arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2403.08036cs.CRcs.AIcs.CY
收藏

食品与农业领域网络安全事件综述

A Review of Cybersecurity Incidents in the Food and Agriculture Sector

Commonwealth Cyber Initiative, Virginia Tech(弗吉尼亚联邦网络倡议组织,弗吉尼亚理工大学);University of Georgia(佐治亚大学);National Security Institute, Virginia Tech(弗吉尼亚理工大学国家安全研究所);Deloitte & Touche LLP(德勤全球);Bradley Department of Electrical and Computer Engineering, Virginia Tech(弗吉尼亚理工大学布拉德利电气与计算机工程系);Department of Biological Systems Engineering, Virginia Tech(弗吉尼亚理工大学生物系统工程系)

Ajay Kulkarni, Yingjie Wang, Munisamy Gopinath, Dan Sobien, Abdul Rahman, Feras A. Batarseh

AI总结:

本综述分析了2011至2023年间食品与农业领域的30起网络安全事件,提出以农民为中心的AI(FCAI)框架,通过AI保证支持农业生产决策,以应对日益增长的网络风险。

摘要:

食品与农业(FA)领域对新兴技术的日益采用,凸显了加强安全以最小化网络风险的必要性。鉴于这一方面,本手稿回顾了FA领域已披露和记录的网络安全事件。为此,确定了三十起网络安全事件,这些事件发生在2011年7月至2023年4月之间。这些事件的细节来源于多个渠道,例如:联邦调查局(FBI)生成的私营行业和即时通知,受影响组织的内部报告,以及可用的媒体来源。考虑到现有信息,对每起事件的安全威胁、勒索金额及其对组织的影响进行了简要描述。本综述报告了FA领域网络安全威胁频率的增加。为最小化这些网络风险,还讨论了流行的网络安全框架和近期针对农业的网络安全解决方案。此外,解释了FA领域对AI保证的需求,并提出了以农民为中心的AI(FCAI)框架。FCAI框架的主要目标是通过纳入AI保证,支持农民在农业生产中的决策。最后,指出了所报告的网络事件对其他关键基础设施、粮食安全和经济的影响,并明确了未来发展的开放性问题。

英文摘要:

The increasing utilization of emerging technologies in the Food & Agriculture (FA) sector has heightened the need for security to minimize cyber risks. Considering this aspect, this manuscript reviews disclosed and documented cybersecurity incidents in the FA sector. For this purpose, thirty cybersecurity incidents were identified, which took place between July 2011 and April 2023. The details of these incidents are reported from multiple sources such as: the private industry and flash notifications generated by the Federal Bureau of Investigation (FBI), internal reports from the affected organizations, and available media sources. Considering the available information, a brief description of the security threat, ransom amount, and impact on the organization are discussed for each incident. This review reports an increased frequency of cybersecurity threats to the FA sector. To minimize these cyber risks, popular cybersecurity frameworks and recent agriculture-specific cybersecurity solutions are also discussed. Further, the need for AI assurance in the FA sector is explained, and the Farmer-Centered AI (FCAI) framework is proposed. The main aim of the FCAI framework is to support farmers in decision-making for agricultural production, by incorporating AI assurance. Lastly, the effects of the reported cyber incidents on other critical infrastructures, food security, and the economy are noted, along with specifying the open issues for future development.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