Book Image

Practical Industrial Internet of Things Security

By : Sravani Bhattacharjee
Book Image

Practical Industrial Internet of Things Security

By: Sravani Bhattacharjee

Overview of this book

Securing connected industries and autonomous systems is of primary concern to the Industrial Internet of Things (IIoT) community. Unlike cybersecurity, cyber-physical security directly ties to system reliability as well as human and environmental safety. This hands-on guide begins by establishing the foundational concepts of IIoT security with the help of real-world case studies, threat models, and reference architectures. You’ll work with practical tools to design risk-based security controls for industrial use cases and gain practical knowledge of multi-layered defense techniques, including identity and access management (IAM), endpoint security, and communication infrastructure. You’ll also understand how to secure IIoT lifecycle processes, standardization, and governance. In the concluding chapters, you’ll explore the design and implementation of resilient connected systems with emerging technologies such as blockchain, artificial intelligence, and machine learning. By the end of this book, you’ll be equipped with the all the knowledge required to design industry-standard IoT systems confidently.
Table of Contents (22 chapters)
Title Page
Copyright and Credits
Dedication
Packt Upsell
Foreword
Contributors
Disclaimer
Preface
I
I
Index

Connectivity transport standards


The high scalability and low CPU power requirements of IIoT field devices have encouraged the adoption of messaging protocols such as MQTT and CoAP for resource-constrained devices. These transports run on top of TCP or UDP and use TLS/DTLS for security. In this section, a brief description of the transports and their security assessment is presented.

Transmission Control Protocol (TCP)

TCP is an open standard maintained by IETF (IETF-TCP) and integral to the internet or TCP/IP protocol stack. TCP provides connection-oriented transport and has been widely used in HTTP-based applications such as e-commerce. In TCP, messages are delivered in order, and it supports retransmission of messages lost in transit, and as such requires considerable time and resources. As a result, message latencies may vary greatly when using TCP.

TCP security

The TLS protocol is usually used to protect transport layer traffic. TLS is an open standard version of SSL version 3 (RFC-TLS...