Cybersecurity of Farm and Companion Animal Technologies

本项目旨在研究与新技术相关的安全和隐私问题，这些新技术越来越多地应用于农场和伴侣动物。尽管这个快速发展的行业已经给动物及其主人带来了网络安全风险，但它仍然是一个研究不足的领域。我将指出这些系统中的漏洞。然后，我将为他们提出安全的解决方案，重点关注一种或多种技术；支持传感器的可穿戴设备、跟踪技术、环境传感器和饲料/水监测。技术和风险该行业为农场和伴侣动物提供的技术种类正在扩大。这包括但不限于：支持传感器的可穿戴设备、跟踪技术、户外摄像头、环境传感器、饲料/水监测等。从本质上讲，它们都收集、处理、保存和传播有关动物及其周围环境的数据。更多的高科技系统正在不断开发，以改善动物健康，并在农场动物的情况下，生产。然而，安全性和隐私特性通常很少被考虑。可能针对农场动物的攻击包括：窃取听到的健康数据以损害财务/声誉；操纵环境温度危害家禽生产；竞争对手对远程访问工具的服务中断。可能对伴侣动物的攻击有：窃取宠物的微芯片信息，例如地址进行垃圾邮件/网络钓鱼攻击；操纵喂食/用药系统伤害宠物；以及DoS/勒索软件攻击，将动物锁在家里或外面。目标i的目标是：1)评估、系统化和背景化应用于农场和伴侣动物的技术网络安全的现有知识；2)识别该技术对动物及其主人的现实世界风险和威胁；3)在现实世界和模拟环境中实施概念验证攻击；4)设计安全解决方案，重点关注一种或多种技术的安全性。该项目将汇集多个学科：农业、网络安全和兽医。尽管发展迅速，但动物技术的安全性和隐私性尚未得到分析；使动物、农场、所有者以及更广泛的社会（例如通过食物链）面临风险。该项目的结果将通过提供安全的解决方案来影响多个涉众。方法：我将对农场和伴侣动物可用的技术进行SoK调查。然后，我将评估学术界和工业界提供的安全和隐私功能，特别是从两个方面：动物和它们的主人。因此，我将获得现成的技术来研究它们的安全和隐私特性。然后，我将识别这些系统的漏洞和风险，对这些设备和系统进行概念验证攻击。特别是，我将执行：对传感器（例如运动，GPS， NFC和环境）的侧信道攻击，以及对NFC芯片组的中间人攻击。通过这些攻击，我将能够提取有关动物（例如健康信息）及其主人（例如地址）的敏感数据。最后，我将评估采用不同方法（例如轻量级加密算法，距离边界协议等）作为农场和伴侣动物技术的安全解决方案的可能性。特别是，我将重点关注通过使用轻型加密算法来防止上述解决方案中讨论的攻击。

SummaryThis project aims to study the security and privacy issues relating to novel technologies that are increasingly being applied to farm and companion animals. Although, this rapidly growing industry has already introduced cyber security risks to both animals and their owners, it remains an under-researched field. I will identify the vulnerabilities in such systems. Then I will propose secure solutions for them with a focus on one or more technologies; sensor-enabled wearables, tracking technologies, environmental sensors, and feed/water monitoring.Technology and risksThe variety of the technologies offered by the industry for farm and companion animals is expanding. This includes, but not limited to: sensor-enabled wearables, tracking technologies, outdoor cameras, environmental sensors, feed/water monitoring, etc. In essence, they all collect, process, retain and broadcast data about the animal and its surroundings. More high-tech systems are constantly being developed in order to improve the animal health and in the case of farm animals, production. However, security and privacy features are often barely considered.Possible attacks against farm animals include: stealing the heard health data to damage finance/reputation; manipulating environmental temperature to harm the poultry production; and service interruptions on remote access tools by a competitor. Possible attacks against companion animals are: stealing pet microchip info e.g. address for spamming/phishing attacks; manipulating the feeding/ medicine system to harm the pet; and DoS/ransomware attacks to lock the animals in or out of home.GoalI aim to: O1) evaluate, systematize, and contextualize existing knowledge on cyber security of technology applied to farm and companion animals, O2) identify the real-world risks and threats to this technology both to animals and their owners O3) implement proof-of-concept attacks in real-world and simulated settings and O4) design secure solutions with a focus on the security of one or more technologies.ImpactThis project will bring multiple disciplines together: Agriculture, Cybersecurity, and Veterinary. Despite its rapid growth, animal technologies have not been analysed for their security and privacy; putting animals, farms, owners, and consequently wider society (through e.g. the food chain) at risk. The outcome of this project will impact multiple stakeholders by providing secure solutions. MethodologyI will conduct a SoK survey on the technologies available for farm and companion animals. I will then assess the security and privacy features offered by academia and industry and in particular from two aspects: the animals and their owners. Accordingly, I will acquire off-the-shelf technologies to study their security and privacy features.I will then identify the vulnerabilities and risks posed to these systems, performing proof-of-concept attacks on these devices and systems. In particular, I will perform: side channel attacks on sensors (e.g. motion, GPS, NFC, and ambient), and man-in-the-middle attacks on NFC chipsets. Via these attacks, I will be able to extract sensitive data about the animals (e.g. health information) and their owners (e.g. their address).Finally, I will assess the possibility of employing different methods (e.g. light weight cryptographic algorithm, distance bounding protocols, etc.) as secure solutions for farm and companion animal technologies. In particular, I will focus on preventing the attacks discussed above in my solution by using light crypto algorithms.