A Systematic Survey of Industrial Internet of Things Security: Requirements and Fog Computing Opportunities

Abstract

A key application of the Internet of Things (IoT) paradigm lies within industrial contexts. Indeed, the emerging Industrial Internet of Things (IIoT), commonly referred to as Industry 4.0, promises to revolutionize production and manufacturing through the use of large numbers of networked embedded sensing devices, and the combination of emerging computing technologies, such as Fog/Cloud Computing and Artificial Intelligence. The IIoT is characterized by an increased degree of inter-connectivity, which not only creates opportunities for the industries that adopt it, but also for cyber-criminals. Indeed, IoT security currently represents one of the major obstacles that prevent the widespread adoption of IIoT technology. Unsurprisingly, such concerns led to an exponential growth of published research over the last few years. To get an overview of the field, we deem it important to systematically survey the academic literature so far, and distill from it various security requirements as well as their popularity. This paper consists of two contributions: our primary contribution is a systematic review of the literature over the period 2011-2019 on IIoT Security, focusing in particular on the security requirements of the IIoT. Our secondary contribution is a reflection on how the relatively new paradigm of Fog computing can be leveraged to address these requirements, and thus improve the security of the IIoT.

Quo Vadis Industry 4.0? Position, Trends, and Challenges

“…Cybersecurity is an integral path of Industry 4.0 efforts [70], [71], especially considering that several systems are utilized in critical infrastructures that can be targeted even for political reasons, as the operationalization of Stuxnet [72] has shown. As envisioned in Industry 4.0, the majority of the developed systems, applications, and services go beyond their utilization in controlled environments, e.g., factories, and may expand towards consumer systems and interaction with them.…”

“…Traditional research focusing on the pillars of information security, i.e., addressing confidentiality, availability, and integrity, is expected to continue. This implies, for instance, the development of new algorithms for encryption, authentication/authorization, attack detection, etc., that increasingly takes into consideration the unique characteristics, needs, and emerging trends on infrastructures for ICPS [70]. In parallel, additional evolutionary steps are expected that takes the state of the art research and development and advances it around ICPS and their ecosystem.…”

Security Analysis of a Lightweight Identity-Based Two-Party Authenticated Key Agreement Protocol for IIoT Environments

“…With the explosive growth of industrial information, the large amount of data generated in the industrial production is a challenge for IIoT. How to effectively process, analyze, and record these data, and extract the results of guiding suggestions for industrial production, is the core difficulty of IIoT [3].…”

Joint Optimization of Computation Offloading, Data Compression, Energy Harvesting, and Application Scenarios in Fog Computing

“…It is necessary to find a method to deal with the data generated by IoT devices effectively. Cisco proposed the concept of fog computing in 2012 and regarded fog computing as an extension of cloud computing to meet strict latency requirements and intensive computing needs [1][2][3][4].…”