A Review of Industry 4.0 Manufacturing Process Security Risks
Source abstract
Abstract
The advent of three-dimensional (3D) printing has found a unique and prominent role in Industry 4.0 and is rapidly gaining popularity in the manufacturing industry. 3D printing offers many advantages over conventional manufacturing methods, making it an attractive alternative that is more cost-effective and efficient than conventional manufacturing methods. With the Internet of Things (IoT) at the heart of this new movement, control over manufacturing methods now enters the cyber domain, offering endless possibilities in manufacturing automation and optimization. However, as disruptive and innovative as this may seem, there is grave concern about the cyber-security risks involved. These security aspects are often overlooked, particularly by promising new start-ups and parties that are not too familiar with the risks involved in not having proper cyber-security measures in place. This paper explores some of the cyber-security risks involved in the bridge between industrial manufacturing and Industry 4.0, as well as the associated countermeasures already deployed or currently under development. These aspects are then contextualized in terms of Industry 4.0 in order to serve as a basis for and assist with future development in this field.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Digital Transformation in Industry · Physical Unclonable Functions (PUFs) and Hardware Security · Additive Manufacturing and 3D Printing Technologies
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Faculty of Engineering and the Built Environment, University of Johannesburg, Auckland Park, Johannesburg 2006, South Africa
Centre for Cyber Security, Faculty of Science, University of Johannesburg, Auckland Park, Johannesburg 2006, South Africa
References (56)
Show source-provided references
1. Developments in 4D-printing: A Review on Current Smart Materials, Technologies, and Applications10.1080/19475411.2019.1591541 ↗
2. Sayfayn, N., and Madnick, S. (2017). Cybersafety Analysis of the Maroochy Shire Sewage Spill, MIT Management Sloan School.
3. Security of Smart Manufacturing Systems10.1016/j.jmsy.2018.04.007 ↗
4. (2019, May 25). SHODAN Website. Available online: https://www.shodan.io/.
5. Van der Meulen, R. (2019, September 26). Gartner Says 8.4 Billion Connected ”Things” Will Be in Use in 2017, Up 31 Percent From 2016. Available online: https://www.gartner.com/newsroom/id/3598917.
6. Jacob, E., Astorga, J., Galan, J.J.U., Huarte, M., Conejo, D.G., and De Marcaide, L.N.L. (2018). Towards a 5G Compliant and Flexible Connected Manufacturing Facility, DYNA: Federación Asociaciones Ingenieros Industriales.
7. Chang, J., He, J., Mao, M., Zhou, W., Lei, Q., Li, X., Li, D., Chua, C.K., and Zhao, X. (2018). Advanced Material Strategies for Next-Generation Additive Manufacturing. Materials, 11.10.3390/ma11010166 ↗
8. Thames, L., and Schaefer, D. (2017). Cybersecurity for Industry 4.0: Analysis for Design and Manufacturing, Springer.10.1007/978-3-319-50660-9 ↗
9. Gilchrist, A. (2016). Industry 4.0: The Industrial Internet of Things, Apress Media.10.1007/978-1-4842-2047-4_12 ↗
10. NASA Office of Inspector General (2017). Industrial Control System Security within NASA’s Critical and Supporting Infrastructure, NASA.
11. Manufacturing and Security Challenges in 3D Printing10.1007/s11837-016-1937-7 ↗
12. Kellner, T. (2019, May 29). The FAA Cleared the First 3D Printed Part to Fly in a Commercial Jet Engine from GE. Available online: https://www.ge.com/reports/post/116402870270/the-faa-cleared-the-first-3d-printed-part-to-fly-2/.
13. Belikovetsky, S., Yampolskiy, M., Toh, J., Gatlin, J., and Elovici, Y. (2016, January 10–12). dr0wned-Cyber-Physical Attack with Additive Manufacturing. Proceedings of the WOOT’17 11th USENIX Conference on Offensive Technologies, Austin, TX, USA.
14. (2019, May 29). WinRAR 4.20 ZIP File Name Spoofing Vulnerability. Available online: https://www.rarlab.com/vuln_zip_spoofing_4.20.html.
