Security risk management for IoT devices in the agricultural sector
DOI:
https://doi.org/10.35381/i.p.v8i15.5182Keywords:
Internet of things, smart agriculture, risk management, cybersecurity, security controls, (Source: DeCS).Abstract
ABSTRACT
The study aimed to develop a proposal for the management of security risks in devices based on the Internet of Things for the agricultural sector, aimed at a proposal of technical controls for their treatment. The methodology was based on the ISO/IEC 27005:2022 standard for the identification of assets, threats, and vulnerabilities at the perception, network, processing, and application layers. The analysis integrated the regulatory frameworks NIST SP 800-53, ETSI EN 303 645 and NISTIR 8259A to establish technical security and privacy criteria, assessing the impact and probability according to the Ecuadorian legal regulations on the protection of personal data. The results showed that the network and application layers concentrated the most critical scenarios against possible attacks. It was concluded that the process made it possible to identify the assets with the greatest exposure and to inform the proposal of specific technical controls to strengthen resilience in connected agricultural environments.
Downloads
References
Benyezza, H., Bouhedda, M., Kara, R., & Rebouh, S. (2023). Smart platform based on IoT and WSN for monitoring and control of a greenhouse in the context of precision agriculture. Internet of Things, 23, 100830. https://doi.org/10.1016/j.iot.2023.100830
Boursianis, A. D., Papadopoulou, M. S., Diamantoulakis, P., Liopa-Tsakalidi, A., Barouchas, P., Salahas, G., Karagiannidis, G., Wan, S., & Goudos, S. K. (2022). Internet of Things (IoT) and Agricultural Unmanned Aerial Vehicles (UAVs) in smart farming: A comprehensive review. Internet of Things, 18, 100187. https://doi.org/10.1016/j.iot.2020.100187
Campoverde-Molina, M., y Luján-Mora, S. (2025). Cybersecurity in smart agriculture: A systematic literature review. Computers & Security, 150, 104284. https://doi.org/10.1016/j.cose.2024.104284
Castro-Paredes, J. G., Mendoza-Masache, G. R., Loja-Mora, N. M., Loján-Alvarado, H. P., Castro-Paredes, J. G., Mendoza-Masache, G. R., Loja-Mora, N. M., y Loján-Alvarado, H. P. (2025). Protección de datos por diseño y por defecto. Implicaciones legales en el desarrollo de software. Ingenium et Potentia. Revista Electrónica Multidisciplinaria de Ciencias Básicas, Ingeniería y Arquitectura, 7(12), 77-96. https://doi.org/10.35381/i.p.v7i12.4471
Debauche, O., Trani, J. P., Mahmoudi, S., Manneback, P., Bindelle, J., Mahmoudi, S. A., Guttadauria, A., & Lebeau, F. (2021). Data management and internet of things: A methodological review in smart farming. Internet of Things, 14, 100378. https://doi.org/10.1016/j.iot.2021.100378
Ivanochko, I., Greguš, M. jr., & Melnyk, O. (2024). Smart Farming System Based on Cloud Computing Technologies. Procedia Computer Science, The 15th International Conference on Ambient Systems, Networks and Technologies Networks (ANT) / The 7th International Conference on Emerging Data and Industry 4.0 (EDI40), April 23-25, 2024, Hasselt University, Belgium, 238, 857-862. https://doi.org/10.1016/j.procs.2024.06.103
Izquierdo, J. A., Jaramillo, J. F., Loja, N. M., y Mazon-Olivo, B. (2025). Modelo integrado de adopción de tecnologías en la agricultura. Caso de estudio: IA e IoT aplicadas en producción de cacao. Revista ESPACIOS, 46(03). https://doi.org/10.48082/espacios-a25v46n03pXX
Khattak, H. A., Shah, M. A., Khan, S., Ali, I., & Imran, M. (2019). Perception layer security in Internet of Things. Future Generation Computer Systems, 100, 144-164. https://doi.org/10.1016/j.future.2019.04.038
