Risk Assessment in IoT Case Study: Collaborative Robots System
CC Attribution - ShareAlike 4.0 International:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor and the work or content is shared also in adapted form only under the conditions of this
Chehida, Salim
Security is one of the crucial challenges in the design and development of IoT applications. This paper presents an approach that focuses on existing security standards to evaluate and analyse the potential risks faced by IoT systems. It begins by identifying system assets and their associated vulnerabilities and threats. A list of security objectives and technical requirements are then defined to mitigate the risks and build a secure and safe system. We use our approach to assess risks in the robotic system for supporting the movement of loads in a warehouse."
 Okay, so our first paper is a risk assessment in Ayotica study collaborative robot system presented by Salim Kaeda, researcher at the University of Grenobleps in France. Hi, hi, hi everybody. So my name is Salim Shahidaf from the laboratory very mug of University of Grenobleps. In this work, I work in the specification design and verification of cyber physical systems, IOT systems. I also work on the security of the systems. So in this work, we propose an approach for risk assessment in IOT systems. And after that, we apply this approach to a collaborative robot systems. First, I would like to to thanks all the authors participated in this work from Robotnik Automation Company and from Airbus Defense and Space. So I think you can share the video. Hello, everyone. This work is funded by Brain IOT project that aims to develop framework for reducing the effort of developing, validating, operating and monitoring IOT based systems. In this work, we propose an approach for risk assessment in IOT systems. Then we apply our approach to analyze risk in collaborative robot system. First, I would like to thank all the partners and authors participated in this work from Robotnik, Airbus and IMAXA companies. This is the plan of our presentation. We first start by the state of the art of existing standards and methods for security risk assessment. Then we introduce our approach and we present our case study of robot system for supporting the movement of loads in our house. In the third part of our presentation, we detail the main steps of our approach and their application to our case study. Finally, we give some conclusions and future work. An IOT system includes a lot of devices such as sunsores, actuators and other physical entities. These devices can be connected using several communication technologies such as RFID, Bluetooth Wi-Fi and Lora. The large number of devices and communication protocols that can be used in IOT systems can increase the vulnerabilities and attack that can exploit these vulnerabilities. In this work, we propose a risk assessment methodology to identify and mitigate the risks. We aim to build the secure IOT systems that ensure security requirements. There are a lot of common standards from international organizations such as ISO, NIST and E3A. These standards provide generic guidelines for the security of systems. There are also some standards proposed by ITUT, ISO and E3A that deals with some specific issues related to IOT security. In this study, we consider these standards, especially the ISO 27002 that gives general guidance to ensure the main security objectives. There are also a lot of existing methods for security risk assessment. For example, ABS method from the National Cybersecurity Agency of France that allows risk assessment in information systems. The CRAM method from the Center Computer and Telecommunications Agency in United Kingdom that allows the qualitative risk assessment. The AURA method that supports the NIST SP 830 standard. The Mihare method from French Information Security Club that supports the ISO 27005. However, these methods are generic and not considered the complexity of IOT systems. In this work, we propose a new method adapted to IOT-based systems. In our approach, we start by identifying the assets of the system based on reference IOT domain model. In the second step, we specify threats on the assets based on common threats database from IBIOS method. In the third step, we rely on the ISO 27002 to derive the security objectives from the threats. Finally, we give security requirements that implement the defined security objectives. Our approach is iterative, so the security requirements can be revised after the refinement of system assets. Also, the results of each step should be checked with the customer and security expert. We apply our approach to a collaborative robot system from Robotnik Automation Company in Spain. In this system, a fleet of robots is deployed to support the movement of loads in warehouse. Robots move items from unload area to storage area passing by an automatic door that separates the two zones. This system is managed automatically without the intervention of human operator. To properly identify all the assets of the system, we refer to IOT domain model proposed by Heller. The IOT domain model defines the main concept and the relationships in order to avoid any ambiguity. Here we present some important concepts. On the left thing is the combination of physical entity together with its digital representation called virtual entity. There are two types of virtual entity, passive digital activa that corresponds to a digital representation of physical entity stored in database or similar form. The second type is active digital activa that corresponds to any type of active scout software program or embedded application. On the right, device is a hardware with computing and network capabilities. Device can be a sensor that allows to monitor physical entity, actuator that allows to act on physical entity, or tag that allows to identify physical entity and it can be read by sensors. The domain model also describes other concepts such as users and resources. Here examples of assets from our robot system. The system includes different types of devices such as sensor, here example of three robot sensors. We have also example of actuators such as door PLC and other type of components. For the identification of threats associated with the defined assets, we refer to the IBIOS threats database. In the IBIOS database threats are classified into eight categories and they can be caused by two factors. Environment factors such as natural event or human factors such as unauthorized actions or comprised of functions. In this table, we show examples of threats associated with assets defined in the previous step. This table