Source: UNIVERSITY OF TENNESSEE submitted to
PRECISION DAIRY MANAGEMENT: MEASURING DEPLOYMENT, EXAMINING DATA SECURITY, OWNERSHIP, AND PRIVACY IMPLICATIONS, AND MODELLING POTENTIAL THREATS
Sponsoring Institution
National Institute of Food and Agriculture
Project Status
ACTIVE
Funding Source
Reporting Frequency
Annual
Accession No.
1030426
Grant No.
2023-67023-40128
Cumulative Award Amt.
$300,000.00
Proposal No.
2022-11540
Multistate No.
(N/A)
Project Start Date
Sep 1, 2023
Project End Date
Aug 31, 2025
Grant Year
2023
Program Code
[A1642]- AFRI Foundational - Social Implications of Emerging Technologies
Project Director
Greig, J. A.
Recipient Organization
UNIVERSITY OF TENNESSEE
2621 MORGAN CIR
KNOXVILLE,TN 37996-4540
Performing Department
(N/A)
Non Technical Summary
This study will:1. Measure the deployment of internet-connected devices (ICDs) used in Precision Dairy Management (PDM) by TN dairy farmers, including prevalence and device functionality and examine their understanding and perceptions of Precision Dairy Management and the needs related to data privacy and security. This includes (a) consulting with stakeholders and subject matter experts on interview/focus group items (b) designing instruments, (c) collecting data, and (d) analyzing data.2. Survey PDM technology companies to compare farmer and PDM developers' understanding of, perspective on, and concerns for PDM technologies. This includes (a) consulting with stakeholders and subject matter experts on survey items (b) designing instruments, (c) collecting data, and (d) analyzing and comparing data.3. Assess the threats posed by PDM technology in terms of data privacy and unauthorized access, including risks both at the farmer and nation state levels. This includes (a) reviewing data collection results and ICD documentation to identify collection, storage, and access methods, (b) constructing a threat model based on this data and known information about attacker capabilities, (c) simulating attacks and measuring impact.The preliminary data collected through this New Investigator, Seed study will be used to assess the implications that agricultural PDMs pose for society, agricultural markets, and agricultural communities. This will include examining the security and privacy implications related to the collection, storage, and sharing of data collected by PDMs. These data will support future proposed research in the potential areas of communication, education, and technical solutions on a national scale.
Animal Health Component
(N/A)
Research Effort Categories
Basic
100%
Applied
(N/A)
Developmental
(N/A)
Classification

Knowledge Area (KA)Subject of Investigation (SOI)Field of Science (FOS)Percent
80374103030100%
Goals / Objectives
1. Measure the deployment of internet-connected devices (ICDs) used in Precision Dairy Management (PDM) by TN dairy farmers, including prevalence and device functionality and examine their (producer) understanding and perceptions of Precision Dairy Management and the needs related to data privacy and security. This includes (a) consulting with stakeholders and subject matter experts on interview/focus group items (b) designing instruments, (c) collecting data, and (d) analyzing data.2. Survey PDM technology companies to compare farmer and PDM developers' understanding of, perspective on, and concerns for PDM technologies. This includes (a) consulting with stakeholders and subject matter experts on survey items (b) designing instruments, (c) collecting data, and (d) analyzing and comparing data.3. Assess the threats posed by PDM technology in terms of data privacy and unauthorized access, including risks both at the farmer and nation state levels. This includes (a) reviewing data collection results and ICD documentation to identify collection, storage, and access methods, (b) constructing a threat model based on this data and known information about attacker capabilities, (c) simulating attacks and measuring impact.The preliminary data collected through this New Investigator, Seed study will be used to assess the implications that agricultural PDMs pose for society, agricultural markets, and agricultural communities. This will include examining the security and privacy implications related to the collection, storage, and sharing of data collected by PDMs. These data will support future proposed research in the potential areas of communication, education, and technical solutions on a national scale.
