{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,2,9]],"date-time":"2024-02-09T10:28:51Z","timestamp":1707474531130},"reference-count":14,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2022,1,20]],"date-time":"2022-01-20T00:00:00Z","timestamp":1642636800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2022,1,20]],"date-time":"2022-01-20T00:00:00Z","timestamp":1642636800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"inovate uk","award":["1025782"],"award-info":[{"award-number":["1025782"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["SN COMPUT. SCI."],"published-print":{"date-parts":[[2022,3]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Threat modelling Cyber-Physical System built on cloud infrastructure to monitor and manage the window cleaning operation using Window Cleaning Warehouse as a case study. Focusing on IoT data collection and cloud infrastructure security and the connections with the Cyber-Physical System. External dependencies and trust levels are defined before using trust boundaries and data flow diagrams to highlight attack surfaces. Expected scenarios from the data flow diagrams are discussed to identify violated intended use of the system using STRIDE threat classification. A risk assessment of assets that may be of interest to an adversary aid the discovery of more security risks that are then prioritised using the DREAD methodology. The results of the research present a comprehensive breakdown of vulnerabilities associated with IoT data security for route optimisation ranging from GPS spoofing, to Firestore vulnerabilities in the real-time database to Bluetooth Low Energy vulnerabilities in the IoT hardware, all of which could be common risks in cyber-physical systems designed by SME businesses. The research concludes various security risks applicable to SME businesses adopting industry 4.0 to alleviate the risk of new security breaches to the business through this adoption, increasing the likelihood of successful adoption of industry 4.0.<\/jats:p>","DOI":"10.1007\/s42979-022-01021-3","type":"journal-article","created":{"date-parts":[[2022,1,20]],"date-time":"2022-01-20T18:04:00Z","timestamp":1642701840000},"update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Threat Modelling of Cyber Physical Systems: A Real Case Study Based on Window Cleaning Business"],"prefix":"10.1007","volume":"3","author":[{"given":"Sion","family":"Brown","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Stephen","family":"Fox","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chaminda","family":"Hewage","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Imtiaz","family":"Khan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2022,1,20]]},"reference":[{"key":"1021_CR1","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-020-00052-8","author":"P Radanliev","year":"2020","unstructured":"Radanliev P. Cyber risk at the edge: current and future trends on cyber risk analytics and artificial intelligence in the industrial internet of things and industry 4.0 supply chains. Cybersecur. 2020. https:\/\/doi.org\/10.1186\/s42400-020-00052-8.","journal-title":"Cybersecur"},{"key":"1021_CR2","unstructured":"Rosa T. Bypassing Passkey Authentication in Bluetooth Low Energy. In: Cryptology ePrint Archive. 2013. https:\/\/eprint.iacr.org\/2013\/309.pdf Accessed 29 Jul 2021."},{"key":"1021_CR3","unstructured":"Ryan M. Bluetooth: With Low Energy Comes Low Security. In: USENIX. 2013. https:\/\/www.usenix.org\/conference\/woot13\/workshop-program\/presentation\/ryan Accessed 29 Jul 2021."},{"key":"1021_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.techfore.2021.120754","author":"P Chaudhary","year":"2021","unstructured":"Chaudhary P, Gupta B. Enhancing big data security through integrating XSS scanner into fog nodes for SMEs gain. Technol Forecast Soc Change. 2021. https:\/\/doi.org\/10.1016\/j.techfore.2021.120754.","journal-title":"Technol Forecast Soc Change"},{"key":"1021_CR5","volume-title":"The discovery of grounded theory: strategies for qualitative research","author":"B Glaser","year":"2000","unstructured":"Glaser B, Strauss A. The discovery of grounded theory: strategies for qualitative research. 1st ed. Milton Park: Routledge; 2000.","edition":"1"},{"key":"1021_CR6","doi-asserted-by":"crossref","unstructured":"Nagy J, Olah J. The Role and Impact of Industry 4.0 and the Internet of Things on the Business Strategy of the Value Chain\u2014the Case of Hungary. MDPI. 2018; https:\/\/www.mdpi.com\/2071-1050\/10\/10\/3491\/pdf. Accessed 3 Oct 2021.","DOI":"10.3390\/su10103491"},{"issue":"3","key":"1021_CR7","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1016\/j.ijcip.2009.06.001","volume":"2","author":"Y Huang","year":"2009","unstructured":"Huang Y, C\u00e1rdenas A. Understanding the physical and economic consequences of attacks on control systems. Int J Crit Infrastruct Protect. 