is completed with our partner from Robot Necrotomation Company and then validated and approved with security experts. In the last step of our approach, we relay on the ISO 27002 generic list to specify security objectives needed to protect the system assets against the identified threats. Here in this table, we give some examples of security objectives and we map if each security objective with the covered threats. The security objectives should cover all the identified threats. After the specification of security objectives, we define security requirements. In this table, each security objective leads to the implementation of one or more technical requirement. The requirement should be approved by security experts, then appropriate counter-regions can be deployed to ensure security requirements. In this work, we have presented security risk assessment method for IoT systems and applied this method for robotic service system. Among the advantages of our approach, it considers the IoT domain model to identify system assets, it considers standards to specify security requirements, it is iterative and considered evolution and change in the system. We have applied our approach to collaborative robot system and also for water management system. In the future work, we plan to apply our method to other systems. We also plan to support our approach by tools. Thank you. Thank you so much. Are some questions for Salim from the audience? I would like to ask you something, Salim. You mentioned that you mentioned that you have a question, Rosaria, a couple of questions. Yes, I have a couple of questions. I will let Konstantinos, could you please unmute yourself and ask the question? No, hello. It was not actually a question. It was us raising the hand for the next presentation. No question. Sorry for this. It's a Kariya. You can unmute yourself. Hello. Hi, Salim. Thank you so much for the presentation. It's interesting. Actually, I have one question. At the beginning, you presented some states of the art and some standardization work. My question, you have selected one of those standards. Did you use some criterias or some kind of like why you use ISO exactly and not other standards for risk management or risk assignment? Sorry. It was like a choice or like a recent specific requirements? Yes. Thank you for the question. In this work, we have done the state of the art of all the existing standards about the security, generic security of systems and also for the security of IoT systems. Here, with the help of some security experts in IoT systems, we have extracted the relevant and adapted the standards for the security of IoT systems. For each standard, we have extracted some relevant part which is adapted to IoT systems. Okay. Thank you. Just another question and not like a really question about the presentation. This study you did with the other experts, it's included in the paper? Yes. Okay. Thank you. We have experts from insecurity from Airbus, Defense and Space. Okay. Thank you. We have other experts which help us for this work. Yeah. No. Sorry. My question was more about the studies included on the paper. Yes. Okay. Thank you so much. Thanks. Okay.
 Okay, so our first paper is a risk assessment in Ayotica study collaborative robot system  presented by Salim Kaeda, researcher at the University of Grenobleps in France.  Hi, hi, hi everybody. So my name is Salim Shahidaf from the laboratory very mug of  University of Grenobleps. In this work, I work in the specification design and verification of  cyber physical systems, IOT systems. I also work on the security of the systems. So in this work,  we propose an approach for risk assessment in IOT systems. And after that, we apply this approach to  a collaborative robot systems. First, I would like to to thanks all the authors participated in this  work from Robotnik Automation Company and from Airbus Defense and Space. So I think you can share the  video. Hello, everyone. This work is funded by Brain IOT project that aims to develop framework  for reducing the effort of developing, validating, operating and monitoring IOT based systems.  In this work, we propose an approach for risk assessment in IOT systems. Then we apply our  approach to analyze risk in collaborative robot system. First, I would like to thank all the  partners and authors participated in this work from Robotnik, Airbus and IMAXA companies.  This is the plan of our presentation. We first start by the state of the art of existing standards  and methods for security risk assessment. Then we introduce our approach and we present our case  study of robot system for supporting the movement of loads in our house. In the third part of our  presentation, we detail the main steps of our approach and their application to our case study.  Finally, we give some conclusions and future work. An IOT system includes a lot of devices such as  sunsores, actuators and other physical entities. These devices can be connected using several  communication technologies such as RFID, Bluetooth Wi-Fi and Lora.  The large number of devices and communication protocols that can be used in IOT systems  can increase the vulnerabilities and attack that can exploit these vulnerabilities.  In this work, we propose a risk assessment methodology to identify and mitigate the risks.  We aim to build the secure IOT systems that ensure security requirements.  There are a lot of common standards from international organizations such as ISO,  NIST and E3A. These standards provide generic guidelines for the security of systems.  There are also some standards proposed by ITUT, ISO and E3A that deals with some specific issues  related to IOT security. In this study, we consider these standards, especially the ISO 27002  that gives general guidance to ensure the main security objectives. There are also a lot of  existing methods for security risk assessment. For example, ABS method from the National  Cybersecurity Agency of France that allows risk assessment in information systems.  The CRAM method from the Center Computer and Telecommunications Agency in United Kingdom  that allows the qualitative risk assessment. The AURA method that supports the NIST SP 830 standard.  The Mihare method from French Information Security Club that supports the ISO 27005.  However, these methods are generic and not considered the complexity of IOT systems.  In this work, we propose a new method adapted to IOT-based systems.  In our approach, we start by identifying the assets of the system based on reference IOT domain model.  