Additive Manufacturing Cyber-Physical System: Supply Chain Cybersecurity and Risks
Additive Manufacturing Cyber-Physical System: Supply Chain Cybersecurity and Risks
复制标题
DOI：
10.1109/access.2020.2978815
复制
发表时间：
2020-01-01
期刊：
影响因子：
3.9
通讯作者：
Karri, Ramesh
中科院分区：
文献类型：
--
作者：
Gupta, Nikhil;Tiwari, Akash;Karri, Ramesh
过去十年中，增材制造 (AM) 方法变得越来越高效且在工业上可行。这些方法为设计人员提供了复杂性的自由，为管理人员提供了本地化和基于拉动的生产系统的选择。 AM 的这些主张已经实现了定制制造，并且是增材制造 (AM) 快速增长的催化剂。本文分析了增材制造供应链的一般特征，并根据行业的具体性质提出了三种增材制造供应链模型。我们对模型的描述强调采用增材制造供应链的整体视图，因此包括原材料、打印机硬件和虚拟供应链。在增材制造产品的整个产品生命周期中，虚拟供应链（数字主线）与物理供应链及其运营的交织从根本上使增材制造流程成为网络物理系统（CPS）。因此，该技术带来了 CPS 的优势以及一类新的攻击向量。我们讨论可能的攻击（打印机、原材料和设计水平）、风险（逆向工程、伪造和盗窃）并提供增强的风险分类方案。我们认为，传统的网络安全方法需要发展，以解决威胁增材制造供应链的新型攻击媒介，并讨论有助于解决风险和攻击威胁的现有解决方案的性质。在提供增材制造供应链的整体视图时，介绍了增材制造供应链中流程的相互依赖性，并阐明了本地攻击向量对整个供应链的影响。此外，我们还讨论了现有的安全措施，以减轻风险并确定增材制造安全性中需要弥合的现有差距。
Additive Manufacturing (AM) methods have become increasingly efficient and industrially viable in the past ten years. These methods offer the freedom of complexity to the designers and choices of localized and pull-based production system to the managers. These propositions of AM have been enabling custom manufacturing and are catalysts for rapid growth of additive manufacturing (AM). This paper analyzes the general characteristics of AM supply chain and proposes three AM supply chain models based on the specific nature of the industry. Our description of the models emphasizes on adopting an holistic view of the AM supply chain and therefore includes raw material, printer hardware and the virtual supply chain. Throughout the product life cycle of additively manufactured products, the interlacing of the virtual supply chain (digital thread) with the physical supply chain and their operations fundamentally make the AM process a cyber-physical system (CPS). Therefore, the technology brings along with it benefits of a CPS as well as a new class of attack vectors. We discuss the possible attacks (printer, raw material and design level), risks (reverse engineering, counterfeiting and theft) and provide an enhanced risk classification scheme. We contend that the traditional cybersecurity methods need to evolve to address the new class of attack vectors that threaten the AM supply chain and also discuss the nature of existing solutions that help in addressing the risks and attack threats. In providing an holistic view of the AM supply chain the interdependencies of the processes in the AM supply chain are presented and we elucidate the effects of local attack vectors on the entire supply chain. Further, we discuss the existing security measures to mitigate the risk and identify the existing gap in AM security that needs to be bridged.