issued
2024
Sprache
English
Volume
17
Issue
3&4
Citation
International Journal on Advances in Security 17 (3&4): (2024)
Publisher
IARIA
Machine to machine communication over wireless networks is increasingly adopted to improve service and maintenance processes in transportation, e.g. at airports, ports, and automotive service stations. This brings with it the challenge of how to set up a session key so that the communication can be cryptographically secured. While there is a
vast design space of key establishment methods available, there is a lack of process of how to engineer a solution while considering both security and safety: how to assess the threats and risks that come with a particular key establishment method? And how to iteratively refine a key establishment method under development such that risk is mitigated to an acceptable level? In this paper, we put forward an approach that addresses these questions. We also devise several cyber-physical measures that can be added to mitigate risk. We illustrate our approach by means of a real-world use case: TAGA - a Touch and Go Assistant in the Aerospace Domain. Finally, we highlight the crucial role that simulation has to play in this security process for safety.
vast design space of key establishment methods available, there is a lack of process of how to engineer a solution while considering both security and safety: how to assess the threats and risks that come with a particular key establishment method? And how to iteratively refine a key establishment method under development such that risk is mitigated to an acceptable level? In this paper, we put forward an approach that addresses these questions. We also devise several cyber-physical measures that can be added to mitigate risk. We illustrate our approach by means of a real-world use case: TAGA - a Touch and Go Assistant in the Aerospace Domain. Finally, we highlight the crucial role that simulation has to play in this security process for safety.
Subjects
Security
Simulation
Threat and Risk Analysis
Transportation
DDC Class
005: Computer Programming, Programs, Data and Security
388: Transportation
Version History
You are currently viewing version 1 of the item.