An approach for risk assessment and mitigation in cognitive radio technologies. (1st January 2013)

• Record Type: Journal Article
• Authors: Abadie, Andre'; Wijesekera, Duminda
• Is Part Of: International journal of information privacy, security and integrity. Volume 1:Number 4(2013)
• Page Start: 344
• Page End: 359
• Publication Date: 2013-01-01
• Subjects: software defined radio -- SDR -- cognitive radio -- information security -- computer security -- vulnerabilities -- threats -- attack vectors -- misuse-cases -- risk assessment -- risk mitigation -- risk engine -- policy engine -- trusted computer base -- TCB; Computer security -- Periodicals; Computer networks -- Access control -- Periodicals; Information technology -- Security measures -- Periodicals; Data protection -- Periodicals; Privacy, Right of -- Periodicals; 005.805
• Languages: English
• ISSNs: 1741-8496

Abstract

Though research in the vulnerabilities of cognitive radio exists, few explore the threat vectors against both the cognitive engine and the underlying SDR infrastructure within which it operates. Presenting a risk assessment methodology, this paper takes such a holistic approach and then further contributes to the research area by offering three misuse cases that portray how the vulnerabilities discussed could be exploited. Specifically, these cases visualise the risk environment based on a denial of service, an advanced persistent threat, and an insider threat and will allow for security practitioners to anticipate how their organisations may be impacted. Finally, suggested techniques for mitigation of these risks are discussed. As with all emerging technologies, there are a number of unknown conditions or influences that will shape the eventual realisation of its maturity. Risk management is the best mechanism to address those unknowns.