# Security Architecture for Swarms of Autonomous Vehicles in Smart Farming
## 5 Conclusions  
The authors of this article propose an end-to-end cybersecurity design addressing systems that manage missions with swarms of heterogeneous autonomous or unmanned vehicles in Smart Farming. This design covers all of the aspects recommended by the specification ISO 7798-2. Figure 2 presents the main cyber-security solutions proposed for the architecture under consideration, i.e., an LDAP Server, a VPN, TLS and X.509 certificates. The use of an LDAP Server is a good solution for authentication, authorisation and non-repudiation of users, as it is widely supported across all industries (i.e., multi-platform  
Figure 2: Security solution for a system to manage missions with swarms of autonomous vehicles. and multi-vendor-compatible implementations can be found), and it is extensible to meet future requirements. In this case, the Mission Console would check all user credentials and roles in the LDAP Server. The combination of TLS and X.509 certificates guarantee confidentiality, authentication, integrity and non-repudiation over HTTP networks. TLS implements a combination of symmetric and asymmetric cryptography so it is possible to find the right balance between performance and security of communications. X.509 certificates must be provided by recognised Certificate Authorities. The deployment of a VPN to communicate with vehicles provides an integral solution to secure the connection through a WAN (Wide Area Network). A large number of VPN implementations can be found nowadays but note that the security suite offered by each of them may vary. When choosing a VPN product, it is important to carefully analyse the security features that the particular solution offers. A more detailed summary of all of the cybersecurity measures recommended in this paper is presented in Table 2. \begin{table}
\begin{tabular}{l l l} \hline \hline
**Cybersecurity Goal** & **Entities Involved** & **Cybersecurity Technology** \\ \hline \multirow{6}{*}{Data confidentiality: encryption through symmetric cryptography.} & & \begin{tabular}{l} HTTPS over TLS (AES-CBC). \\ \end{tabular} \\  & \begin{tabular}{l} Communication channel A \\ Communication channel B \\ Communication channel C \\ Communication channel D \\ Communication channel E \\ Data Repository \\ \end{tabular} & \begin{tabular}{l} HTTPS over TLS (AES-CBC), HTTP POST or \\ PUT methods for SWARM Controller REST \\ API \\ VPN guaranteed: AES-256. \\ HTTPS over TLS (AES-CBC). \\ N/A. \\ Encryption of sensitive data only (e.g., \\ passwords). \\ \hline \multirow{6}{*}{Authentication: LDAP, asymmetric cryptography, credentials for VPN users.} & \begin{tabular}{l} LDAP (users), X.509 certificate + RSA \\ Communication channel B \\ Communication channel C \\ Communication channel D \\ Communication channel E \\ \end{tabular} \\  & \begin{tabular}{l} TLS (SHA-1). \\ TLS (SHA-1). \\ IPN guaranteed: HMAC-SHA-1. \\ TLS (SHA-1). \\ \end{tabular} \\  & \begin{tabular}{l} Communication channel A \\ Communication channel B \\ Communication channel C \\ Communication channel D \\ Communication channel E \\ \end{tabular} & \begin{tabular}{l} TLS (SHA-1). \\ IPN/A. \\ IPN against data backups, regular expressions to \\ \end{tabular} \\  & \begin{tabular}{l} Data Repository \\ \end{tabular} & \
\begin{tabular}{l} check data patterns, common information \\ model. \\ \end{tabular} \\ \hline \multirow{6}{*}{Authorisation: LDAP, VPN user credentials, DB roles, REST API access restrictions.} &
\begin{tabular}{l} LDAP (users). \\ HTTP security headers, validation of \\ content-type and input data, minimise allowed \\ HTTP methods for the SWARM Controller \\ REST API and API keys definition. \\ VPN guaranteed: VPN user credentials. \\ DB privileges for the users of the Mission \\ Console based on their role. \\ DB privileges for the SWARM Controller. \\ \end{tabular} \\ \hline \hline \end{tabular}
\end{table} 
Table 2: Summary of the cybersecurity solutions proposed for the target architecture. As future work, a study on new editions of Eclipse Cyclone DDS is contemplated.