journal article·2021-10-10Open access

Analysis of Security Issues and Countermeasures for the Industrial Internet of Things

Shantanu Pal, Zahra Jadidi

Applied Sciences· Volume 11· Issue 20

Abstract

Industrial Internet of Things (IIoT) can be seen as an extension of the Internet of Things (IoT) services and applications to industry with the inclusion of Industry 4.0 that provides automation, reliability, and control in production and manufacturing. IIoT has tremendous potential to accelerate industry automation in many areas, including transportation, manufacturing, automobile, marketing, to name a few places. When the benefits of IIoT are visible, the development of large-scale IIoT systems faces various security challenges resulting in many large-scale cyber-attacks, including fraudulent transactions or damage to critical infrastructure. Moreover, a large number of connected devices over the Internet and resource limitations of the devices (e.g., battery, memory, and processing capability) further pose challenges to the system. The IIoT inherits the insecurities of the traditional communication and networking technologies; however, the IIoT requires further effort to customize the available security solutions with more focus on critical industrial control systems. Several proposals discuss the issue of security, privacy, and trust in IIoT systems, but comprehensive literature considering the several aspects (e.g., users, devices, applications, cascading services, or the emergence of resources) of an IIoT system is missing in the present state of the art IIoT research. In other words, the need for considering a vision for securing an IIoT system with broader security analysis and its potential countermeasures is missing in recent times. To address this issue, in this paper, we provide a comparative analysis of the available security issues present in an IIoT system. We identify a list of security issues comprising logical, technological, and architectural points of view and consider the different IIoT security requirements. We also discuss the available IIoT architectures to examine these security concerns in a systematic way. We show how the functioning of different layers of an IIoT architecture is affected by various security issues and report a list of potential countermeasures against them. This study also presents a list of future research directions towards the development of a large-scale, secure, and trustworthy IIoT system. The study helps understand the various security issues by indicating various threats and attacks present in an IIoT system.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: IoT and Edge/Fog Computing · Blockchain Technology Applications and Security · Digital Transformation in Industry

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

School of Computer Science, Faculty of Science, Queensland University of Technology, Brisbane, QLD 4000, Australia

Cyber Security Cooperative Research Centre, Queensland University of Technology, Brisbane, QLD 4000, Australia

Funding

The Commonwealth of Australia and Cybersecurity Research Centre

References (100+)

