Book Image

Practical Industrial Internet of Things Security

By : Sravani Bhattacharjee
Book Image

Practical Industrial Internet of Things Security

By: Sravani Bhattacharjee

Overview of this book

Securing connected industries and autonomous systems is of primary concern to the Industrial Internet of Things (IIoT) community. Unlike cybersecurity, cyber-physical security directly ties to system reliability as well as human and environmental safety. This hands-on guide begins by establishing the foundational concepts of IIoT security with the help of real-world case studies, threat models, and reference architectures. You’ll work with practical tools to design risk-based security controls for industrial use cases and gain practical knowledge of multi-layered defense techniques, including identity and access management (IAM), endpoint security, and communication infrastructure. You’ll also understand how to secure IIoT lifecycle processes, standardization, and governance. In the concluding chapters, you’ll explore the design and implementation of resilient connected systems with emerging technologies such as blockchain, artificial intelligence, and machine learning. By the end of this book, you’ll be equipped with the all the knowledge required to design industry-standard IoT systems confidently.
Table of Contents (22 chapters)
Title Page
Copyright and Credits
Dedication
Packt Upsell
Foreword
Contributors
Disclaimer
Preface
I
I
Index

IIoT endpoint vulnerabilities


Endpoint risk assessment and the implementation of security countermeasures require a thorough evaluation of the attack surfaces and attack vectors applicable to IIoT-specific use cases. Interested readers are encouraged to refer to the Industrial Internet Security Framework specification, which presents an elaborate analysis on "Security Threats and Vulnerabilities on Endpoints" (IIC-IISF). In this section, a few common threats and vulnerabilities associated with the various endpoint components are cited as examples:

Endpoint component

Threats and Vulnerability

 

 

Hardware

  • Unauthorized seizure of system resources, such as memory, processing cycles, and privileged access modes (privilege escalation exploit)
  • Improper endpoint initialization by corrupting UEFI/BIOS and corrupting the boot process

 

 

 

Firmware

  • Steal code signing key or inject corrupted firmware through tampering
  • Exploit vulnerabilities in code signing and firmware update process
  • Rewrite firmware through...