The advent of the Internet of Things (IoT) and its spread in industrial environments has changed production lines, by dramatically fostering the dynamicity of data sharing and the connectivity of machines. However, such increased flexibility (also pushed by the adoption of edge devices) must not negatively affect the security and safety of industrial environments. The proposed solution adopts the Blockchain to securely store in distributed ledgers topology information and access rules, maximizing the cyber-resiliency of industrial networks. Topology information and access rules are stored and queried in a completely distributed manner, ensuring data availability even in case a centralized controller is temporarily down or the network partitioned. Moreover, Blockchain consensus algorithms foster a participative validation of topology information, to ensure the identity of interacting machines/nodes, to securely distribute topology information and commands in a privacy-preserving manner, and to trace any past modification in a non-repudiable manner. Finally, the adoption of configurable edge gateways allows to take prompt countermeasures in case potential threats are identified, by activating access rules stored in ledgers in a secure and distributed manner. In addition to solution design guidelines and architectural considerations, the paper also presents performance results achieved with our CyberChain working prototype, with the goal of not only demonstrating the feasibility of the proposed solution but also its suitability in industrial environments.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.