Show source-provided references
1. Aleksic, S. (2019). A survey on optical technologies for IoT, smart industry, and smart infrastructures. J. Sens. Actuator Netw., 8.10.3390/jsan8030047 ↗
2. The industrial internet of things (IIoT): An analysis framework10.1016/j.compind.2018.04.015 ↗
3. IOT and industry 4.0: The industrial new revolution
4. (2021, July 05). Industrial IoT Market by Device & Technology. Available online: https://www.marketsandmarkets.com/Market-Reports/industrial-internet-of-things-market-129733727.html.
5. Industrial internet of things: Challenges, opportunities, and directions10.1109/TII.2018.2852491 ↗
6. Iwanicki, K. (2018, January 2–6). A distributed systems perspective on industrial IoT. Proceedings of the 2018 IEEE 38th International Conference on Distributed Computing Systems (ICDCS), Vienna, Austria.10.1109/ICDCS.2018.00116 ↗
7. Cyber physical system (CPS)-based industry 4.0: A survey10.1142/S2424862217500142 ↗
8. Foukalas, F., Pop, P., Theoleyre, F., Boano, C.A., and Buratti, C. (2019, January 27–31). Dependable wireless industrial iot networks: Recent advances and open challenges. Proceedings of the 2019 IEEE European Test Symposium (ETS), Baden, Germany.10.1109/ETS.2019.8791551 ↗
9. Raposo, D., Rodrigues, A., Sinche, S., Sá Silva, J., and Boavida, F. (2018). Industrial IoT monitoring: Technologies and architecture proposal. Sensors, 18.10.3390/s18103568 ↗
10. Pervasive computing: Vision and challenges10.1109/98.943998 ↗
11. Charting Past, Present, and Future Research in Ubiquitous Computing10.1145/344949.344988 ↗
12. Industrial internet of things: Recent advances, enabling technologies and open challenges10.1016/j.compeleceng.2019.106522 ↗
13. Sari, A., Lekidis, A., and Butun, I. (2020). Industrial networks and IIoT: Now and future trends. Industrial IoT, Springer.10.1007/978-3-030-42500-5_1 ↗
14. Jaidka, H., Sharma, N., and Singh, R. (2020, January 18). Evolution of iot to iiot: Applications & challenges. Proceedings of the International Conference on Innovative Computing & Communications (ICICC), Delhi, India.10.2139/ssrn.3603739 ↗
15. Pal, S., Hitchens, M., Varadharajan, V., and Rabehaja, T. (2018, January 12–15). Policy-based access control for constrained healthcare resources. Proceedings of the 2018 IEEE 19th International Symposium on a World of Wireless, Mobile and Multimedia Networks (WoWMoM), Chania, Greece.10.1109/WoWMoM.2018.8449813 ↗
16. Pal, S., Hitchens, M., and Varadharajan, V. (2017, January 9–12). Towards a secure access control architecture for the Internet of Things. Proceedings of the 2017 IEEE 42nd Conference on Local Computer Networks (LCN), Singapore.10.1109/LCN.2017.76 ↗
17. Pal, S. (2019, January 11–15). Limitations and Approaches in Access Control and Identity Management for Constrained IoT Resources. Proceedings of the 2019 IEEE International Conference on Pervasive Computing and Communications Workshops (PerCom Workshops), Kyoto, Japan.10.1109/PERCOMW.2019.8730651 ↗
18. (2021, June 30). IIoT—The Industrial Internet of Things (IIoT) Explained. Available online: https://www.i-scoop.eu/.
19. Bansal, M., Goyal, A., and Choudhary, A. (2021). Industrial Internet of Things (IIoT): A Vivid Perspective. Inventive Systems and Control, Springer.10.1007/978-981-16-1395-1_68 ↗
20. Design and implementation of a secure and flexible access-right delegation for resource constrained environments10.1016/j.future.2019.04.035 ↗
21. Luchian, R.A., Stamatescu, G., Stamatescu, I., Fagarasan, I., and Popescu, D. (2021, January 22–25). IIoT Decentralized System Monitoring for Smart Industry Applications. Proceedings of the 2021 29th Mediterranean Conference on Control and Automation (MED), Puglia, Italy.10.1109/MED51440.2021.9480341 ↗
22. Sadeghi, A.R., Wachsmann, C., and Waidner, M. (2015, January 8–12). Security and privacy challenges in industrial internet of things. Proceedings of the 2015 52nd ACM/EDAC/IEEE Design Automation Conference (DAC), San Francisco, CA, USA.10.1145/2744769.2747942 ↗
23. Tsiknas, K., Taketzis, D., Demertzis, K., and Skianis, C. (2021). Cyber Threats to Industrial IoT: A Survey on Attacks and Countermeasures. IoT, 2.10.20944/preprints202102.0148.v1 ↗
24. Ginter, A. (2021, August 30). The Top 20 Cyberattacks on Industrial Control Systems; Waterfall Security Solutions: 2017. Available online: https://waterfall-security.com/20-attacks.
