Abstract:The modernization of logistics through the use of Wireless Sensor Network (WSN) Internet of Things (IoT) devices promises great efficiencies. Sensor devices can provide real-time or near real-time condition monitoring and location tracking of assets during the shipping process, helping to detect delays, prevent loss, and stop fraud. However, the integration of low-cost WSN/IoT systems into a pre-existing industry should first consider security within the context of the application environment. In the case of logistics, the sensors are mobile, unreachable during the deployment, and accessible in potentially uncontrolled environments. The risks to the sensors include physical damage, either malicious/intentional or unintentional due to accident or the environment, or physical attack on a sensor, or remote communication attack. The easiest attack against any sensor is against its communication. The use of IoT sensors for logistics involves the deployment conditions of mobility, inaccesibility, and uncontrolled environments. Any threat analysis needs to take these factors into consideration. This paper presents a threat model focused on an IoT-enabled asset tracking/monitoring system for smart logistics. A review of the current literature shows that no current IoT threat model highlights logistics-specific IoT security threats for the shipping of critical assets. A general tracking/monitoring system architecture is presented that describes the roles of the components. A logistics-specific threat model that considers the operational challenges of sensors used in logistics, both malicious and non-malicious threats, is then given. The threat model categorizes each threat and suggests a potential countermeasure.

Threat models over space and time: A case study of end‐to‐end‐encrypted messaging applications

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

A Threat Model Driven Approach for Security Testing

Threat Modeling Data Analysis in Socio-technical Systems

Towards Threat Modelling of IoT Context-Sharing Platforms

Threat Modeling of Cyber-Physical Systems in Practice

Threat Modelling in Virtual Assistant Hub Devices Compared With User Risk Perceptions (2021)

ACTISM: Threat-informed Dynamic Security Modelling for Automotive Systems

Design and Implementation of the Advanced Cloud Privacy Threat Modeling

Network Security Threats and Protection Models

Toward a taxonomy of communications security models

Security for Emerging Miniaturized Wireless Biomedical Devices: Threat Modeling with Application to Case Studies

Development of a threat modelling framework and a web-based threat modelling tool for micro businesses

Introducing Systems Thinking as a Framework for Teaching and Assessing Threat Modeling Competency

Threats Management Throughout the Software Service Life-Cycle

Exploring Adversarial Threat Models in Cyber Physical Battery Systems

Threat Modelling and Risk Analysis for Large Language Model (LLM)-Powered Applications

Component Security Ten Years Later: an Empirical Study of Cross-Layer Threats in Real-World Mobile Applications

Threat Modeling for Communication Security of IoT-Enabled Digital Logistics

A Systematic Deconstruction of Human-Centric Privacy & Security Threats on Mobile Phones

Model of Threats to Computer Network Software