IIoT/I4.0 and Security: Why should you focus on Security?


Connecting the Operation Technology ( OT ) with Information Technology (IT) through IoT can help drive more intelligent, more efficient operating environments for manufacturing plants, utility providers, power stations, critical healthcare facilities, and many more. I4.0 or IIoT, if applied correctly, addresses critical use cases of energy management, predictive maintenance, and power quality management. Predictive maintenance alone could help save and reduce operating costs while also running critical infrastructure smoothly and efficiently.

IN 2009, malware manipulated the speed of centrifuges in a nuclear enrichment plant, causing them to spin out of control.

Cyber Security

However, as with any connected network, if the security of the connected OT and IT environment is poorly implemented, it will have an extreme impact on the cybersecurity of an entire organization. It potentially provides cyber attackers with new avenues for hacking into the heart of industrial systems with detrimental consequences that go well beyond data theft. As IoT technology evolves, more OT will connect to IT; this will blur the boundaries between IT and OT. It is ever more critical that the security of your digital factory ensures appropriate access to control and production data while preventing cyber security events that could cause shutdowns, safety, and Ransome threats.

We have already experienced and learned about such threats in new technology evolution, i.e., IT. Cybersecurity in the 1990s wasn't given much importance as organizations were not aware of the potential impact of the threat. IIoT is still evolving, but security threat is not theoretical anymore. In the last few years, we have various malware developed to attack industrial processes and core infrastructure we all rely upon for gas, oil, and electricity supplies.

Stuxnet was one of the first such malware and used in Iran in 2010 targeting the industries. In 2014, a South Korean nuclear facility was targeted. In 2016, Ukraine's capital Kyiv had a power outage after malware took down a power grid.

How does Nebeskie Labs prevent cybersecurity threats?

Our Enture IoT platform uses SSL for all interactions with our platform; this ensures that interactions are end to end encrypted. On top of that, all requests are authenticated and authorized using secure web tokens (JWT) with asymmetric key validations. We use redundant sync checks to prevent data consistency & integrity issues.

We also logically partition all data to make sure unauthorized accesses are not possible.We engage multiple failsafes across our cloud as well as edge devices to ensure a highly available system. The entire stack is kept updated in accordance with the latest security norms and trends. Enture IoT edge device also receives Over the Air (OTA) updates to ensure bug fixes and the latest security patches are applied.

We also have device-level security in the Enture IoT edge device to ensure there is no physical or any other form of tampering. To ensure this, we use a dedicated Cryptographic Co-processor in our embedded systems which works with asymmetric authentication, symmetric AES-128 encryption/decryption, Elliptic Curve Cryptography (FIPS186-3), along with other industry-leading security features.

We ensure that all the layers of our platform are secure and adhere to the latest security standards. We strongly believe in no trust policies and incorporate the same across our entire IoT and Web stack. Our application development follows OWASP standards to ensure that our customers enjoy the top-of-the-line features in the most secure way.

Source: LinkedIn