Towards Optimized Security Attributes for IoT Devices in Smart Agriculture Based on the IEC 62443 Security Standard
Open accessAbstract
Implementing applicable security measures into system engineering applications is still one of the most challenging processes in building secure infrastructure. This process needs to consider a variety of security attributes to support securing system components against numerous cyberattacks that could exploit vulnerable points in the system. The redundancy in these attributes is also another challenge that could degrade system functionality and impact the availability of the system’s services. Therefore, it is crucial to choose appropriate security properties by considering their ability to address cyber threats with minimal negative impacts on the system’s functionality. This process is still subjected to inconsistencies due to ad- oc determinations by a specialist. In this work, we propose a novel algorithm for optimizing the implementation of security mechanisms in IoT applications for the agricultural domain to ensure the effectiveness of the applied mechanisms against the propagation of potential threats. We demonstrate our proposed algorithm on an IoT application in the farming domain to see how the algorithm helps with optimizing the applied security mechanisms. In addition, we used THREATGET to analyze cyber risks and validate the optimized security attributes against the propagation of cyber threats.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Shaaban et al. [42] do not go into great detail on the applicability of the standards to the IIoT or whether they need to be modified in any way to be better suitable for the IIoT.
“The study focuses mainly on IEC 62443-3-3 and IEC 62443-4-2 and does not go into great detail on the applicability of the standards to the IIoT or whether they need to be modified in any way to be better suitable for the IIoT.”
From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as [42]
The Category3-System and Category4-Component sections discuss IEC 62443-3-3 and 62443-4-2, and the Discussion describes optimizing IEC 62443-derived security attributes rather than examining whether the standards need modification for IIoT. However, §2.3.2 also discusses IEC 62443-3-2 in detail, so the claim that the study focuses mainly on 3-3 and 4-2 is not fully supported. (LLM, conf=0.81)
Experimental — accuracy not yet measuredShaaban et al. [42] focus mainly on IEC 62443-3-3 and IEC 62443-4-2.
“The study focuses mainly on IEC 62443-3-3 and IEC 62443-4-2 and does not go into great detail on the applicability of the standards to the IIoT or whether they need to be modified in any way to be better suitable for the IIoT.”
From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as [42]
The Category3-System and Category4-Component sections discuss IEC 62443-3-3 and IEC 62443-4-2, respectively. But Section 2.3 surveys the broader IEC 62443 series, and Section 2.4.5 describes selecting security attributes from the standard generally; these passages do not establish that the study focuses mainly on those two parts. No page numbers were available in our copy. (LLM, conf=0.78)
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
Abrial, J. R., Hoare, A., & Chapron, P. (1996) · Cambridge University Press eBooks · doi:10.1017/cbo9780511624162 · Cited by 1,700 · see citing works
Demystifying the Threat-Modeling Process
Torr, P. (2005) · IEEE Security & Privacy · doi:10.1109/msp.2005.119 · Cited by 121 · see citing works
Formal verification of security protocol implementations: a survey
Avalle, M., Pironti, A., & Sisto, R. (2012) · Formal Aspects of Computing · doi:10.1007/s00165-012-0269-9 · Cited by 69 · see citing works
Security Optimization of Dynamic Networks with Probabilistic Graph Modeling and Linear Programming
Almohri, H. M. J., Watson, L. T., Yao, D. D., et al. (2015) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2015.2411264 · Cited by 62 · see citing works
A Survey of Practical Formal Methods for Security
Kulik, T., Dongol, B., Larsen, P. G., Macedo, H. D., Schneider, S. A., Tran-Jørgensen, P. W. V., & Woodcock, J. (2022) · Formal Aspects of Computing · doi:10.1145/3522582 · Cited by 61 · see citing works
Secure IoT Platform for Industrial Control Systems
Shahzad, A., Kim, Y., & Elgamoudi, A. (2017) · International Conference on Platform Technology and Service · doi:10.1109/platcon.2017.7883726 · Cited by 41 · see citing works
Security Viewpoint in a Reference Architecture Model for Cyber-Physical Production Systems
Ma, Z., Hudic, A., Shaaban, A. M., & Plósz, S. (2017) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw.2017.65 · Cited by 38 · see citing works
Self-citationSecurity Assessment of Agriculture IoT (AIoT) Applications
Kristen, E., Kloibhofer, R., Díaz, V. H., et al. (2021) · Applied Sciences · doi:10.3390/app11135841 · Cited by 38 · see citing works
A STRIDE-Based Threat Model for Telehealth Systems
Abomhara, M., Gerdes, M. W., & Køien, G. M. (2015) · Cited by 33 · see citing works
Adapting Threat Modeling Methods for the Automotive Industry
Karahasanovic, A., Kleberger, P., & Almgren, M. (2017) · Chalmers Research (Chalmers University of Technology) · Cited by 29 · see citing works
A System-Based Approach to the Formal Development of Embedded Controllers for a Railway
Butler, M. J. (2002) · Design Automation for Embedded Systems · doi:10.1023/a:1016503426126 · Cited by 26 · see citing works