25. Ly, K., and Jin, Y. (2016, January 11–13). Security challenges in CPS and IoT: From end-node to the system. Proceedings of the 2016 IEEE Computer Society Annual Symposium on VLSI (ISVLSI), Pittsburgh, PA, USA.10.1109/ISVLSI.2016.109 ↗
26. Attri, T., and Bhushan, B. (2021). Enabling Technologies, Attacks, and Machine Learning-Based Countermeasures for IoT and IIoT. Integration of WSNs into Internet of Things, CRC Press.10.1201/9781003107521-12 ↗
27. Pal, S. (2009, January 17–19). Wind energy—An innovative solution to global warming?. Proceedings of the 2009 1st International Conference on the Developements in Renewable Energy Technology (ICDRET), Dhaka, Bangladesh.10.1109/ICDRET.2009.5454225 ↗
28. The impact of Industry 4.0 implementation on supply chains10.1108/JMTM-10-2019-0368 ↗
29. Prerequisites and incentives for digital information sharing in Industry 4.0—An international comparison across data types10.1016/j.cie.2020.106733 ↗
30. (2021, July 03). Bombardier Statement on Cybersecurity Breach. Available online: https://bombardier.com/en/media/news/bombardier-statement-cybersecurity-breach.
31. (2021, July 03). School Cyber-Attack Affects 40,000 Pupils’ Email. Available online: https://www.bbc.com/news/technology-56569873.
32. The NHS cyber-attack: A look at the complex environmental conditions of WannaCry
33. Khujamatov, H., Reypnazarov, E., Khasanov, D., and Akhmedov, N. (2021). IoT, IIoT, and Cyber-Physical Systems Integration. Emergence of Cyber Physical System and IoT in Smart Automation and Robotics, Springer.10.1007/978-3-030-66222-6_3 ↗
34. Yu, X., and Guo, H. (2019, January 28–30). A survey on IIoT security. Proceedings of the 2019 IEEE VTS Asia Pacific Wireless Communications Symposium (APWCS), Singapore.10.1109/VTS-APWCS.2019.8851679 ↗
35. Tange, K., De Donno, M., Fafoutis, X., and Dragoni, N. (2019, January 15–18). Towards a systematic survey of industrial IoT security requirements: Research method and quantitative analysis. Proceedings of the Workshop on Fog Computing and the IoT, Montreal, QC, Canada.10.1145/3313150.3313228 ↗
36. Valentin, V., Mehaoua, A., and Guenane, F.A. (2020). Security Challenges and Requirements for Industrial IoT Systems, Chapman and Hall/CRC.10.1201/9780429270567-5 ↗
37. Panchal, A.C., Khadse, V.M., and Mahalle, P.N. (2018, January 23–24). Security issues in IIoT: A comprehensive survey of attacks on IIoT and its countermeasures. Proceedings of the 2018 IEEE Global Conference on Wireless Computing and Networking (GCWCN), Lonavala, India.10.1109/GCWCN.2018.8668630 ↗
38. A survey on industrial Internet of Things: A cyber-physical systems perspective10.1109/ACCESS.2018.2884906 ↗
39. A taxonomy of security issues in Industrial Internet-of-Things: Scoping review for existing solutions, future implications, and research challenges10.1109/ACCESS.2021.3057766 ↗
40. A survey on IoT security: Application areas, security threats, and solution architectures10.1109/ACCESS.2019.2924045 ↗
41. Saifullah, A., Xu, Y., Lu, C., and Chen, Y. (December, January 30). Real-time scheduling for WirelessHART networks. Proceedings of the 2010 31st IEEE Real-Time Systems Symposium, San Diego, CA, USA.10.1109/RTSS.2010.41 ↗
42. Dual fieldbus industrial IoT networks using edge server architecture10.1016/j.mfglet.2020.04.006 ↗
43. Devan, P., Hussin, F.A., Ibrahim, R., Bingi, K., and Khanday, F.A. (2021). A Survey on the Application of WirelessHART for Industrial Process Monitoring and Control. Sensors, 21.10.3390/s21154951 ↗
44. Suryadevara, N.K., and Mukhopadhyay, S.C. (2020). Access control for Internet of Things—Enabled assistive technologies: An architecture, challenges and requirements. Assistive Technology for the Elderly, Academic Press.
45. The Internet of Things: A security point of view10.1108/IntR-07-2014-0173 ↗
46. A Survey on Internet of Things Architectures—ScienceDirect
47. The Internet of Things: A survey10.1016/j.comnet.2010.05.010 ↗
48. Internet of things: Architectures, protocols, and applications
49. Al-Qaseemi, S.A., Almulhim, H.A., Almulhim, M.F., and Chaudhry, S.R. (2016, January 6–7). IoT architecture challenges and issues: Lack of standardization. Proceedings of the 2016 Future Technologies Conference (FTC), San Francisco, CA, USA.10.1109/FTC.2016.7821686 ↗
50. Yun, M., and Yuxin, B. (2010, January 19–20). Research on the architecture and key technology of Internet of Things (IoT) applied on smart grid. Proceedings of the 2010 International Conference on Advances in Energy Engineering, Beijing, China.
