Abstract
The Internet of Things (IoT) has become increasingly popular due to the growing number of IoT devices and the adoption of numerous communication protocols. With the renewed interest in Ultra-Wideband (UWB) positioning and recent reports on privacy infringements through UWB-enabled spyware, the consideration of privacy in UWB applications has become paramount. Currently, an IoT-centric security database is under development, VarIoT, however, there is no filter for privacy-or protocol-based vulnerabilities, risks, or threats and current UWB literature does not focus on privacy.Thus, this work formalizes privacy risks as attack patterns, based on the UWB protocol and presents it in an ontology. The effectiveness of this ontology is exemplified by a case study that receives UWB artifacts as input and derives a set of privacy risks by relying on the presented formalized knowledge graph. By exhibiting the ontology’s ability to automatically derive threats for an applied scenario an increased privacy preservation in UWB networks and solutions is reached.