Security assessment of data management systems for cyber physical system applications
Abstract
Cyber physical system (CPS) applications are widely used to control critical infrastructure of various application domains, eg, medical health care, energy, and power, to name a few. Such applications usually take input data from sensors, estimate current state of the system, and then based on the estimation, make critical decisions to control the underlying infrastructure automatically. Therefore, security and integrity of the (system state) data are critically important to ensure safe operations of CPS. In this paper, we present a review of security of various data management systems used in CPS. Since CPS are composed of systems of (sub)systems that generate a huge amount of data (ie, periodical sensor input data), therefore, recently, NoSQL and NewSQL data management systems have emerged as popular data management systems to support efficient and scalable analysis of unstructured data. Unfortunately, these systems were not initially build for data security and thus are vulnerable to numerous security attacks. Considering flexible data model and efficient access methods in NoSQL and NewSQL, we discuss the security attacks on such data management systems and their corresponding solutions to mitigate them. In particular, we analyze the system and data security of popular NoSQL and NewSQL systems. To analyze that, we defined feature vectors for system and data security and compared the data systems against them. Finally, we propose security solutions for data management systems by identifying various security vulnerabilities in internal security algorithms of such systems.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The CIA taxonomy is important because it meets the needs of wireless M2M networks regarding their specific security issues.
“The CIA taxonomy is important because it meets the needs of wireless M2M networks regarding their specific security issues [25] (as shown in Figure 2).”
From Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap (2021) · cites this paper as [25]
Cites
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
Cyber security in the Smart Grid: Survey and challenges
Wang, W., & Lu, Z. (2013) · Computer Networks · doi:10.1016/j.comnet.2012.12.017 · Cited by 1,133 · see citing works
A survey of Cyber-Physical Systems
Shi, J., Wan, J., Yan, H., & Suo, H. (2011) · International Conference on Wireless Communications and Signal Processing (WCSP) · doi:10.1109/wcsp.2011.6096958 · Cited by 623 · see citing works
Big data for cyber physical systems in industry 4.0: a survey
Xu, L. D., & Duan, L. (2018) · Enterprise Information Systems · doi:10.1080/17517575.2018.1442934 · Cited by 530 · see citing works
Cyber-physical systems and their security issues
Alguliyev, R. M., İmamverdiyev, Y., & Sukhostat, L. V. (2018) · Computers in Industry · doi:10.1016/j.compind.2018.04.017 · Cited by 479 · see citing works
A Survey on Concepts, Applications, and Challenges in Cyber-Physical Systems
Gunes, V., Peter, S., Givargis, T. D., et al. (2014) · KSII Transactions on Internet and Information Systems · doi:10.3837/tiis.2014.12.001 · Cited by 392 · see citing works
Challenges for the cyber-physical manufacturing enterprises of the future
Panetto, H., Iung, B., Ivanov, D., Weichhart, G., & Wang, X. (2019) · Annual Reviews in Control · doi:10.1016/j.arcontrol.2019.02.002 · Cited by 337 · see citing works
A Study of Encryption Algorithms AES, DES and RSA for Security
Mahajan, P., & Sachdeva, A. (2013) · Global Journal of Computer Science and Technology · Cited by 287 · see citing works
Mahmoud, M. S., Hamdan, M. M., & Baroudi, U. A. (2019) · Neurocomputing · doi:10.1016/j.neucom.2019.01.099 · Cited by 279 · see citing works
