Security and privacy challenges in industrial internet of things

Abstract

Today, embedded, mobile, and cyberphysical systems are ubiquitous and used in many applications, from industrial control systems, modern vehicles, to critical infrastructure. Current trends and initiatives, such as Industrie 4.0 and Internet of Things (IoT), promise innovative business models and novel user experiences through strong connectivity and effective use of next generation of embedded devices. These systems generate, process, and exchange vast amounts of security-critical and privacy-sensitive data, which makes them attractive targets of attacks. Cyberattacks on IoT systems are very critical since they may cause physical damage and even threaten human lives. The complexity of these systems and the potential impact of cyberattacks bring upon new threats. This paper gives an introduction to Industrial IoT systems, the related security and privacy challenges, and an outlook on possible solutions towards a holistic security framework for Industrial IoT systems

Using Physical Context-Based Authentication against External Attacks: Models and Protocols

“…Critical concerns about the security in manufacturing processes have been addressed in the literature [3,5]. Physical context information from industrial processes environment can improve products identification and authentication.…”

“…Although it is a widely discussed and studied topic, authentication remains a crucial security issue [1][2][3][4]. Nowadays, technologies such as sensor networks, smart systems, cyberphysical systems (CPS), and Internet of Things (IoT) depend on small building blocks like sensors, actuators, measuring instruments, and smart devices.…”

“…These building blocks also become system entities and can require specific authentication mechanisms, as evidenced in applications related to manufacturing [5], transportation [6][7][8], energy management [9,10], smart cities and smart homes [11], and electronic healthcare [12], among others. On the other hand, the same ubiquitous components also introduce a new asset: the physical context information amount, resulting from the integration of physical processes and information technologies [3,13].…”

The Future: Obstacles and Opportunities

“…Any malfunctioning of these systems, e.g. as a result of denial-of-service attacks, will directly incur loss of productivity and loss of revenue (Sadeghi et al 2015). A maximum level of security is therefore preferred, often by physically isolating security-critical systems and "core processes" from the rest of the enterprise.…”

AVRAND: A Software-Based Defense Against Code Reuse Attacks for AVR Embedded Devices

“…This is especially critical in scenarios where devices are expected to be inexpensive, as it usually happens with many IoT deployments. Furthermore, there are settings where the hardware is already given "at it is", such us in industrial environments [21], vehicular systems, and home automation projects [26], to name a few.…”