15. Birkel, H.S., Veile, J.W., Müller, J.M., Hartmann, E., and Voigt, K.-I. (2019). Development of a Risk Framework for Industry 4.0 in the Context of Sustainability for Established Manufacturers. Sustainability, 11.10.3390/su11020384 ↗
16. Khan, A., and Turowski, K. (2016, January 16–21). A Survey of Current Challenges in Manufacturing Industry and Preparation for Industry 4.0. Proceedings of the First International Scientific Conference “Intelligent Information Technologies for Industry” (IITI’16), Sochi, Russia.10.1007/978-3-319-33609-1_2 ↗
17. Sustainable Industrial Value Creation: Benefits and Challenges of Industry 4.010.1142/S1363919617400151 ↗
18. Müller, J.M., Kiel, D., and Voigt, K.I. (2018). What Drivers the Implementation of Industry 4.0? The Role of Opportunities and Challenges in the Context of Sustainability. Sustainability, 10.10.3390/su10010247 ↗
19. Yan, J., Meng, Y., Lu, L., and Li, L. (2017). Industrial Big Data in an Industry 4.0 Environment: Challenges, Schemes and Applications for Predictive Maintenance. IEEE Access, 5.10.1109/ACCESS.2017.2765544 ↗
20. Tupa, J., Simota, J., and Steiner, F. (2017, January 27–30). Aspects of Risk Management Implementation for Industry 4.0. Proceedings of the 27th International Conference on Flexible Automation and Intelligent Manufacturing, Modena, Italy.10.1016/j.promfg.2017.07.248 ↗
21. Past, Present and Future of Industry 4.0—A Systematic Literature Review and Research Agenda Proposal10.1080/00207543.2017.1308576 ↗
22. Elkington, J. (1998). Partnerships from cannibals with forks: The triple bottom line of 21st-century business. Environ. Qual. Manag., 8.10.1002/tqem.3310080106 ↗
23. Getting to the Bottom of “Triple Bottom Line”10.5840/beq200414211 ↗
24. Roberts, P.F. (2019, May 29). Zotob, PnP Worms Slam 13 DaimlerChrysler Plants. Available online: https://www.eweek.com/security/zotob-pnp-worms-slam-13-daimlerchrysler-plants.
25. (2019, May 29). W32.Zotob.E. Available online: https://www.symantec.com/security-center/writeup/2005-081615-4443-99.
26. (2019, May 29). Microsoft Security Bulletin MS05-039—Critical. Available online: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-039.
27. Falliere, N., Murchu, L.O., and Chien, E. (2011). W32.Stuxnet Dossier, Symantec Security Response.
28. (2019, October 16). Microsoft Security Bulletin MS10-046—Critical. Available online: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046.
29. Symantec (2011). W32.Duqu: The Precursor to the Next Stuxnet, Symantec Security Response.
30. Nahorney, B. (2012). Symantec Intelligence Report: May 2012, Symantec Intelligence.
31. Miková, T. (2018). Cyber Attack on Ukrainian Power Grid. [Bachelor’s Thesis, Masaryk University].
32. Bilge, L., and Dumitras, T. (2012). Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World, Symantec Research Laboraties.10.1145/2382196.2382284 ↗
33. Symantec (2016). An ISTR Special Report: Ransomware and Businesses 2016, Symantec.10.1016/S1353-4858(16)30096-4 ↗
34. Song, C., Lin, F., Ba, Z.J., Ren, K., Zhou, C., and Xu, W.Y. (2016, January 24–28). My Smartphone Knows What You Print: Exploring Smartphone-based Side-channel Attacks against 3D Printers. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, Vienna, Austria.10.1145/2976749.2978300 ↗
35. Hojjati, A., Adhikari, A., Struckmann, K., Chou, E., Tho, N., Thi, N., Madan, K., Winslett, M.S., Gunter, C.A., and King, W.P. (2016, January 24–28). Leave Your Phone at the Door: Side Channels that Reveal Factory Floor Secrets. Proceedings of the 2016 ACM SIGSAC Conference, Vienna, Austria.10.1145/2976749.2978323 ↗
36. Backes, M., Durmuth, M., Gerling, S., Pinkal, M., and Sporleder, C. (2010, January 11–13). Acoustic Side-Channel Attacks on Printers. Proceedings of the 19th USENIX Security Symposium, Washington, DC, USA.
