Home // International Journal On Advances in Security, volume 17, numbers 3 and 4, 2024 // View article

Key Establishment for Maintenance with Machine to Machine Communication in Transportation: Security Process and Mitigation Measures

Authors:
Sibylle Fröschle
Martin Kubisch

Keywords: Security; Key Establishment; Threat and Risk Analysis; Simulation; Transportation.

Abstract:
Machine to machine communication over wireless networks is increasingly adopted to improve service and maintenance processes in transportation, e.g., at airports, ports, and automotive service stations. This brings with it the challenge of how to set up a session key so that the communication can be cryptographically secured. While there is a vast design space of key establishment methods available, there is a lack of process of how to engineer a solution while considering both security and safety: how to assess the threats and risks that come with a particular key establishment method? And how to iteratively refine a key establishment method under development such that risk is mitigated to an acceptable level? In this paper, we put forward an approach that addresses these questions. Moreover, we devise several cyber-physical measures that can be added to mitigate risk. We illustrate our approach and the mitigation measures by means of a real-world use case: TAGA - a Touch and Go Assistant in the Aerospace Domain. Finally, we highlight the crucial role that simulation has to play in this security process for safety.

Pages: 142 to 155

Copyright: Copyright (c) to authors, 2024. Used with permission.

Publication date: December 30, 2024

Published in: journal

ISSN: 1942-2636