51. Internet of things: A comprehensive review of enabling technologies, architecture, and challenges10.1080/02564602.2016.1276416 ↗
52. Yang, Z., Yue, Y., Yang, Y., Peng, Y., Wang, X., and Liu, W. (2011, January 26–28). Study and application on the architecture and key technologies for IOT. Proceedings of the 2011 International Conference on Multimedia Technology, Hangzhou, China.
53. (2018, October 04). CISCO: The Internet of Things Reference Model. Available online: http://cdn.iotwf.com/.
54. A secure fog-based architecture for industrial Internet of Things and industry 4.010.1109/TII.2020.2998105 ↗
55. Pham, Q.V., Dev, K., Maddikunta, P.K.R., Gadekallu, T.R., and Huynh-The, T. (2021). Fusion of federated learning and industrial internet of things: A survey. arXiv.
56. Radanliev, P., De Roure, D., Nicolescu, R., and Huth, M. (2019). A Reference Architecture for Integrating the Industrial Internet of Things in the Industry 4.0, University of Oxford.10.20944/preprints201903.0139.v1 ↗
57. Varga, P., Peto, J., Franko, A., Balla, D., Haja, D., Janky, F., Soos, G., Ficzere, D., Maliosz, M., and Toka, L. (2020). 5G support for Industrial IoT Applications—Challenges, Solutions, and Research gaps. Sensors, 20.10.3390/s20030828 ↗
58. Industrial Internet of Things monitoring solution for advanced predictive maintenance applications
59. Internet of things in industries: A survey10.1109/TII.2014.2300753 ↗
60. A novel smart healthcare design, simulation, and implementation using healthcare 4.0 processes10.1109/ACCESS.2020.3004790 ↗
61. Pal, S., Hitchens, M., Rabehaja, T., and Mukhopadhyay, S. (2020). Security requirements for the internet of things: A systematic approach. Sensors, 20.10.3390/s20205897 ↗
62. A survey on facilities for experimental internet of things research10.1109/MCOM.2011.6069710 ↗
63. Context Aware Computing for The Internet of Things: A Survey10.1109/SURV.2013.042313.00197 ↗
64. Internet of Things: A Survey on Enabling Technologies, Protocols, and Applications10.1109/COMST.2015.2444095 ↗
65. Mahmood, Z. (2016). Security Mechanisms for Connectivity of Smart Devices in the Internet of Things. Connectivity Frameworks for Smart Devices, Springer International Publishing. Computer Communications and Networks.10.1007/978-3-319-33124-9 ↗
66. Premalatha, J., and Rajasekar, V. (2020). Industrial Internet of Things Safety and Security. Internet of Things, CRC Press.10.1201/9781003032441-9 ↗
67. Ghosh, S., Gourisaria, M.K., Routaray, S.S., and Pandey, M. (2020). IIoT: A Survey and Review of Theoretical Concepts. Interoperability in IoT for Smart Systems, CRC Press.10.1201/9781003055976-12 ↗
68. Security, privacy and trust in Internet of Things: The road ahead10.1016/j.comnet.2014.11.008 ↗
69. On the features and challenges of security and privacy in distributed internet of things10.1016/j.comnet.2012.12.018 ↗
70. Edge Computing: Vision and Challenges10.1109/JIOT.2016.2579198 ↗
71. Abomhara, M., and Køien, G.M. (2014, January 11–14). Security and privacy in the Internet of Things: Current status and open issues. Proceedings of the International Conference on Privacy and Security in Mobile Systems (PRISMS), Aalborg, Denmark.10.1109/PRISMS.2014.6970594 ↗
72. Ahmed, M., Jaidka, S., and Sarkar, N.I. (2020). Security in Decentralised Computing, IoT and Industrial IoT. Industrial IoT, Springer.10.1007/978-3-030-42500-5_5 ↗
73. Secure routing for internet of things: A survey10.1016/j.jnca.2016.03.006 ↗
74. Wang, Y., and Wen, Q. (2011, January 14–16). A privacy enhanced DNS scheme for the Internet of Things. Proceedings of the IET International Conference on Communication Technology and Application (ICCTA), Beijing, China.
75. Pongle, P., and Chavan, G. (2015, January 8–10). A survey: Attacks on RPL and 6LoWPAN in IoT. Proceedings of the International Conference on Pervasive Computing (ICPC), Pune, India.10.1109/PERVASIVE.2015.7087034 ↗
76. A survey of routing attacks in mobile ad hoc networks10.1109/MWC.2007.4396947 ↗
77. Ghafir, I., Prenosil, V., Alhejailan, A., and Hammoudeh, M. (2016, January 22–24). Social Engineering Attack Strategies and Defence Approaches. Proceedings of the 2016 IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud), Vienna, Austria.10.1109/FiCloud.2016.28 ↗
78. Policy-based access control for constrained healthcare resources in the context of the Internet of Things10.1016/j.jnca.2019.04.013 ↗
