Secure Interconnection of IT-OT Networks in Industry 4.0

Abstract

Increasingly, the society is witnessing how today's industry is adapting the new technologies and communication protocols to offer more optimal and reliable services to end-users, with support for inter-domain communication belonging to diverse critical infrastructures. As a consequence of this technological revolution, interconnection mechanisms are required to offer transparency in the connections and protection in the different application domains, without this implying a significant degradation of the control requirements. Therefore, this book chapter presents a reference architecture for the new Industry 4.0 where the interconnection core is mainly concentrated in the Policy Decision Points (PDP), which can be deployed in high volume data processing and storage technologies such as cloud and fog servers. Each PDP authorizes actions in the field/plant according to a set of factors (entities, context and risks) computed through the existing access control measures, such as RBAC+ABAC+Risk-BAC (Role/Attribute/Risk-Based Access Control, respectively), to establish coordinated and constrained accesses in extreme situations. Part of these actions also includes proactive risk assessment measures to respond to anomalies or intrusive threats in time.

The FORA Fog Computing Platform for Industrial IoT

“…As pointed out above, one important trend in the Industrial IoT is the convergence of OT & IT. Fog computing has been named as an architectural means to achieve this convergence [3,86]. More concretely, Müller et al [38,62] present a reference model for a seamless runtime environment for industrial software, which can thus be deployed in both the fog and the cloud.…”

Securing IT/OT Links for Low Power IIoT Devices: Design Considerations for Industry 4.0

“…• Authorization, which is the verification that an entity is permitted to carry out certain operations or access certain data [36]; • Non-repudiation, which means that the sender of a transmission should not be able to credibly deny having sent it; • The protection of data in storage from unauthorized access or modification; • Availability, which is the guarantee that the services and resources of a system are always accessible, including protection against denial-of-service attacks; • Intrusion detection, which is the ability to detect ongoing attacks [9]; • Post-incident management, which is the ability to recover from an attack and to mitigate the damage done [9]; • Accountability, which is the ability to pinpoint the source of unauthorized behaviour.…”

Deriving event data sharing in IoT systems using formal modelling and analysis

“…Such issues have already been highlighted and addressed in several works in literature, e.g. [13,14,15], all of which can provide relevant inputs to OAuth-based systems to control access according to the type of context the system operates within. Some of these works use formal approaches in defining and verifying such interoperability, e.g.…”

“…Dependability properties (including reliability and robustness), for which formal specification and analysis techniques allow their establishment, have been highlighted as one of the control and automation requirements for such gateway-based systems. Furthermore, in [15], a reference architecture for Industry 4.0 systems was proposed that establishes interoperability in a secure manner using Policy Decision Points (PDPs), which allow various access control measures, e.g. RBAC [17,18] to be deployed when components in a critical system need to coordinate and constrain access to their resources.…”