Security and Privacy in the Industrial Internet of Things: Current Standards and Future Challenges

Abstract

The Internet of Things (IoT) is rapidly becoming an integral component of the industrial market in areas such as automation and analytics, giving rise to what is termed as the Industrial IoT (IIoT). The IIoT promises innovative business models in various industrial domains by providing ubiquitous connectivity, efficient data analytics tools, and better decision support systems for a better market competitiveness. However, IIoT deployments are vulnerable to a variety of security threats at various levels of the connectivity and communications infrastructure. The complex nature of the IIoT infrastructure means that availability, confidentiality and integrity are difficult to guarantee, leading to a potential distrust in the network operations and concerns of loss of critical infrastructure, compromised safety of network end-users and privacy breaches on sensitive information. This work attempts to look at the requirements currently specified for a secure IIoT ecosystem in industry standards, such as Industrial Internet Consortium (IIC) and OpenFog Consortium, and to what extent current IIoT connectivity protocols and platforms hold up to the standards with regard to security and privacy. The paper also discusses possible future research directions to enhance the security, privacy and safety of the IIoT.

Searchable Encryption with Access Control in Industrial Internet of Things (IIoT)

“…Gebremichael et al [19] describe the privacy challenges in IIoT based on the levels of the architecture as follows: device, platform, and application layers. The solutions provide access control methods, authentication mechanisms, data encryption, and secure channels to ensure the privacy at the device layer, for example, protecting Edge nodes against a fake node insertion attack.…”

“…Therefore, IIoT applications must minimise the computational cost and improve performance to meet the near real-time requirements. Gebremichael et al [19] discussed the further research that needs to be considered in the IIoT applications. The authors argue that using SE or homomorphic encryption (HE) can maintain security and privacy for systems that rely on cloud providers.…”

“…For example, exposing the sensor's location is considered a security and safety threat. The lack of privacy preservation causes security threats, such as in the case of utility monitoring, which will affect the network's process [19]. To address the aforementioned requirements for security and privacy in IIoT monitoring systems, we must consider the following challenges:…”

“…Thus, IIoT requires a higher level of security. To do so, there are several factors to consider, such as the applications' requirements, the type of IIoT devices, and a recovery technique in the case of cybersecurity attack [19].…”

A Review on Multicriteria Decision Support System and Industrial Internet of Things for Source Code Transformation

“…Wan and Liao [45] proposed a coupling information system on ground of IoT and DSS exploring the research on the complete framework and design level of integration system. e authors [46] attempted for looking at the requirement of secure IIoT ecosystem in the standard of industry such as OpenFog consortium and industrial Internet consortium. Scientific Programming e study discussed the future directions of research for enhancing the privacy, security, and safety of the IIoT.…”