37. Faruque, M.A.A., Chhetri, S.R., Canedo, A., and Wan, J. (2016, January 11–14). Acoustic Side-Channel Attacks on Additive Manufacturing Systems. Proceedings of the 7th International Conference on Cyber-Physical Systems, Vienna, Austria.
38. Yampolskiy, M., Andel, T.R., Mcdonald, J.T., Glisson, W., and Yasinsac, A. (2014, January 9). Intellectual Property Protection in Additive Layer Manufacturing: Requirements for Secure Outsourcing. Proceedings of the 4th Program Protection and Reverse Engineering Workshop, New Orleans, LA, USA.10.1145/2689702.2689709 ↗
39. Integrated design for tackling safety and security challenges of smart products and digital manufacturing10.1016/j.cirp.2017.04.037 ↗
40. An architectural approach to the integration of safety and security requirements in smart products and systems design10.1016/j.cirp.2018.04.022 ↗
41. National Defense Industrial Association (2014). Cybersecurity for Advanced Manufacturing White Paper, National Defense Industrial Association.
42. Pham, G.N. (2018). Two-Dimensional (2D) Slices Encryption-Based Security Solution for Three-Dimensional (3D) Printing Industry. Safe Secur. Embed. Syst., 7.10.3390/electronics7050064 ↗
43. Shamir, A. (1979). How to Share a Secret, Communications of the ACM.10.1145/359168.359176 ↗
44. Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., and Hahn, A. (2014). Guide to Industrial Control Systems (ICS) Security, National Institute of Standards and Technology.10.6028/NIST.SP.800-82r2 ↗
45. DesRuisseaux, D. (2018). Cybersecurity Assessment—The Most Critical Step to Secure an Industrial Control System, Schneider Electric.
46. 5G Internet of Things: A Survey
47. GSA (2015). The Road to 5G: Drivers, Applications, Requirements and Technical Development, Global Mobile Suppliers Association.
48. ONF (2012). Software-Defined Networking: The New Norm for Networks, Open Networking Foundation.
49. Latif, Z., Sharif, K., Li, F., Karim, M.M., and Wang, Y. (2019). A Comprehensive Survey of Interface Protocols for Software Defined Networks. arXiv.10.1016/j.jnca.2020.102563 ↗
50. Network Programmability with Forces10.1109/COMST.2015.2439033 ↗
51. Ben, P., and Bruce, D. (2019, October 05). The Open Switch Database Management Protocol. Internet Engineering Task Force, RFC 7047. Available online: http://www.ietf.org/rfc/rfc7047.txt.
52. Song, H. (2013, January 16). Protocol-oblivious Forwarding: Unleash the Power of SDN through a Future-proof Forwarding Plane. Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, Hong Kong, China.10.1145/2491185.2491190 ↗
53. Éluard, M., Maetz, Y., and Doërr, G. (2014, January 27–30). Geometry-preserving Encryption for 3D Meshes. Proceedings of the IEEE International Conference on Image Processing, Paris, France.
54. Selective Encryption Algorithm for 3D Printing Model Based on Clustering and DCT Domain10.5626/JCSE.2017.11.4.152 ↗
55. Chhetri, S.R., Canedo, A., and Al Faruque, M.A. (2016, January 7–10). KCAD: Kinetic Cyber-Attack Detection Method for Cyber-Physical Additive Manufacturing Systems. Proceedings of the 2016 IEEE/ACM International Conference on Computer-Aided Design (ICCAD), Austin, TX, USA.10.1145/2966986.2967050 ↗
56. Bayens, C., Le, T., Garcia, L., Beyah, R., Javanmard, M., and Zonouz, S. (2017, January 16–18). See No Evil, Hear No Evil, Feel No Evil, Print No Evil? Malicious Fill Pattern Detection in Additive Manufacturing. Proceedings of the USENIX Security Symposium, Vancouver, BC, Canada.