79. Securing IIoT using defence-in-depth: Towards an end-to-end secure industry 4.010.1016/j.jmsy.2020.10.011 ↗
80. Shah, D.P., and Shah, P.G. (April, January 6). Revisting of elliptical curve cryptography for securing Internet of Things (IOT). Proceedings of the 2018 Advances in Science and Engineering Technology International Conferences (ASET), Dubai, Sharjah, Abu Dhabi, United Arab Emirates.10.1109/ICASET.2018.8376830 ↗
81. Kozlov, D., Veijalainen, J., and Ali, Y. (2012, January 24–26). Security and Privacy Threats in IoT Architectures. Proceedings of the 7th International Conference on Body Area Networks, Oslo, Norway.10.4108/icst.bodynets.2012.250550 ↗
82. Identities in the Future Internet of Things10.1007/s11277-009-9697-0 ↗
83. Welch, D., and Lathrop, S. (2003, January 18–20). Wireless security threat taxonomy. Proceedings of the IEEE Systems, Man and Cybernetics SocietyInformation Assurance Workshop, West Point, NY, USA.
84. Pacheco, L.A., Gondim, J.J.C., Barreto, P.A., and Alchieri, E. (November, January 31). Evaluation of Distributed Denial of Service threat in the Internet of Things. Proceedings of the 15th International Symposium on Network Computing and Applications (NCA), Cambridge, MA, USA.
85. Sharghivand, N., and Derakhshan, F. (2021). Data Security and Privacy in Industrial IoT. AI-Enabled Threat Detection and Security Analysis for Industrial IoT, Springer.10.1007/978-3-030-76613-9_3 ↗
86. Xiao, B., Chen, W., He, Y., and Sha, E.H.M. (2005, January 20–22). An Active Detecting Method Against SYN Flooding Attack. Proceedings of the 11th International Conference on Parallel and Distributed Systems (ICPADS’05), Fukuoka, Japan.
87. Abosata, N., Al-Rubaye, S., Inalhan, G., and Emmanouilidis, C. (2021). Internet of Things for System Integrity: A Comprehensive Survey on Security, Attacks and Countermeasures for Industrial Applications. Sensors, 21.10.3390/s21113654 ↗
88. Security of the Internet of Things: Perspectives and challenges10.1007/s11276-014-0761-7 ↗
89. Proposed Security Model and Threat Taxonomy for the Internet of Things (IoT)10.1007/978-3-642-14478-3_42 ↗
90. Coppolino, L., DAlessandro, V., DAntonio, S., Levy, L., and Romano, L. (2015, January 21–23). My Smart Home is under Attack. Proceedings of the 18th International Conference on Computational Science and Engineering, Porto, Portugal.10.1109/CSE.2015.28 ↗
91. Pal, S., Hitchens, M., and Varadharajan, V. (2017, January 4–6). On the design of security mechanisms for the Internet of Things. Proceedings of the 2017 Eleventh International Conference on Sensing Technology (ICST), Sydney, Australia.10.1109/ICSensT.2017.8304476 ↗
92. Ronen, E., and Shamir, A. (2016, January 21–24). Extended Functionality Attacks on IoT Devices: The Case of Smart Lights. Proceedings of the European Symposium on Security and Privacy (EuroS&P), Saarbruecken, Germany.10.1109/EuroSP.2016.13 ↗
93. Pal, S. (2021). Internet of Things and Access Control: Sensing, Monitoring and Controlling Access in IoT-Enabled Healthcare Systems, Springer Nature.10.1007/978-3-030-64998-2 ↗
94. Extending Mobile Cloud Platforms Using Opportunistic Networks: Survey, Classification and Open Issues
95. An IoT-Aware Architecture for Smart Healthcare Systems10.1109/JIOT.2015.2417684 ↗
96. Security model and key technologies for the Internet of things10.1016/S1005-8885(10)60159-8 ↗
97. Moscibroda, T., and Mutlu, O. (2007, January 6–10). Memory Performance Attacks: Denial of Memory Service in Multi-core Systems. Proceedings of the 16th USENIX Security Symposium, Boston, MA, USA.
98. Ravi, N., Scott, J., Han, L., and Iftode, L. (2008, January 17–21). Context-aware Battery Management for Mobile Phones. Proceedings of the Sixth Annual IEEE International Conference on Pervasive Computing and Communications (PerCom), Hong Kong, China.10.1109/PERCOM.2008.108 ↗
99. Liu, J., Xiao, Y., and Chen, P. (2012, January 18–21). Authentication and Access Control in the Internet of Things. Proceedings of the 32nd International Conference on Distributed Computing Systems Workshops, Macau, China.10.1109/ICDCSW.2012.23 ↗
100. Pal, S., Hitchens, M., and Varadharajan, V. (2018, January 4–6). Modeling identity for the internet of things: Survey, classification and trends. Proceedings of the 2018 12th International Conference on Sensing Technology (ICST), Limerick, Ireland.10.1109/ICSensT.2018.8603595 ↗