Project Methods
Stakeholder InvolvementA primary component of this project includes informal and formal discussions with stakeholders and subject matter experts. Such stakeholders include members of TN dairy 5 community (e.g., dairy producers, dairy employees, allied dairy industry representatives), state Extension agents, and technology representatives. Input from stakeholders will be used to inform the development of items for inclusion in the survey questionnaire and interview/focus group moderators guides. Further, these stakeholders will serve as expert reviewers to review both the survey questionnaire and focus group moderator guides for content and face validity, comprehensiveness, and clarity or appropriateness of terminology used. Lastly, stakeholder input will be vital in interpreting the data collected to identify appropriate next steps in exploring and addressing this topic.Proposed Project Methodss and TechniquesWe will conduct focus groups and interviews with dairy producers about their understanding, knowledge, perceptions, and concerns for PDM. One focus group will be held in each of the major TN regions (i.e., West TN, Central TN, and East TN). We aim to recruit eight participants per focus group for a pool of 24 total dairy producer participants. In addition to focus-groups, one-on-one interviews will be conducted with these professionals to better understand their experiences, perceptions, and processes utilized pertaining to security and privacy of smart technologies. These interviews, when considered alongside the focus groups, will help provide a more comprehensive account of producers' knowledge, perceptions, and experience regarding smart technology security and privacy. For this study "security" is conceptualized as the practice of protecting information from unauthorized access, corruption, or theft and "privacy" relates to control, ownership, and how and where that data is stored. The moderator's guides utilized for the focus groups and interviews will be developed to provide project investigators insight into the lived experiences of TN producers regarding PDM technology data use, sharing, and privacy and security. Focus group and interview participants will be recruited through the TN Cooperative Extension services and via the TNDairy Discuss listserv, which includes 289 dairy individuals in Tennessee. Potential participants will be offered a $100 incentive upon completion of focus-groups and interviews. Interested participants will be required to fill-out a demographic form which will be used to ensure that diverse populations are included in the study and that our participant sample includes a representative cross-section of the technology adoption scale (lowto high adopters).The investigators will use responses from the producer focus groups and interviews to generate a list of technologies TN dairy producers currently use or are interested in adopting. The developed list will then be used to generate a list of companies that develop such technology, and each company will be sent a recruitment email to participate in an online survey. The survey recruitment email will inform companies that they are being contacted because producers are currently using or are considering their technology and that the investigators would be willing to share key findings from producer focus groups should they be willing to participate in the survey. The constructs and items included in the survey questionnaire will be developed and designed based on prior literature, as well as input from subject matter experts (e.g., dairy leaders, Extension, producers, and technology experts) consulted as part of this project. Specifically, the survey will measure technology developers' perceived barriers, challenges, or concerns pertaining to data use, data sharing, and other privacy and security concerns in Precision Dairy Management.Modelling potential threats will start by investigating the data collection, storage, and access methods of the sensors, software systems, and smart devices identified through interview, focus group, and survey. This investigation will involve reviewing documentation, 6 online discussion, and software artifacts related to the technologies identified in our analysis of PDM deployments, paying particular attention to potential privacy and security concerns. We will also research what adversarial actors may want to compromise PDM systems and their goals in doing so. Next, we will construct a threat model for PDM informed by (a) the results of our investigation, (b) concerns expressed in stakeholder interactions, and (C) the MITRE ATT&CKĀ® framework. Threat models are helpful when evaluating security and privacy as they (i) give a detailed and precise description of the modeled technology, (ii) identify adversarial actors and their goals, (iii) detail potential threats against the modeled system, and (iv) provide a way to estimate the likelihood and impact of adversarial actions, both at the individual product and nation state levels. The benefits of this threat model will be two-fold. First, it will clearly communicate to interested parties (e.g., stakeholders, researchers, the government) the current security and privacy posture of PDM. Second, it will estimate the effectiveness of strategies and technologies (i.e., mitigations) that seek to address threats against PDM. Taken together, these benefits will allow researchers and technology developers to identify which mitigations are the most promising and deserving of future research. As such, this model will lay the foundation for future research and development that addresses these issues in an informed and scientific manner.Data from the survey questionnaire will be analyzed using the SPSS 28 statistical software package. Data analysis will primarily include descriptive measures such as percentages, frequencies, means, and standard deviations. Higher level modeling may also be utilized if applicable. Focus group and interview data will be coded by project investigators and analyzed to identify emerging themes in the experiences of participants. Quality, credibility, and trustworthiness will be established through thick, rich descriptions; researcher debriefing; questioning assumptions; and reflexivity (Guba & Lincoln, 1989; Tracy, 2010).