2009;2(3):73\u201383.","journal-title":"Int J Crit Infrastruct Protect"},{"key":"1021_CR8","unstructured":"Chounlakone M, Alverio J. The Laser Microphone. In: System Design. MIT. 2017. https:\/\/web.mit.edu\/6.101\/www\/s2017\/projects\/jalverio_Project_Final_Report.pdf. Accessed 29 Jul 2021. Accessed 3 Oct 2021."},{"key":"1021_CR9","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523673","author":"S McLaughlin","year":"2013","unstructured":"McLaughlin S. CPS: Stateful policy enforcement for control system device usage. ICPS. 2013. https:\/\/doi.org\/10.1145\/2523649.2523673.","journal-title":"ICPS"},{"key":"1021_CR10","unstructured":"Shim H. Zero-dynamics Attack, Variations, and Countermeasures. In: arXiv.org. 2021. https:\/\/arxiv.org\/abs\/2101.00556. Accessed 3 Oct 2021."},{"key":"1021_CR11","doi-asserted-by":"crossref","unstructured":"Lai M, Yang H, Yang S, Zhao J. Cyber-physical logistics system-based vehicle routing optimization, In: Research Gate. 2014. https:\/\/www.researchgate.net\/publication\/267179315_Cyber-physical_logistics_systembased_vehicle_routing_optimization. Accessed 3 Oct 2021.","DOI":"10.3934\/jimo.2014.10.701"},{"key":"1021_CR12","doi-asserted-by":"publisher","first-page":"101006","DOI":"10.1016\/j.aei.2019.101006","volume":"42","author":"S Saijun","year":"2019","unstructured":"Saijun S, Gangyan X, Ming L. The design of an IoT-based route optimization system: a smart product-service system (SPSS) approach. Adv Eng Inform. 2019;42:101006.","journal-title":"Adv Eng Inform"},{"key":"1021_CR13","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/6138637","author":"T Khoa","year":"2020","unstructured":"Khoa T, Phuc C. Waste management system using IoT-based machine learning in university. Wirel Commun Mobile Comput. 2020. https:\/\/doi.org\/10.1155\/2020\/6138637.","journal-title":"Wirel Commun Mobile Comput"},{"key":"1021_CR14","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-23126-6_10","volume-title":"Waste management as an IoT-enabled service in smart cities. Internet of things, smart spaces, and next generation networks and systems","author":"A Medvedev","year":"2015","unstructured":"Medvedev A, Fedchenkov P. Waste management as an IoT-enabled service in smart cities. Internet of things, smart spaces, and next generation networks and systems. Cham: Springer; 2015. https:\/\/doi.org\/10.1007\/978-3-319-23126-6_10."}],"container-title":["SN Computer Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42979-022-01021-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s42979-022-01021-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s42979-022-01021-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,3,18]],"date-time":"2022-03-18T11:23:43Z","timestamp":1647602623000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s42979-022-01021-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,1,20]]},"references-count":14,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2022,3]]}},"alternative-id":["1021"],"URL":"https:\/\/doi.org\/10.1007\/s42979-022-01021-3","relation":{},"ISSN":["2662-995X","2661-8907"],"issn-type":[{"value":"2662-995X","type":"print"},{"value":"2661-8907","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,1,20]]},"assertion":[{"value":"5 August 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 January 2022","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 January 2022","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors are involved in a KTP. It is in the interest of the corresponding author to ensure the success of the KTP, exhaustive of cyber-security.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}},{"value":"No ethics approval is needed, since research does not deal with human participants or human tissue, and is not sensitive, deceptive or covert according to the University Ethics Committee at Cardiff Metropolitan University.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical Approval"}},{"value":"No humans were involved in the participation of the research, since it was a theoretical threat analysis of the design of a cyber-physical system.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent to Participate"}},{"value":"Window Cleaning Warehouse give consent for publication.","order":5,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for Publication"}}],"article-number":"139"}}