Towards the formal verification of security properties of a Network-on-Chip router
Sepúlveda, J., Aboul--Hassan, D., Sigl, G., et al. (2018) · Proceedings/Proceedings - European Test Workshop · doi:10.1109/ets.2018.8400692 · Cited by 24 · see citing works
Software Technologies: Applications and Foundations
Mazzara, M., Ober, I., & Salaün, G. (2018) · Lecture notes in computer science · doi:10.1007/978-3-030-04771-9 · Cited by 23 · see citing works
Formal Verification of Security Properties of Smart Card Embedded Source Code
Andronick, J., Chetali, B., & Paulin-Mohring, C. (2005) · Lecture notes in computer science · doi:10.1007/11526841_21 · Cited by 19 · see citing works
Connected cars — Threats, vulnerabilities and their impact
Strobl, S., Hofbauer, D., Schmittner, C., et al. (2018) · doi:10.1109/icphys.2018.8387687 · Cited by 16 · see citing works
Self-citationApplication of IEC 62443 for IoT Components
Shaaban, A. M., Kristen, E., & Schmittner, C. (2018) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-99229-7_19 · Cited by 16 · see citing works
Self-citationThreat Modeling in the Railway Domain
Schmittner, C., Tummeltshammer, P., Hofbauer, D., Shaaban, A. M., Meidlinger, M., Tauber, M., Bonitz, A., Hametner, R., & Brandstetter, M. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-18744-6_17 · Cited by 13 · see citing works
Self-citationSecurity Architecture for Swarms of Autonomous Vehicles in Smart Farming
Martínez-Rodríguez, B., Bilbao, S., & Hernández, F. J. (2021) · Applied Sciences · doi:10.3390/app11104341 · Cited by 12 · see citing works
An Approach to Verifying Security and Timing Properties in UML Models
Thapa, V., Song, E.-J., & Kim, H. (2010) · IEEE International Conference on Engineering of Complex Computer Systems (ICECCS) · doi:10.1109/iceccs.2010.10 · Cited by 11 · see citing works
Survey of Approaches for Security Verification of Hardware/Software Systems.Preprint
Demir, O., Xiong, W., Zaghloul, F., et al. (2016) · IACR Cryptology ePrint Archive · Cited by 11 · see citing works
Lang, F., Lescanne, P., & Liquori, L. (1999) · Lecture notes in computer science · doi:10.1007/3-540-48118-4 · Cited by 10 · see citing works
Security and Privacy Controls for Federal Information Systems and Organizations | NIST
Ross, R. S. (2013) · Cited by 5 · see citing works
Safety and Security in a Smart Production Environment
Kloibhofer, R., Kristen, E., & Jakšić, S. (2018) · Lecture notes in computer science · doi:10.1007/978-3-319-99229-7_17 · Cited by 4 · see citing works
Data Science – Analytics and Applications
(2022) · Springer eBooks · doi:10.1007/978-3-658-36295-9 · Cited by 3 · see citing works
Formal verification of security properties in trust management policy
Niu, J., Reith, M. G., & Winsborough, W. H. (2014) · Journal of Computer Security · doi:10.3233/jcs-130490 · Cited by 2 · see citing works
Implementation of formally verified real time distributed systems: Simplified flight control system
Elaraby, N., Wahba, A. M., & Taher, M. (2011) · doi:10.1109/icces.2011.6141006 · Cited by 2 · see citing works
Self-citationFormal Security Proofs of Cryptographic Standards
Baritel-Ruet, C. (2020) · HAL (Le Centre pour la Communication Scientifique Directe) · Cited by 2 · see citing works
A Survey of Practical Formal Methods for SecurityPreprint
Kulik, T., Dongol, B., Larsen, P. G., et al. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2109.01362 · Cited by 1 · see citing works
Flagged first, then by citations
Research works printed but not linked: 5
- Shaaban, A. An Ontology-Based Cybersecurity Framework for the Automotive Domain: Design, Implementation, and Evaluation. Doctoral Thesis, University of Vienna, Vienna, Austria, 2021.
- Shostack, A. Threat Modeling: Designing for Security; Wiley: Hoboken, NJ, USA, 2014.
- Swiderski, F.; Snyder, W. Threat Modeling; Microsoft Press: Redmond, WA, USA, 2004.
- Wahba, A.M.; El-Araby, N.A. Formal verification of real time distributed systems using B method. Int. J. Eng. Sci. Technol. (JEST) 2011, 3, 3427-3436.
- Abrial, J.R.; Hoare, A. The B-Book: Assigning Programs to Meanings; Cambridge University Press: Cambridge, UK, 1996; Volume 1.
Cited by
Sorted by citations
Mapping of Industrial IoT to IEC 62443 Standards
Cindrić, I., Jurčević, M., & Hadjina, T. (2025) · Sensors · doi:10.3390/s25030728 · Cited by 29 · see citing works
“Shaaban et al. [42] propose a novel algorithm to optimize the security measures for IoT devices in smart agriculture.”
- Authors
- Shaaban, A. M., Chlup, S., El-Araby, N., & Schmittner, C.
- Affiliations
- AIT Austrian Institute of Technology GmbH (AT)
- Institute of Computer Technology, Technical University of Vienna (TU Wien), Gusshausstrasse 27-29, 1040 Vienna, Austria
- Corresponding author
- Shaaban, Abdelkader Magdy
- Venue
- Applied Sciences
- Publisher
- MDPI AG
- Published
- 2022-06-02
- Volume
- 12
- Issue
- 11
- Pages
- 5653
- ISSN
- 2076-3417 (ISSN-L)
- OpenAlex
- W4281655279
- Cited by
- 18
- References
- 28
- Citations by year
- 2026: 4 · 2025: 3 · 2024: 4 · 2023: 6 · 2022: 1
- FWCI
- 3.46
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Applied Sciences (publishedVersion, cc-by)
- reposiTUm (TU Wien) (submittedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion)
- Funders
- European Union’s Horizon 2020 Research and Innovation programme (101021274)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- Internet of Things security, smart agriculture, IEC 62443, agricultural IoT, system availability
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
