Cyber-Physical, IoT, and Autonomous Systems in Industry 4.0

Vikram Bali, Vishal Bhatnagar, Deepti Aggarwal, Shivani Bali, Mario José Diván, Vikram Bali, Vishal Bhatnagar, Deepti Aggarwal, Shivani Bali, Mario José Diván

• Publisher: CRC Press
• Edition: 1
• Year: 2021
• Topic: Technology & Engineering
• Print ISBN:
  9780367705169
  9780367705152
• Subtopic: Cloud Computing
• eBook ISBN:
  9781000469462
• Index: Technology & Engineering

This book addresses topics related to the Internet of Things (IoT), machine learning, cyber-physical systems, cloud computing, and autonomous vehicles in Industry 4.0. It investigates challenges across multiple sectors and industries and considers Industry 4.0 for operations research and supply chain management.

Cyber-Physical, IoT, and Autonomous Systems in Industry 4.0 encourages readers to develop novel theories and enrich their knowledge to foster sustainability. It examines the recent research trends and the future of cyber-physical systems, IoT, and autonomous systems as they relate to Industry 4.0.

This book is intended for undergraduates, postgraduates, academics, researchers, and industry individuals to explore new ideas, techniques, and tools related to Industry 4.0.

1 Cyber Systems and Security in Industry 4.0

Bhogaraju Padma and Thalatam Mohana Naga Vamsi

Gayatri Vidya Parishad College for Degree and PG Courses, Visakhapatnam, Andhra Pradesh, India

DOI: 10.1201/9781003146711-1

Contents

1. 1.1 Introduction to Cyberspace, Cyber Systems, and Cyber Security
   • 1.1.1 Cyber Threats, Vulnerabilities, and Risks
2. 1.2 The Internet of Things and Security Issues
   • 1.2.1 IoT Architecture and Protocol Stacks
   • 1.2.2 Applications of the IoT
   • 1.2.3 Security of IoT Systems
   • 1.2.4 Securing IoT Devices and Networks
3. 1.3 Industrial Internet of Things (IIoT)
   • 1.3.1 Industry 4.0: Overview
   • 1.3.2 IIoT Applications
   • 1.3.3 IIoT Architecture
   • 1.3.4 Impact of IIoT on the Economy
4. 1.4 Security Challenges in Industry 4.0
   • 1.4.1 How Secure Is IIoT?
   • 1.4.2 IIoT Security Challenges
     • 1.4.2.1 Device Hijacking
     • 1.4.2.2 Data Siphoning
     • 1.4.2.3 Denial of Service Attacks
     • 1.4.2.4 Data Breaches
     • 1.4.2.5 Device Theft
     • 1.4.2.6 Man-in-the-Middle or Device “Spoofing”
   • 1.4.3 IIoT Security Solutions
     • 1.4.3.1 Endpoint Security-by-Design
5. 1.5 Conclusions and Future Work
   • 1.5.1 Conclusions
   • 1.5.2 Limitations
   • 1.5.3 Future Work
6. References

1.1 Introduction to Cyberspace, Cyber Systems, and Cyber Security

The term “cyber” stands for “computerized.” The term “cyberspace” was first used by William Gibson in 1984, to describe any feature or facility that is associated with the Internet. Cyberspace is an electronic medium that facilitates online communication and data exchange activities. It encompasses the whole virtual computer world that explicitly employs transmission control protocol/Internet protocol (TCP/IP) for communication. Cyberspace is often referred to as the Internet but it is a symbolic space that exists within the scope of the Internet, whereas the Internet is a network of networks. The ever-increasing practice of using the Internet creates a cyberspace. The abundant use of desktop computers, laptops, and smart phones to access the Internet for gaming, streaming videos, social networks, language translation, e-banking, and so on means that, in a theoretical and practical sense, cyberspace is growing. Geopolitically, cyberspace is growing across borders, making the globe smaller.

A cyber system makes use of a cyberspace. It is any combination of equipment that facilitates infrastructure, procedures, personnel, and integrated communications to provide the services of the Internet that include control systems, business systems, and access control systems. A cyber-physical system (CPS) is a part of a cyber system that interacts with its physical surroundings (Boyes et al., 2018). CPS integrates cyberspace and physical elements. A CPS is made up of highly integrated communication, computation, control, and the physical world. It is the major current research area in academia, industry, and government. In recent decades, cyberspace has increased enormously. It has brought exceptional economic growth and opportunities.

The global, interconnected, and digital nature of the cyber infrastructure has unfortunately presented bad actors with new crime opportunities by means of exploiting computer and network vulnerabilities. A cyber attack is any deed that may modify, steal, or devastate a specified object by hacking into a susceptible system. Cyber attacks can vary from installing malware on a personal computer to destroying the infrastructure of a whole nation. Cyber attacks in business environments are deliberate and inspired by financial gain. Cyber crime is a criminal action that involves a cyber assault on a computer or a network. Cyber law can be described as that branch of law which deals with communications in information technology (Berrehili & Belmekki, 2016). Simply put, cyber law governs computers and cyberspace/the Internet. Cyber security is meant to protect Internet-connected systems, including software, hardware, and data from a range of cyber attacks. In other words, cyber security is the protection of cyberspace. It and information security are frequently considered as the same thing. Undoubtedly, this creates perplexity in the security world. The difference between these two lies in their respective scope. Cyber security is the capability of defending or protecting cyberspace against cyber attacks, but information security deals with protecting information and information systems to provide integrity, confidentiality, and availability (Thakur et al., 2015). Confidentiality ensures the information transmitted is not easily accessed by unauthorized users, including systems, applications, processes, or humans. Integrity is the capability of ensuring that data do not suffer from unauthorized modification. Availability ensures that systems, applications, and data are accessible to users, particularly when they need them. Non-repudiation is a term used in law that means one’s intent to accomplish one’s obligations in an agreement and that one party cannot refuse to send or receive a transaction.