In the second step, we specify threats on the assets based on common threats database from  IBIOS method. In the third step, we rely on the ISO 27002 to derive the security objectives from  the threats. Finally, we give security requirements that implement the defined security objectives.  Our approach is iterative, so the security requirements can be revised after the refinement  of system assets. Also, the results of each step should be checked with the customer and  security expert. We apply our approach to a collaborative robot system from Robotnik Automation  Company in Spain. In this system, a fleet of robots is deployed to support the movement of  loads in warehouse. Robots move items from unload area to storage area passing by an automatic door  that separates the two zones. This system is managed automatically without the intervention  of human operator. To properly identify all the assets of the system, we refer to IOT domain  model proposed by Heller. The IOT domain model defines the main concept and the relationships  in order to avoid any ambiguity. Here we present some important concepts. On the left thing is the  combination of physical entity together with its digital representation called virtual entity.  There are two types of virtual entity, passive digital activa that corresponds to a digital  representation of physical entity stored in database or similar form. The second type is active  digital activa that corresponds to any type of active scout software program or embedded application.  On the right, device is a hardware with computing and network capabilities.  Device can be a sensor that allows to monitor physical entity, actuator that allows to act on  physical entity, or tag that allows to identify physical entity and it can be read by sensors.  The domain model also describes other concepts such as users and resources. Here examples of assets  from our robot system. The system includes different types of devices such as sensor,  here example of three robot sensors. We have also example of actuators such as door PLC  and other type of components. For the identification of threats associated with the defined assets,  we refer to the IBIOS threats database. In the IBIOS database threats are classified into  eight categories and they can be caused by two factors. Environment factors such as natural  event or human factors such as unauthorized actions or comprised of functions.  In this table, we show examples of threats associated with assets defined in the previous step.  This table is completed with our partner from Robot Necrotomation Company  and then validated and approved with security experts.  In the last step of our approach, we relay on the ISO 27002 generic list to specify  security objectives needed to protect the system assets against the identified threats.  Here in this table, we give some examples of security objectives and we map if each security  objective with the covered threats. The security objectives should cover all the identified threats.  After the specification of security objectives, we define security requirements. In this table,  each security objective leads to the implementation of one or more technical requirement. The  requirement should be approved by security experts, then appropriate counter-regions can be deployed  to ensure security requirements. In this work, we have presented security risk assessment method  for IoT systems and applied this method for robotic service system. Among the advantages of our  approach, it considers the IoT domain model to identify system assets, it considers standards  to specify security requirements, it is iterative and considered evolution and change in the system.  We have applied our approach to collaborative robot system and also for water management system.  In the future work, we plan to apply our method to other systems. We also plan to support our  approach by tools. Thank you.  Thank you so much. Are some questions for Salim from the audience?  I would like to ask you something, Salim. You mentioned that you mentioned that  you have a question, Rosaria, a couple of questions. Yes, I have a couple of questions.  I will let Konstantinos, could you please unmute yourself and ask the question?  No, hello. It was not actually a question. It was us raising the hand for the next presentation.  No question. Sorry for this. It's a Kariya. You can unmute yourself.  Hello. Hi, Salim. Thank you so much for the presentation. It's interesting. Actually,  I have one question. At the beginning, you presented some states of the art and some  standardization work. My question, you have selected one of those standards. Did you use  some criterias or some kind of like why you use ISO exactly and not other standards for risk  management or risk assignment? Sorry. It was like a choice or like a recent specific requirements?  Yes. Thank you for the question. In this work, we have  done the state of the art of all the existing standards about the security, generic security of  systems and also for the security of IoT systems. Here, with the help of some security experts in  IoT systems, we have extracted the relevant and adapted the standards for the security of IoT  systems. For each standard, we have extracted some relevant part which is adapted to IoT systems.  Okay. Thank you. Just another question and not like a really question about the presentation.  This study you did with the other experts, it's included in the paper?  Yes. Okay. Thank you. We have experts from insecurity from Airbus, Defense and Space.  Okay. Thank you. We have other experts which help us for this work.  Yeah. No. Sorry. My question was more about the studies included on the paper.  Yes. Okay. Thank you so much. Thanks. Okay.
Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_0_395.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_396_3959.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_3960_5171.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_5172_6155.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_6156_8663.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_8664_9491.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_9492_11591.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_11592_11687.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_11688_12179.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_12180_12251.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_12252_12299.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_12300_12551.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_12552_12659.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_12660_13439.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_13440_14855.png Risk_Assessment_in_IoT_Case_Study__Collaborative_R_SOJCH-alwjU_14856_21174.png