Evaluating the Performance of Symmetric Encryption Algorithms
Elminaam, D. S. A., Kader, H. M. A., & Hadhoud, M. M. (2010) · International journal of network security · doi:10.6633/ijns.201005.10(3).06 · Cited by 242 · see citing works
State of the art of cyber-physical systems security: An automatic control perspective
Zacchia Lun, Y., D’Innocenzo, A., Smarra, F., Malavolta, I., & Di Benedetto, M. D. (2019) · Journal of Systems and Software · doi:10.1016/j.jss.2018.12.006 · Cited by 211 · see citing works
DES, AES and Blowfish: Symmetric Key Cryptography Algorithms Simulation Based Performance Analysis
Thakur, J., & Kumar, N. (2011) · Cited by 207 · see citing works
Security Issues and Challenges for Cyber Physical System
Wang, E. K., Ye, Y., Xu, X., Yiu, S., Hui, L. C. K., & Chow, K. P. (2010) · IEEE International Conference on Internet of Things (iThings) and IEEE Green Computing and Communications (GreenCom) and IEEE Cyber, Physical and Social Computing (CPSCom) and IEEE Smart Data (SmartData) · doi:10.1109/greencom-cpscom.2010.36 · Cited by 199 · see citing works
Security Issues in NoSQL Databases
Okman, L., Gal-Oz, N., Gonen, Y., et al. (2011) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom.2011.70 · Cited by 174 · see citing works
Survey on Security Issues in Cloud Computing and Associated Mitigation Techniques
Bhadauria, R., & Sanyal, S. (2013) · Cited by 153 · see citing works
Security Issues Associated with Big Data in Cloud Computing
Inukollu, V. N. R., Arsi, S., & Ravuri, S. R. (2014) · International Journal of Network Security & Its Applications · doi:10.5121/ijnsa.2014.6304 · Cited by 152 · see citing works
A survey on security and privacy issues in big data
Terzi, D. S., Terzi, R., & Sağıroğlu, Ş. (2015) · International Conference for Internet Technology and Secured Transactions · doi:10.1109/icitst.2015.7412089 · Cited by 145 · see citing works
Survey on Security Issues in Cloud Computing and Associated Mitigation Techniques
Bhadauria, R., & Sanyal, S. (2012) · International Journal of Computer Applications · doi:10.5120/7292-0578 · Cited by 85 · see citing works
Shmueli, E., Vaisenberg, R., Elovici, Y., et al. (2010) · ACM SIGMOD Record · doi:10.1145/1815933.1815940 · Cited by 63 · see citing works
Fernández‐Medina, E., & Piattini, M. G. (2004) · Information and Software Technology · doi:10.1016/j.infsof.2004.09.013 · Cited by 49 · see citing works
Gifty, R., Bharathi, R., & Krishnakumar, P. (2018) · Neural Computing and Applications · doi:10.1007/s00521-018-3635-6 · Cited by 49 · see citing works
Security of sharded NoSQL databases: A comparative analysis
Zahid, A., Masood, R., & Shibli, M. A. (2014) · doi:10.1109/ciacs.2014.6861323 · Cited by 46 · see citing works
SecureNoSQL: An approach for secure search of encrypted NoSQL databases in the public cloud
Ahmadian, M., Plochan, F., Roessler, Z., et al. (2016) · International Journal of Information Management · doi:10.1016/j.ijinfomgt.2016.11.005 · Cited by 43 · see citing works
Security and Privacy of Sensitive Data in Cloud Computing : A Survey of Recent Developments
Gholami, A., & Laure, E. (2015) · doi:10.5121/csit.2015.51611 · Cited by 42 · see citing works
A Survey on Security Issues in Big Data and NoSQL
Sahafizadeh, E., & Nematbakhsh, M. A. (2015) · Advances in computer science : an international journal · Cited by 38 · see citing works
Fine-Grained Access Control Within NoSQL Document-Oriented Datastores
Colombo, P., & Ferrari, E. (2016) · Data Science and Engineering · doi:10.1007/s41019-016-0015-z · Cited by 34 · see citing works
Implementing a database encryption solution, design and implementation issues
Shmueli, E., Vaisenberg, R., Gudes, E., et al. (2014) · Computers & Security · doi:10.1016/j.cose.2014.03.011 · Cited by 30 · see citing works
