Provisioning Cybersecurity in ICT Complex Supply Chains: An Overview, Key Issues and a Relevant Architecture

Abstract

The specific demands inherent to supply chains built upon large IoT systems, make a must the design of a coordinated framework for cyber resilience provisioning intended to guaranteeing trusted supply chains of ICT systems, built upon distributed, dynamic, potentially insecure and heterogeneous ICT infrastructures. As such, the proposed solution is envisioned to deal with the whole supply chain system components, from the IoT ecosystem to the infrastructure connecting them, addressing security and privacy functionalities related to risks and vulnerabilities management, accountability and mitigation strategies as well as security metrics and evidence-based security assurance. In this paper we present FISHY, as a preliminary designed architecture, designed to orchestrate both existing and beyond state-of-the-art security appliances in composed ICT scenarios and also leveraging capabilities of programmable network and IT infrastructure through seamless orchestration and instantiation of novel security services, both in real-time and proactively. The paper also includes a thorough business analysis to go far beyond the technical benefits of a potential FISHY adoption as well as three real-world use cases where to strongly support the envisioned benefits of a FISHY adoption.

Addressing Cybersecurity Challenges in Sustainable Supply Chain Management: A Review of Current Practices and Future Directions

“…The design of such an architecture requires a coordinated approach to address the multifaceted challenges of cybersecurity while ensuring the supply chain's sustainability. Masip-Bruin et al (2021) present a pioneering architecture designed to orchestrate existing and beyond state-of-the-art security appliances in composed ICT scenarios, including large and complex IoT systems. The proposed architecture, named FISHY, aims to guarantee trusted supply chains of ICT systems built upon distributed, dynamic, potentially insecure, and heterogeneous ICT infrastructures.…”

“…This architecture leverages the capabilities of programmable networks and IT infrastructure through seamless orchestration and instantiation of novel security services, both in real-time and proactively. The business analysis included in the study goes beyond technical benefits, highlighting the potential of FISHY adoption in real-world use cases to enhance cybersecurity across the supply chain (Masip-Bruin et al, 2021). Radmanesh, Haji, and Valilai (2023) introduce a blockchain-based architecture for enhancing sustainability in supply chains through cloud architecture.…”

“…This integrated approach is essential for protecting supply chain operations from cyber threats while ensuring their sustainability. The frameworks and architectures proposed by Masip-Bruin et al (2021), Radmanesh, Haji, and Valilai (2023), and Sayogo et al (2015 offer valuable insights and solutions for designing and implementing cybersecure sustainable supply chains in various industries.…”