Valentin-Alexandru Vlăduţă, Emil Marian Pasca, Oliviu Matei
{"title":"Securing agricultural IoT at scale: A review of lifecycle controls, patchability, and EU regulatory pressures","authors":"Valentin-Alexandru Vlăduţă, Emil Marian Pasca, Oliviu Matei","doi":"10.1016/j.jafr.2026.103152","DOIUrl":null,"url":null,"abstract":"<div><div>Precision agriculture represents a transformative approach to farming, leveraging digital technologies to optimize productivity, sustainability, and resource efficiency. However, its rapid digitization introduces a growing attack surface, making cybersecurity and ethical governance increasingly critical (Adewusi et al. 2023). This survey provides a structured and interdisciplinary extension of a previously published paper (Vlădută et al. 2026) on cybersecurity challenges in precision agriculture, with a particular focus on emerging threat patterns, vulnerability propagation across cyber–physical systems, and regulatory-technical misalignments. The methodology combines thematic literature synthesis, regulatory analysis (e.g., GDPR, NIS2, CRA), and case-driven insights to map the landscape of threats and mitigation strategies. Given the importance of the topic and the regulatory approach presented, we considered that it will benefit the specific literature to extend the initial paper and offer more context to the readers while minimizing overlap, given the initial positive feedback received on the first paper. The study identifies three critical gaps: (1) regulatory-technical implementation challenges due to misaligned compliance models, (2) lack of traceability for cascading vulnerabilities in IoT-based systems, and (3) underdeveloped frameworks for human-centered cybersecurity in agricultural operations. Additionally, the article highlights the absence of structured agri-specific cyber threat intelligence (Ag-CTI) and adversarial robustness in AI-based agronomic systems. By integrating ethical considerations and security-by-design principles, this review offers a foundational agenda for future research and development in agri-cybersecurity. As the food industry becomes increasingly dependent on data-driven systems (Kasar et al. 2025), ensuring a resilient and ethically aligned digital infrastructure in agriculture emerges as a global imperative.</div></div>","PeriodicalId":34393,"journal":{"name":"Journal of Agriculture and Food Research","volume":"30 ","pages":"Article 103152"},"PeriodicalIF":7.2000,"publicationDate":"2026-08-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Journal of Agriculture and Food Research","FirstCategoryId":"1085","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S2666154326005235","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"2026/7/23 0:00:00","PubModel":"Epub","JCR":"Q1","JCRName":"AGRICULTURE, MULTIDISCIPLINARY","Score":null,"Total":0}
引用次数: 0
Abstract
Precision agriculture represents a transformative approach to farming, leveraging digital technologies to optimize productivity, sustainability, and resource efficiency. However, its rapid digitization introduces a growing attack surface, making cybersecurity and ethical governance increasingly critical (Adewusi et al. 2023). This survey provides a structured and interdisciplinary extension of a previously published paper (Vlădută et al. 2026) on cybersecurity challenges in precision agriculture, with a particular focus on emerging threat patterns, vulnerability propagation across cyber–physical systems, and regulatory-technical misalignments. The methodology combines thematic literature synthesis, regulatory analysis (e.g., GDPR, NIS2, CRA), and case-driven insights to map the landscape of threats and mitigation strategies. Given the importance of the topic and the regulatory approach presented, we considered that it will benefit the specific literature to extend the initial paper and offer more context to the readers while minimizing overlap, given the initial positive feedback received on the first paper. The study identifies three critical gaps: (1) regulatory-technical implementation challenges due to misaligned compliance models, (2) lack of traceability for cascading vulnerabilities in IoT-based systems, and (3) underdeveloped frameworks for human-centered cybersecurity in agricultural operations. Additionally, the article highlights the absence of structured agri-specific cyber threat intelligence (Ag-CTI) and adversarial robustness in AI-based agronomic systems. By integrating ethical considerations and security-by-design principles, this review offers a foundational agenda for future research and development in agri-cybersecurity. As the food industry becomes increasingly dependent on data-driven systems (Kasar et al. 2025), ensuring a resilient and ethically aligned digital infrastructure in agriculture emerges as a global imperative.
精准农业代表了一种革命性的农业方法,利用数字技术优化生产力、可持续性和资源效率。然而,它的快速数字化带来了越来越多的攻击面,使得网络安全和道德治理变得越来越重要(Adewusi et al. 2023)。本调查对先前发表的一篇关于精准农业网络安全挑战的论文(vldutei et al. 2026)进行了结构化和跨学科的扩展,特别关注新兴的威胁模式、跨网络物理系统的漏洞传播以及监管技术偏差。该方法结合专题文献综合、监管分析(例如GDPR、NIS2、CRA)和案例驱动的见解,以描绘威胁形势和缓解战略。鉴于该主题的重要性和所提出的监管方法,我们认为,鉴于第一篇论文收到的初步积极反馈,扩展初始论文并为读者提供更多背景,同时最大限度地减少重叠,将有利于特定文献。该研究确定了三个关键差距:(1)由于合规模型不一致导致的监管技术实施挑战;(2)基于物联网的系统中级联漏洞缺乏可追溯性;(3)农业运营中以人为中心的网络安全框架不发达。此外,文章强调了在基于人工智能的农艺系统中缺乏结构化的农业特定网络威胁情报(Ag-CTI)和对抗性鲁棒性。通过整合伦理考虑和设计安全原则,本综述为未来农业网络安全的研究和发展提供了一个基本议程。随着食品行业越来越依赖于数据驱动的系统(Kasar et al. 2025),确保农业中有弹性和符合道德规范的数字基础设施成为全球的当务之急。