Abstract:This paper addresses security and risk management of hardware and embedded systems across several applications. There are three companies involved in the research. First is an energy technology company that aims to leverage electric- vehicle batteries through vehicle to grid (V2G) services in order to provide energy storage for electric grids. Second is a defense contracting company that provides acquisition support for the DOD's conventional prompt global strike program (CPGS). These systems need protections in their production and supply chains, as well as throughout their system life cycles. Third is a company that deals with trust and security in advanced logistics systems generally. The rise of interconnected devices has led to growth in systems security issues such as privacy, authentication, and secure storage of data. A risk analysis via scenario-based preferences is aided by a literature review and industry experts. The analysis is divided into various sections of Criteria, Initiatives, C-I Assessment, Emergent Conditions (EC), Criteria-Scenario (C-S) relevance and EC Grouping. System success criteria, research initiatives, and risks to the system are compiled. In the C-I Assessment, a rating is assigned to signify the degree to which criteria are addressed by initiatives, including research and development, government programs, industry resources, security countermeasures, education and training, etc. To understand risks of emergent conditions, a list of Potential Scenarios is developed across innovations, environments, missions, populations and workforce behaviors, obsolescence, adversaries, etc. The C-S Relevance rates how the scenarios affect the relevance of the success criteria, including cost, schedule, security, return on investment, and cascading effects. The Emergent Condition Grouping (ECG) collates the emergent conditions with the scenarios. The generated results focus on ranking Initiatives based on their ability to negate the effects of Emergent Conditions, as well as producing a disruption score to compare a Potential Scenario's impacts to the ranking of Initiatives. The results presented in this paper are applicable to the testing and evaluation of security and risk for a variety of embedded smart devices and should be of interest to developers, owners, and operators of critical infrastructure systems.

Challenges of Security and Trust of Mobile Devices as Digital Avionics Component

Evaluation of security framework for BYOD device in cloud environment

Cybersecurity challenges in vehicular communications

Cyber security challenges in aviation communication, navigation, and surveillance

Mobile Technology in Healthcare Environment: Security Vulnerabilities and Countermeasures

Cyber-Security Challenges in Aviation Industry: A Review of Current and Future Trends

Bring-Your-Own-Device (BYOD): An Evaluation of Associated Risks to Corporate Information Security

Evaluating the Security of Aircraft Systems

Personal Mobile Devices at Work: Factors Affecting the Adoption of Security Mechanisms.

Trust and Security of Embedded Smart Devices in Advanced Logistics Systems

Collaborative Trust: A Novel Paradigm of Trusted Mobile Computing

Barrier Free Internet Access: Evaluating the Cyber Security Risk Posed by the Adoption of Bring Your Own Devices to e-Learning Network Infrastructure

The Enemy Within: The Emerging Threats to Healthcare from Malicious Mobile Devices

Delving into the Security Issues of Mobile Cloud Computing

BYOD security issues: a systematic literature review

BYOD and the Mobile Enterprise - Organisational challenges and solutions to adopt BYOD

Wireless Avionics Intra-Communications: A Survey of Benefits, Challenges, and Solutions

Using Mobile Phones to Enhance Computing Platform Trust

Assessment of Aviation Security Risk Management for Airline Turnaround Processes

An efficient, secure and trusted channel protocol for avionics wireless networks

Applicability of Blockchain Technology in Avionics Systems