Larrea, J. W. H., Bermúdez, M. J. V., Balarezo, L. C. B., y Holguin, J. M. Y. (2024). Monitoreo IOT utilizando una red de sensores inalámbricos para el cultivo de cacao. Polo del Conocimiento, 9(11), 826-844. https://doi.org/10.23857/pc.v9i11.8343
Laverde Mena, J. A., Laverde Mena, C. G., Laverde Mena, J. A., y Laverde Mena, C. G. (2021). Internet de las cosas aplicado en la agricultura ecuatoriana: Una propuesta para sistemas de riego. Dilemas contemporáneos: educación, política y valores, 8(2). https://doi.org/10.46377/dilemas.v8i2.2542
Loza González, G. A. (2021). Factores críticos de éxito en la aplicación de la IOT al Sector Agropecuario [Tesis de Grado, Universidad Politécnica Salesiana]. http://dspace.ups.edu.ec/handle/123456789/20955
Montaño-Blacio, M., González-Escarabay, J., Jiménez-Sarango, Ó., Mingo-Morocho, L., y Carrión-Aguirre, C. (2023). Diseño y despliegue de un sistema de monitoreo basado en IoT para cultivos hidropónicos. Ingenius, (30), 9-18. https://doi.org/10.17163/ings.n30.2023.01
Mosquera Meléndrez, L. M., y Cevallos Rojas, C. D. (2022). Diseño e implementación de un Prototipo IoT para el monitoreo de parámetros ambientales aplicados al cultivo de arroz utilizando ESP32 y Thingspeak [Tesis de Grado, Universidad Politécnica Salesiana]. http://dspace.ups.edu.ec/handle/123456789/22884
Novillo, G. L., Macancela, A., Tacuri, E., y Lupercio, L. (2022). Estación meteorológica inteligente para control de riego y mitigación de heladas. Revista Tecnológica - ESPOL, 34(3), 46-57. https://doi.org/10.37815/rte.v34n3.948
Rejeb, A., Abdollahi, A., Rejeb, K., & Treiblmaier, H. (2022). Drones in agriculture: A review and bibliometric analysis. Computers and Electronics in Agriculture, 198, 107017. https://doi.org/10.1016/j.compag.2022.107017
Rivera Guzmán, E. F., Mañay Chochos, E. D., Chiliquinga Malliquinga, M. D., Baldeón Egas, P. F., y Toasa Guachi, R. M. (2022). LoRa Network-Based System for Monitoring the Agricultural Sector in Andean Areas: Case Study Ecuador. Sensors, 22(18), 6743. https://doi.org/10.3390/s22186743
Rudrakar, S., & Rughani, P. (2024). IoT based Agriculture (Ag-IoT): A detailed study on Architecture, Security and Forensics. Information Processing in Agriculture, 11(4), 524-541. https://doi.org/10.1016/j.inpa.2023.09.002
Tao, W., Zhao, L., Wang, G., & Liang, R. (2021). Review of the internet of things communication technologies in smart agriculture and challenges. Computers and Electronics in Agriculture, 189, 106352. https://doi.org/10.1016/j.compag.2021.106352
Vega, D. D. C., Ramírez, K. A. B., Mora, N. M. L., y Alvarado, H. P. L. (2025). Gestión de riesgos para el tratamiento de datos personales sensibles en el movimiento de mujeres de El Oro. Revista Científica Arbitrada Multidisciplinaria PENTACIENCIAS, 7(3), 389-406. https://doi.org/10.59169/pentaciencias.v7i3.1505
Yazdinejad, A., Zolfaghari, B., Azmoodeh, A., Dehghantanha, A., Karimipour, H., Fraser, E., Green, A. G., Russell, C., & Duncan, E. (2021). A Review on Security of Smart Farming and Precision Agriculture: Security Aspects, Attacks, Threats and Countermeasures. Applied Sciences, 11(16), 7518. https://doi.org/10.3390/app11167518
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Steven Javier Gomez-Yumbo, Jeremy Joel Riofrio-Valverde, Nancy Magaly Loja-Mora, Walter Marcelo Fuertes-Díaz
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
CC BY-NC-SA : Esta licencia permite a los reutilizadores distribuir, remezclar, adaptar y construir sobre el material en cualquier medio o formato solo con fines no comerciales, y solo siempre y cuando se dé la atribución al creador. Si remezcla, adapta o construye sobre el material, debe licenciar el material modificado bajo términos idénticos.
OAI-PMH URL: https://fundacionkoinonia.com.ve/ojs/index.php/ingeniumetpotentia/oai
