The Forgotten I in IIoT: a vulnerability scanner for industrial internet of things
The Forgotten I in IIoT: a vulnerability scanner for industrial internet of things
复制标题
IIoT 中被遗忘的 I：工业物联网漏洞扫描器
DOI：
10.1049/cp.2019.0126
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Antrobus R
中科院分区：
文献类型：
--
作者：
Antrobus R
在迈向高度连接的集成系统的过程中，工业物联网（IIoT）有望带来大量好处。增强现有数据源的使用并集成额外的生成点，为系统用户提供更大的工业流程可见性。这种可见性可用于识别和解决效率低下的问题。在离散制造业的背景下，例子包括减少废料和能源消耗。然而，当人们全神贯注于大数据分析、云技术的使用以及通过硬件网关的无缝采用时，十年前的系统被扔进了现代物联网的技术熔炉，而很少考虑额外的网络安全风险。许多工作提供的证据表明，从设备和通信协议的角度来看，工业系统极易受到网络攻击，但自动识别漏洞的努力有限。这是一个巨大的差距，利用脆弱性可能产生危及生命的影响。在这里，我们通过开发PIVoT Scan来解决这一差距，PIVoT Scan是一种行业感知的漏洞扫描器，能够评估主要位于IIoT环境遗留层中的各种设备和通信协议-“被遗忘的I”。此外，我们还展示了PIVoT Scan优于领先的漏洞扫描程序Nessus的能力。
In moving towards highly connected integrated systems, the Industrial Internet of Thing (IIoT) promises a wealth of benefits. Enhanced usage of existing data sources, and integration of additional generation points, provide system users with greater visibility of industrial processes. This visibility can be used to identify and address inefficiencies. Within the context of discrete manufacturing, examples include reduction of waste materials and energy consumption. However, while one becomes engrossed in the use of big-data analytics, cloud technologies, and seamless adoption through hardware gateways, decade old systems are dropped into a technological melting pot of modern IoT, with little consideration of additional cyber security risks. Numerous works have provided evidence to suggest industrial systems are highly vulnerable to cyber attacks, from both a device and communication protocol perspective, yet efforts to automatically identify vulnerabilities are limited. This presents a significant gap, with vulnerability exploitation harbouring potentially life-threatening impact. Here we address this gap through the development of PIVoT Scan, an industrially-aware vulnerability scanner, capable of assessing a diverse range of devices and communication protocols predominantly situated within the legacy layers of IIoT environments - “The forgotten I”. Furthermore, we demonstrate PIVoT Scan's ability to outperform a leading vulnerability scanner, Nessus.
新闻简报：网络安全——乌克兰电网黑客攻击给网络运营商敲响了警钟
DOI：
10.1049/et.2016.0116
发表时间：
2016
期刊：
Engineering & Technology
影响因子：
--
作者：
T. Pultarova
通讯作者：
T. Pultarova
DOI：
10.14236/ewic/ics2016.2
发表时间：
2016-08
期刊：
--
影响因子：
--
作者：
Rob Antrobus;Sylvain Frey;A. Rashid;B. Green
通讯作者：
Rob Antrobus;Sylvain Frey;A. Rashid;B. Green