A New Symmetric Key Encryption Algorithm With Higher Performance
Murtaza, A., Pirzada, S. J. H., & Jianwei, L. (2019) · International Conference on Computing, Mathematics and Engineering Technologies (iCoMET) · doi:10.1109/icomet.2019.8673469 · Cited by 25 · see citing works
Power analysis attack against encryption devices: a comprehensive analysis of AES, DES, and BC3
Putra, S. D., Yudhiprawira, M., Sutikno, S., et al. (2019) · TELKOMNIKA (Telecommunication Computing Electronics and Control) · doi:10.12928/telkomnika.v17i3.9384 · Cited by 19 · see citing works
A Solution for Privacy-Preserving Data Manipulation and Query on NoSQL Database
Guo, Y., Zhang, L., Lin, F., et al. (2013) · Journal of Computers · doi:10.4304/jcp.8.6.1427-1432 · Cited by 17 · see citing works
Design and Analysis of Querying Encrypted Data in Relational Databases
Canim, M., & Kantarcıoğlu, M. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-73538-0_14 · Cited by 15 · see citing works
A Hybrid Attack Model for Cyber-Physical Security Assessment in Electricity Grid
Chen, Y.-C., Gieseking, T., Campbell, D., et al. (2019) · IEEE Texas Power and Energy Conference (TPEC) · doi:10.1109/tpec.2019.8662138 · Cited by 15 · see citing works
Security Aspects of Cyber Physical Systems
Ahmad, I., Zarrar, M. K., Saeed, T., & Rehman, S. (2018) · International Conference on Computer Applications & Information Security (ICCAIS) · doi:10.1109/cais.2018.8442009 · Cited by 14 · see citing works
A Security Model for Access Control in Graph-Oriented Databases
Morgado, C. D. R. V., Baioco, G. B., Basso, T., et al. (2018) · IEEE International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs.2018.00027 · Cited by 13 · see citing works
Security of NoSQL Database Against Intruders
Ahmad, K., Alam, M. S., & Udzir, N. I. (2018) · Recent Patents on Engineering · doi:10.2174/1872212112666180731114714 · Cited by 12 · see citing works
Security Issues in Distributed Computation for Big Data Analytics
Behera, R. K., Sahoo, K. S., Mahapatra, S., et al. (2018) · Auerbach Publications eBooks · doi:10.1201/9780429468254-7 · Cited by 8 · see citing works
Analysis of NoSQL Database VulnerabilitiesPreprint
Gupta, S., Singh, N. K., & Tomar, D. S. (2018) · SSRN Electronic Journal · doi:10.2139/ssrn.3172769 · Cited by 6 · see citing works
Decentralized Temporal Authorization Administration
Ruan, C., & Varadharajan, V. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-45227-0_89 · Cited by 5 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Industrial IoT, Cyber Threats, and Standards Landscape: Evaluation and Roadmap
Dhirani, L. L., Armstrong, E., & Newe, T. (2021) · Sensors · doi:10.3390/s21113901 · Cited by 172 · see citing works
“[25] addresses the need of security solutions for data management systems in CPS.”
Background
- Authors
- Chaudhry, N., Yousaf, M. M., & Khan, M. T.
- Affiliations
- University of the Punjab (PK)
- University of Greenwich (GB)
- Corresponding author
- Khan, Muhammad Taimoor
- Venue
- Journal of Software: Evolution and Process
- Publisher
- Wiley
- Published
- 2019-12-04
- Volume
- 32
- Issue
- 2
- ISSN
- 2047-7473 (ISSN-L)
- 2047-7481
- OpenAlex
- W2992665615
- Cited by
- 11
- References
- 38
- Citations by year
- 2025: 2 · 2024: 4 · 2023: 1 · 2022: 1 · 2021: 3
- FWCI
- 1.24
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Journal of Software Evolution and Process (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Keywords
- cyber-physical systems, data management systems, NoSQL databases, NewSQL databases, data security, security attacks, security vulnerabilities, critical infrastructure, sensor data, data integrity, security risk mitigation
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