Progress 09/01/23 to 08/31/24

Outputs
Target Audience:During the reporting period, the project targeted the following audiences through research, education, and outreach activities. Each group was selected based on their direct relevance to the project objectives, and efforts were made to ensure inclusivity and address specific challenges these audiences face: 1.Small and Medium-Sized Dairy Producers Why Targeted: These producers represent a significant portion of the agricultural industry yet often face challenges in adopting advanced technologies due to resource constraints, limited technical knowledge, and concerns about data security and privacy. How Reached: Engaged through surveys, focus groups, and interviews to understand their experiences with Precision Dairy Technologies (PDTs). Participating producers were provided opportunities to discuss barriers such as cost, technical support, and the perceived complexity of technology integration. 2.Large Commercial Dairy Producers Why Targeted: These producers typically lead in adopting advanced PDTs and provide valuable insights into best practices, scalability, and the challenges of managing large-scale operations. How Reached: Outreach involved site visits, including at the Little River Unit, to observe their use of automation systems like RFID tags, herd management software, and environmental systems. Producers participated in discussions regarding data ownership, infrastructure vulnerabilities, and mitigation strategies. 3.Agricultural Extension Professionals Why Targeted: Extension professionals serve as intermediaries between researchers and producers, making them critical in disseminating project findings and recommendations. How Reached: Engaged through workshops focused on integrating research findings into outreach programs. Training sessions emphasized the potential risks and benefits of PDTs, preparing them to advise producers on secure technology adoption. 4.Undergraduate and Graduate Students in Agriculture Why Targeted: As future leaders in agriculture, students benefit from hands-on learning experiences to prepare them for implementing and managing PDTs in their careers. How Reached: Students were involved in experiential learning activities, including building cyber kill chains, DREAD models, and network diagrams for smart dairy systems. Participants contributed to data analysis and problem-solving related to cybersecurity in agriculture, enhancing their practical knowledge. Changes/Problems:Two of the Co-PIs on this project will take leave-of-absences during the project period. Dr. Liz Eckelkamp will be on leave September 9, 2024-December 31, 2024. Dr. Shelli Rampold will be on leave November 25, 2024-January 21, 2025. The planned activities for these Co-PIs will be transitioned to Dr. Greig and Dr. Ruoti. While we do not currently anticipate challenges with completing stated project goals within the project timeline, we will update NIFA if this changes and there are planned timetable changes due to these events. What opportunities for training and professional development has the project provided?During this reporting period, the project provided significant opportunities for training and professional development to individuals involved in its activities. These efforts focused on building skills and knowledge in precision dairy management (PDM), cybersecurity, and agricultural technology, benefiting both students and professionals. Training Activities Hands-On Learning for Students Participants: Undergraduate and graduate students in agriculture and technology programs. Activities: Students were trained to design and implement cybersecurity models, including theDREAD modelandcyber kill chain, to assess and address vulnerabilities in PDM technologies. Participants engaged in creating network diagrams and documenting potential threats to Internet-Connected Devices (ICDs) on dairy farms. Training included analyzing data from producers and understanding how ICD functionalities impact privacy and security. Outcome: Students gained practical experience in cybersecurity within an agricultural context, enhancing their ability to address real-world challenges in their future careers. Mentorship Opportunities Students worked one-on-one with faculty mentors to refine their research skills, focusing on: Data collection and analysis for producer interviews and surveys. Developing research protocols for evaluating PDM technology risks. Outcome: Increased proficiency in research methodologies and the ability to translate technical findings into practical recommendations. Professional Development Activities Workshops for Agricultural Extension Professionals Participants: Extension professionals working to educate producers about PDM technologies. Activities: Workshops introduced foundational cybersecurity concepts and highlighted common vulnerabilities in PDM systems. Professionals were trained to use simplified educational materials to effectively communicate risks and benefits to producers. Outcome: Improved capacity to guide producers in adopting secure PDM technologies. Skill Building in Threat Modeling Participants: Students and project collaborators. Activities: Participants received