Cyber Threats to Industrial IoT: A Survey on Attacks and Countermeasures

Τσίκνας, Κωνσταντίνος; Taketzis, Dimitrios; Demertzis, Konstantinos; Skianis, Charalabos

doi:10.3390/iot2010009

Cited by 115 publications

(52 citation statements)

References 99 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Access control plays a vital role in securing resources from unauthorized access [86]. However, the need for access control in IoT is an emerging research area that needs more investigation to provide secure, scalable, lightweight, flexible, and trustworthy solutions [87][88][89]. Further, the flexibility in operation in different networks and operating systems are required for further improvement.…”

Section: Discussion and Future Research Opportunitiesmentioning

confidence: 99%

Protocol-Based and Hybrid Access Control for the IoT: Approaches and Research Opportunities

Pal

Jadidi

2021

Sensors

View full text Add to dashboard Cite

Internet of Things (IoT) applications and services are becoming more prevalent in our everyday life. However, such an interconnected network of intelligent physical entities needs appropriate security to sensitive information. That said, the need for proper authentication and authorization is paramount. Access control is in the front line of such mechanisms. Access control determines the use of resources only to the specified and authorized users based on appropriate policy enforcement. IoT demands more sophisticated access control in terms of its usability and efficiency in protecting sensitive information. This conveys the need for access control to serve system-specific requirements and be flexibly combined with other access control approaches. In this paper, we discuss the potential for employing protocol-based and hybrid access control for IoT systems and examine how that can overcome the limitations of traditional access control mechanisms. We also focus on the key benefits and constraints of this integration. Our work further enhances the need to build hierarchical access control for large-scale IoT systems (e.g., Industrial IoT (IIoT) settings) with protocol-based and hybrid access control approaches. We, moreover, list the associated open issues to make such approaches efficient for access control in large-scale IoT systems.

show abstract

Section: Discussion and Future Research Opportunitiesmentioning

confidence: 99%

Protocol-Based and Hybrid Access Control for the IoT: Approaches and Research Opportunities

Pal

Jadidi

2021

Sensors

View full text Add to dashboard Cite

show abstract

“…In the smart grid infrastructure, the system that assumes the special role of interconnecting the distribution network with the systems of smart metering, building automation, industrial automation [56], e-mobility, and distributed energy resources is the advanced metering infrastructure (AMI). It includes data collection and analysis systems as well as energy audit systems, and provides interactive communication between customers, suppliers, utilities, and service providers [9,41].…”

Section: Advanced Metering Infrastructurementioning

confidence: 99%

Communication Network Standards for Smart Grid Infrastructures

Demertzis

Τσίκνας

Taketzis³

et al. 2021

Network

Self Cite

View full text Add to dashboard Cite

Upgrading the existing energy infrastructure to a smart grid necessarily goes through the provision of integrated technological solutions that ensure the interoperability of business processes and reduce the risk of devaluation of systems already in use. Considering the heterogeneity of the current infrastructures, and in order to keep pace with the dynamics of their operating environment, we should aim to the reduction of their architectural complexity and the addition of new and more efficient technologies and procedures. Furthermore, the integrated management of the overall ecosystem requires a collaborative integration strategy which should ensure the end-to-end interconnection under specific quality standards together with the establishment of strict security policies. In this respect, every design detail can be critical to the success or failure of a costly and ambitious project, such as that of smart energy networks. This work presents and classifies the communication network standards that have been established for smart grids and should be taken into account in the process of planning and implementing new infrastructures.

show abstract

“…However, there are numerous security issues that must be addressed to provide a flexible, scalable, and trustworthy IIoT environment to both the client and users [22]. Recent attacks on IIoT elevate a significant security concern for industry [23][24][25][26][27]. These attacks can cause a large amount of business failure/damage and also sometimes may bring about life-threatening situations.…”

Section: Problem Statement and Motivationmentioning

confidence: 99%

Analysis of Security Issues and Countermeasures for the Industrial Internet of Things

Pal

Jadidi

2021

Applied Sciences

View full text Add to dashboard Cite

Industrial Internet of Things (IIoT) can be seen as an extension of the Internet of Things (IoT) services and applications to industry with the inclusion of Industry 4.0 that provides automation, reliability, and control in production and manufacturing. IIoT has tremendous potential to accelerate industry automation in many areas, including transportation, manufacturing, automobile, marketing, to name a few places. When the benefits of IIoT are visible, the development of large-scale IIoT systems faces various security challenges resulting in many large-scale cyber-attacks, including fraudulent transactions or damage to critical infrastructure. Moreover, a large number of connected devices over the Internet and resource limitations of the devices (e.g., battery, memory, and processing capability) further pose challenges to the system. The IIoT inherits the insecurities of the traditional communication and networking technologies; however, the IIoT requires further effort to customize the available security solutions with more focus on critical industrial control systems. Several proposals discuss the issue of security, privacy, and trust in IIoT systems, but comprehensive literature considering the several aspects (e.g., users, devices, applications, cascading services, or the emergence of resources) of an IIoT system is missing in the present state of the art IIoT research. In other words, the need for considering a vision for securing an IIoT system with broader security analysis and its potential countermeasures is missing in recent times. To address this issue, in this paper, we provide a comparative analysis of the available security issues present in an IIoT system. We identify a list of security issues comprising logical, technological, and architectural points of view and consider the different IIoT security requirements. We also discuss the available IIoT architectures to examine these security concerns in a systematic way. We show how the functioning of different layers of an IIoT architecture is affected by various security issues and report a list of potential countermeasures against them. This study also presents a list of future research directions towards the development of a large-scale, secure, and trustworthy IIoT system. The study helps understand the various security issues by indicating various threats and attacks present in an IIoT system.

show abstract

Cyber Threats to Industrial IoT: A Survey on Attacks and Countermeasures

Cited by 115 publications

References 99 publications

Protocol-Based and Hybrid Access Control for the IoT: Approaches and Research Opportunities

Protocol-Based and Hybrid Access Control for the IoT: Approaches and Research Opportunities

Communication Network Standards for Smart Grid Infrastructures

Analysis of Security Issues and Countermeasures for the Industrial Internet of Things

Contact Info

Product

Resources

About