Industry 4.0 is a revolution in manufacturing by introducing disruptive technologies such as Internet of Things (IoT) and cloud-computing into the heart of the factory. The resulting increased automation and the improved production synergy between stocks, supply chains and customer demands, come along with the threats and attacks from the Internet. Despite extensive literature on the cybersecurity topic, many actors in manufacturing factories are just realizing the impact of cybersecurity in the preservation of their business. This paper introduces step-by-step the concepts and practical aspects of an Industry 4.0 manufacturing factory that are related to cybersecurity. Based on a subdivision of a typical factory into several generic perimeters, we present the vulnerabilities and threats regarding the network and devices usually found in each perimeter. Therefore, it is more efficient to present the recent proposals of the literature regarding cybersecurity guidelines and solutions in Industry 4.0. Instead of spreading a lot of references regarding every aspect of cybersecurity, we focused on a limited number of papers among the recent references. However, for each paper, we provide the details about the purpose of the proposal, the methodology adopted, the technical solution developed and its evaluation by the authors. These solutions range from classical cybersecurity countermeasures to innovative ones, such as those based on honeypots and digital twins. In order to deliver a review also useful to non scientists, we present our guidelines along with those of some organizations involved in cybersecurity harmonization and standardization in the world.
The connected vehicle is becoming a reality, and both centralised applications provided through telecommunication infrastructure, and cooperative applications achieved directly by the vehicles through vehicle-to-vehicle communications are gaining a lot of interest from the public. Though several solutions have been investigated to ensure identification and privacy protection of vehicles participating in these applications, only a few works address the recording of exchanged messages from an audit perspective, especially in the context of vehicle-to-vehicle communications only. This paper, proposes a review of the literature on vehicular communications, and explores particularly the solutions envisaged for audit in this context, such as the Blockchain technology. We also point out the most challenging issues that should be addressed in order to achieve an effective deployment of this latter in vehicular communications, especially in the vehicle-to-vehicle communication context, which should help in developing an effective Blockchain-based audit strategy.
Recently, the growth of the focus on internet of things (IoT) is rocketing in parallel with the evolution of the mobile fifth generation (5G) networks. To fully utilize IoT, which wirelessly connects billions of devices, a 5G network is essential. However, the provision of user’s certificates exposes the network to serious security threats. The LightCert4IoT leverages the advantages of EDGE nodes with blockchain technology and smart contracts to address the existing challenges of PKI (Public Key Infrastructure) certificates in IoT devices, which neatly achieves certificate issuance, update, and revocation more securely and efficiently. An end-user issues a self-signed certificate and lets Local Registration Authorities (LRAs)/EDGE nodes to verify and validate the binding identity-self signed certificate of the users through a blockchain such as Ethereum. This work analyzes the performance of LightCert4IoT in the IoT devices by utilizing the Cooja-Contiki simulator. The results show reduced energy consumption and memory size when compared to the conventional X509 certificate. As a conclusion, the LightCert4IoT meets the requirements of major IoT devices constraints. The paper also addresses the security threats with widespread use of IoT devices and analyses the adversary on security level from the authentication based on hardware token and blockchain and deploying firewall to protect servers against malicious attacks like DDOS. Scalability, resource limitations, privacy concerns are analyzed as IoT devices handle sensitive information, and the transparent and immutable nature of blockchain can raise data protection. Analysis of Network partitioning challenge and communication overhead.
The Internet of Things (IoT) is expanding rapidly, but the security of IoT devices remains a noteworthy concern due to resource limitations and existing security conventions. This research investigates and proposes the use of a Light certificate with the Constrained Application Protocol (CoAP) instead of the X509 certificate based on traditional PKI/CA. We start by analyzing the impediments of current CoAP security over DTLS with the certificate mode based on CA root in the constrained IoT device and suggest the implementation of LightCert4IoT for CoAP over DTLS. The paper also describes a new modified handshake protocol in DTLS applied for IoT devices and Application server certificate authentication verification by relying on a blockchain without the complication of the signed certificate and certificate chain. This approach streamlines the DTLS handshake process and reduces cryptographic overhead, making it particularly suitable for resource-constrained environments. Our proposed solution leverages blockchain to reinforce IoT gadget security through immutable device characters, secure device registration, and data integrity. The LightCert4IoT is smaller in size and requires less power consumption. Continuous research and advancement are pivotal to balancing security and effectiveness. This paper examines security challenges and demonstrates the effectiveness of giving potential solutions, guaranteeing the security of IoT networks by applying LightCert4IoT and using the CoAP over DTLS with a new security mode based on blockchain.