training in threat modeling techniques, including developing and applying use cases for systems like theFarm Management System (FMS). Training emphasized identifying and mitigating risks posed by ICDs in precision agriculture. Outcome: Participants enhanced their analytical skills and understanding of cybersecurity risks in a specialized agricultural setting. Site Visits to Operational Dairy Farms Participants: Students and faculty. Activities: Visits to facilities like the East Tennessee AgResearch and Education Center - Little River Unit provided experiential learning opportunities. Participants observed the implementation of PDM technologies, such as automated milking systems and herd management software, and discussed their functionalities and vulnerabilities with producers. Outcome: First-hand exposure to real-world PDM applications deepened participants' understanding of operational challenges and potential solutions. Collaborative Learning Through Stakeholder Engagement Participants: Students, extension professionals, and producers. Activities: Stakeholder consultations included discussions on data privacy and security, fostering collaborative problem-solving. Participants were encouraged to share perspectives and brainstorm practical strategies for addressing identified risks. Outcome: Broadened knowledge of diverse stakeholder concerns and enhanced communication skills for addressing complex agricultural challenges. Independent Study and Literature Reviews Participants: Students working on project-related tasks. Activities: Students conducted literature reviews on cybersecurity and privacy issues in precision agriculture, focusing on risks associated with data collection, storage, and sharing. These reviews informed the development of educational materials and research protocols. Outcome: Increased knowledge of current research and best practices in agricultural technology. Impact of Training and Professional Development Skill Development: Students and professionals gained critical skills in cybersecurity, data analysis, and precision agriculture, preparing them to address emerging challenges in the field. Career Advancement: Participants enhanced their professional competencies, making them more competitive in academic and industry roles. Knowledge Sharing: Extension professionals are now better equipped to educate producers about the benefits and risks of adopting PDM technologies, fostering informed decision-making at the farm level. These training and professional development activities have strengthened the project's impact by building a workforce that is skilled in integrating technology and cybersecurity into agricultural systems. This foundation will support future efforts to expand the adoption of secure and effective PDM technologies. How have the results been disseminated to communities of interest?The results of this project have been disseminated to targeted communities through a combination of outreach, education, and collaborative activities. These efforts aimed to share findings with stakeholders, enhance public understanding, and foster interest in careers related to precision agriculture and agricultural cybersecurity. 1. Outreach to Dairy Producers Activity: Informational Meetings and Focus Groups Description: Results from preliminary interviews and focus groups were shared with participating dairy producers. Discussions focused on the benefits and risks of adopting precision dairy management (PDM) technologies, emphasizing actionable steps to improve data privacy and security. Impact: Producers gained a deeper understanding of their vulnerabilities and practical insights into safeguarding their operations, fostering trust in emerging technologies. Activity: Site Visits Description: Visits to operational dairy farms, such as the East Tennessee AgResearch and Education Center - Little River Unit, provided an opportunity to disseminate findings directly to producers. Discussions were tailored to specific farm setups, addressing real-world challenges faced by farmers. Impact: Producers were equipped with targeted recommendations to enhance the security and functionality of their PDM systems. 2. Engagement with Agricultural Extension Professionals Activity: Training Workshops Description: Findings from the research were integrated into workshops for extension professionals, focusing on data security, privacy, and the implementation of PDM technologies. Simplified educational materials were developed to enable extension professionals to effectively communicate key concepts to producers. Impact: Extension professionals were better prepared to serve as intermediaries, ensuring that farmers understand the implications of adopting precision technologies. 3. Student and Faculty Engagement Activity: Academic and Career Integration Description: Results were shared with students through coursework and experiential learning activities, such as the development of cybersecurity models and network diagrams for smart dairy systems. Impact: Students gained exposure to cutting-edge research and practical applications, inspiring interest in careers at the intersection of agriculture, science, and technology. Activity: Presentations and Group Discussions Description: Faculty members and students involved in the project presented findings during internal seminars and group discussions on agricultural technology and cybersecurity. Impact: These sessions facilitated knowledge exchange among participants and encouraged interdisciplinary collaboration. 