Security Analysis for Distributed IoT-Based Industrial Automation

  title={Security Analysis for Distributed IoT-Based Industrial Automation},
  author={Vuk Lesi and Živana Jakovljevi{\'c} and Miroslav Pajic},
With ever-expanding computation and communication capabilities of modern embedded platforms, Internet of Things (IoT) technologies enable development of Reconfigurable Manufacturing Systems---a new generation of highly modularized industrial equipment suitable for highly-customized manufacturing. Sequential control in these systems is largely based on discrete events, while their formal execution semantics is specified as Control Interpreted Petri Nets (CIPN). Despite industry-wide use of… 
Yoneda Hacking: The Algebra of Attacker Actions
This work develops a categorical formalism to model attacker actions and illustrates this modeling framework using an unmanned aerial vehicle (UAV) cyber-physical system model, and demonstrates and model two types of attacks, a rewiring attack which violates data integrity and a rewriting attack, which violates availability.


Reliable industrial IoT-based distributed automation
This work introduces a method to transform distributed control models based on CIPNs into Stochastic Reward Nets that enable integration of realistic fault models (e.g., probabilistic link models), and shows how to specify desired system properties to enable verification under the adopted communication/fault models, both at design- and run-time.
Attacks on Distributed Sequential Control in Manufacturing Automation
This article presents security analysis for a major part of RMS in which manufacturing equipment is sequentially controlled and can be modeled as discrete event systems (DES), and develops a method for modeling such attacks, including event insertion and removal attacks, in distributed sequential control.
Security and privacy challenges in industrial Internet of Things
This paper gives an introduction to industrial IoT systems, the related security and privacy challenges, and an outlook on possible solutions towards a holistic security framework for Industrial IoT systems.
IoTSAT: A formal framework for security analysis of the internet of things (IoT)
IoTSAT formally models the generic behavior of IoT system of systems, based on device configurations, network topologies, user policies and IoT-specific attack surface, to measure system's resilience against potential attacks and identify threat vectors and specific attack techniques, which can be used to achieve higher-level adversary's objectives.
Soteria: Automated IoT Safety and Security Analysis
Soteria, a static analysis system for validating whether an IoT app or IoT environment (collection of apps working in concert) adheres to identified safety, security, and functional properties, is presented.
IoTGuard: Dynamic Enforcement of Security and Safety Policy in Commodity IoT
This effort introduces a rigorously grounded system for enforcing correct operation of IoT devices through systematically identified IoT policies, demonstrating the effectiveness and value of monitoring IoT apps with tools such as IOTGUARD.
The industrial internet of things (IIoT): An analysis framework
Formal specification, verification and evaluation of the MQTT protocol in the Internet of Things
This paper presents the formal modeling and performance analysis of one of Internet of Things (IoT) protocols. The Internet of Things is among the subjects best financed in the industry and studied
Cyber-Physical Manufacturing Systems (CPMS)
An overview of the research works that are currently conducted in the field of Cyber-Physical Manufacturing System (CPMS), and the interconnection between CPMS and Industry 4.0 is outlined.
Distributing Sequential Control for Manufacturing Automation Systems
To enable fast and reliable system reconfigurations, this brief introduces a method for distribution of control tasks and generation of control code for the devices in the control network based on the control interpreted Petri nets (CIPNs) formalism.