Comprehensive Threat Analysis in Additive Manufacturing Supply Chain: A Hybrid Qualitative and Quantitative Risk Assessment Framework

Abstract

Additive Manufacturing (AM) offers revolutionary design capabilities but introduces cybersecurity vulnerabilities due to its digital integration. While existing research focuses on cyber threats, a significant gap exists in addressing physical and cyber risks. The current research focuses on cyber threats, but more attention needs to be paid to addressing physical and cyber risks. This paper proposes a new risk assessment framework that considers both physical and cyber threats quantitatively and qualitatively and helps safeguard the AM supply chain. The framework identifies, analyses, and prioritises potential threats based on their characteristics. It also considers the trustworthiness of data and the frequency of reported threats to estimate the likelihood of each threat. The risks are then prioritised based on a combined impact-likelihood score. The framework has been validated on the standard benchmark MITRE CVEs dataset and has proven effective in identifying critical vulnerabilities. This approach empowers manufacturers to proactively deal with security concerns and navigate the complexities of the rapidly evolving AM landscape.