4. Stakeholder Collaboration Activity: Consultation with Technology Providers and dairy producers Description: Results regarding producer concerns and security risks were shared with PDM technology providers to foster a better alignment between technology design and producer needs. Impact: Enhanced collaboration between producers and technology developers to address data privacy and security challenges. 5. Future Dissemination Plans To expand the reach of project findings, future efforts will include: Collaborating with extension services and youth (4-H)programs to develop workshopseries. Publishing lay summaries in local agricultural newsletters to reach communities. Creating publicly accessible datasets and tools that farmers and extension professionals can use to improve decision-making. Overall Impact Dissemination efforts have increased awareness of precision agriculture and its associated cybersecurity challenges among dairy producers, faculty, students, and extension professionals. By fostering collaboration, enhancing understanding, and inspiring interest, the project has laid the groundwork for broader adoption of secure PDM technologies and future engagement with diverse communities. What do you plan to do during the next reporting period to accomplish the goals?To advance the goals of the project and address challenges encountered during this reporting period, the following actions will be taken: 1. Completion of Ongoing Activities Cybersecurity Models: Finalize the cyber kill chain and DREAD model for precision dairy management (PDM) technologies, incorporating additional feedback from stakeholders and subject matter experts. Validate and refine threat models using simulated attack scenarios and real-world data. Data Analysis and Reporting: Analyze data collected from producer interviews and surveys to identify trends in technology adoption, data security concerns, and operational challenges. Compile findings into actionable recommendations for producers and technology providers. 2. Expansion of Data Collection Efforts Producer Surveys: Distribute surveys to a larger group of dairy producers to gather more comprehensive data on PDM technology use and perceptions. Explore additional factors influencing technology adoption, including economic and social considerations. Technology Provider Engagement: Conduct follow-up surveys and interviews with PDM technology companies to delve deeper into their data management practices and alignment with producer concerns. 3. Development of Educational and Outreach Materials Extension Professional Resources: Develop a comprehensive guide for extension professionals to educate producers on PDM technologies, data privacy, and security. Simplify complex cybersecurity concepts into accessible language and visuals. Producer-Focused Content: Create fact sheets and best practice guides to help producers mitigate risks associated with PDM technologies. Organize workshops and training sessions tailored to the needs of small and medium-sized dairy producers. 4. Addressing Stated Goals Not Yet Met Nation-State Level Threats: Expand analysis to assess potential risks posed by nation-state actors targeting PDM technologies. Construct advanced threat models based on data from current documentation and known attacker capabilities. Data Ownership and Privacy Policies: Investigate data ownership and privacy practices of cloud storage providers used in PDM systems. Evaluate terms of service and end-user license agreements (EULAs) to identify potential risks to producers. 5. Enhancing Collaboration and Community Engagement Broadening Stakeholder Involvement: Initiate efforts to include socially and economically disadvantaged farmers, policymakers, and diverse community groups in data collection and outreach activities. Partner with extension services and youth (4-H)programs to reach underserved audiences. University Collaborations: Leverage partnerships with academic institutions to involve more students in project activities, focusing on research, data analysis, and outreach. 6. Problem Resolution Technical Barriers: Work with producers to address challenges identified during site visits, such as system vulnerabilities caused by outdated or unsupported technologies. Provide tailored recommendations to improve system security and functionality. Resource Constraints: Seek additional funding or partnerships to scale data collection efforts and expand the reach of educational materials. Impact of Planned Activities The next reporting period will focus on completing current objectives, addressing gaps, and broadening the project's impact through targeted outreach and collaboration. These activities aim to enhance the adoption, security, and effectiveness of PDM technologies, ensuring that producers, educators, and stakeholders are better equipped to navigate the challenges and opportunities of precision agriculture.

Impacts
What was accomplished under these goals? Accomplishments Under Major Goals Problem Addressed by the Project The project aims to address the growing reliance on Internet-Connected Devices (ICDs) in Precision Dairy Management (PDM) and the associated challenges related to data privacy, security, and unauthorized access. This includes understanding producer perceptions, improving data security, and mitigating risks at both farm and national levels. By exploring the technological, social, and economic implications of PDM, the project seeks to enhance the adoption of secure and effective systems while fostering trust among dairy producers and technology providers. Audience Impacted The most immediate beneficiaries of this work are dairy producers, agricultural extension professionals, and students engaged in agriculture and technology. This project empowers producers with knowledge about PDM technologies and security risks, equips extension professionals with resources to educate farmers, and provides students with hands-on experience in cybersecurity for agriculture. Goal 1: Measure the Deployment of ICDs and Producer Perceptions Activities Completed: Consulted with stakeholders and subject matter experts to design focus group and interview protocols. Developed and piloted instruments to assess producer use of PDM technologies and their perceptions of data security and privacy. Conducted site visits and interviews with dairy producers at facilities like the East Tennessee AgResearch and Education Center - Little River Unit to observe PDM technology applications and challenges. Data Collected: Preliminary data from 20 dairy producers in Tennessee, including: Types of ICDs deployed (e.g., automated milking systems, herd management software). Producer concerns about data ownership, privacy, and security. Usage patterns and perceived barriers to technology adoption. Key Outcomes: Knowledge Change: Producers gained awareness of potential data security vulnerabilities in their operations. Impact: Enhanced producer understanding of PDM functionalities and risks, fostering informed decision-making about technology adoption. Goal 2: Survey PDM Technology Companies Activities Completed: Conducted consultations with stakeholders to design survey items addressing producer and technology provider perspectives. Begin design of initial surveys to sample PDM technology companies and dairy producers, focusing on their approaches to data privacy and security. Planned Data Collection Data collection and storage practices. Security measures implemented for PDM technologies. Perceptions of producer concerns about data sharing and ownership. Key Outcomes: Knowledge Change: Identifymisalignments between producer and provider perspectives on data privacy. Impact: Establisha foundation for bridging these gaps in future educational and technical solutions. Goal 3: Assess Threats to Data Privacy and Unauthorized Access Activities Completed: Documented ICD functionalities and data collection processes through site visits and interviews. Created preliminary threat models, including a cyber kill chain and DREAD model, to evaluate risks posed by PDM technologies. Developed use cases for the Farm Management System (FMS) and associated vulnerabilities. Data Collected: Network and system diagrams of smart dairy farms. Analysis of potential security breaches and attack simulations based on collected data. Key Outcomes: Action Change: Initiated producer-driven conversations about adopting proactive data security measures. Impact: Provided actionable insights for improving data privacy and security in PDM technologies. Summary of Accomplishments During this reporting period, the project achieved some directmilestones toward understanding and improving the deployment of PDM technologies. By engaging producers, technology providers, and extension professionals, the project enhanced knowledge about the benefits and risks associated with ICDs in dairy farming. Preliminary threat modeling and data analysis laid the groundwork for future technical solutions, while educational efforts empowered producers to make informed decisions about technology adoption. Why These Accomplishments Matter Economic Impact: Producers will be better equipped to protect their operations from data breaches, reducing financial risks. Community Dynamics: Enhanced trust between producers and technology providers fosters collaboration and adoption of innovative solutions. Agricultural Norms: Promotes a culture of proactive data management and security awareness in the dairy industry. These outcomes advance the project's goals of improving the security, adoption, and functionality of PDM technologies, benefiting producers and the agricultural community at large. Future efforts will build on these accomplishments to expand the project's reach and impact.

Publications