1.1.1 Cyber Threats, Vulnerabilities, and Risks

The terms cyber threats, vulnerabilities, and risks are often used interchangeably, but this causes confusion. Organizations must understand the relationships between three components: threat, vulnerability, and risk. Although these three terms are employed interchangeably, they are different terms with special meanings and inferences. Through security vulnerabilities, a hacker finds his or her way into systems and networks, or pulls out sensitive information. The term cyber security vulnerability refers to any sort of exploitable weak spot that threatens the cyber security of an organization. The most frequent security vulnerabilities are phishing and ransom ware. Phishing refers to an attempt to obtain secret information while acting as a reliable contact, such as an online service or bank. Phishing is mostly targeted at gaining the confidential data of individuals. Phishing emails often look fully convincing, with ideal text and authentic logos. People use smart phones and tablets extensively. Ransom ware is a form of malware (malicious software) and most are brought in via malicious emails. Security vulnerabilities of these portable storage devices cause data leakages. Weak credentials are vulnerabilities which are always prone to dictionary and brute-force attacks. Vulnerabilities such as system misconfigurations, running needless services, or vulnerable settings can be exploited by attackers to violate networks. With attacks due to poor encryption, an enemy can interrupt the communication among connected systems and obtain information.

A cyber threat is a malevolent act that seeks to steal data, damage data, or disrupt digital life in general. The most common cyber threats are phishing, ransom ware, data leakage, and hacking. Hacking is achieving entrance to IT systems and networks from outside of an organization and offers an attractive alternative for criminals. There have been many successful attempts at admission to customer personal bank account data and also credit card numbers. By means of a social engineering threat, opponents trap users into disclosing their names and passwords. A Denial of Service (DoS) attack is an assault in which a computer is employed to send numerous TCP or user datagram protocol (UDP) data packets to servers. A Distributed Denial of Service (DDoS) attack is an assault where several systems aim at only one system with a DoS attack. The communication network that is targeted is showered with a huge number of packets directed from multiple locations. Cyber espionage is committed by state-sponsored or directed groups, government actors, or others on behalf of a government seeking to gain unauthorized admission to data and systems in order to develop their own country’s economic competitiveness, national security, or military strength. Cyber terrorism refers to exploiting the Internet so as to perform violent and cruel actions that result in serious bodily harm or even loss of life. A cyber risk is the probability of a threatening agent successfully exploiting vulnerability. As the severity and frequency of cyber crimes are getting higher, there is a considerable need for cyber security management as a part of every business enterprise’s risk profile. Irrespective of an organization’s risk appetite, stakeholders need to include cyber security as part of a business’s risk management process and regular business operations.

1.2 The Internet of Things and Security Issues

The Internet of Things (IoT) is an arrangement of connection and communication among computing devices, objects, mechanical and digital instruments, and people which are provided with the facility to transmit data over a communication network without human-to-human or human-to-computer interaction. An IoT platform can be implemented in many domain areas including healthcare, transportation, agriculture, energy production and distribution, and many other areas that necessitate things to interact with over the Internet to execute business projects intelligently without human participation. When IoT devices were invented, security concerns were not an issue. So generally, there is no way of dealing with security concerns on devices (Dean & Agyeman, 2018). Additionally, devices are sometimes shipped with malware on them; consequently, this may lead to infection of the other networks to which they get connected. Some of the network security systems don’t have the capacity to detect which IoT devices are connected to them nor the visibility to know about other devices that are communicating through the present network. Since the IoT is applied to essential areas of the economy, healthcare, intelligent transportation, and security needs are higher in their dependability on the availability of IoT implementations. Machine-to-Machine communication (M2M) is said to be the predecessor technology, and generally refers to data exchange between various devices through the Internet without human involvement. All most all applications that implement the IoT need to include one or more sensors to accumulate data from the surrounding environment. Sensors and actuators are crucial and the integrated components of smart objects and context awareness is the most important feature of the IoT, which may not be achievable without sensor technology.

1.2.1 IoT Architecture and Protocol Stacks

There exists no standard consensus on the architecture of the IoT which is universally defined. Several IoT architectures diverge according to their functional areas and solutions (Al-Fuqaha et al., 2015). There are several functional layers of the IoT which are built upon the potentiality and performance of IoT elements and which offer optimal business solutions for enterprises as well as end users. IoT architecture is an elementary way for designing different elements of the IoT, so that it can bring about future needs in addition to services over the networks. The IoT requires a layered architecture for facilitating communication among trillions of diverged heterogeneous objects through the Web. Most of the earlier models used a layered architecture that included three layers: perception, application, and network. Physical sensors in the perception layer collect data in order to digitize it and send it through secure communications. The network layer administers the routing of data to IoT devices and hubs and also performs aggregation. The application layer transports data to end-user devices. The present architecture models include more views to the structure of the IoT. As a result, the five-layer framework was instigated which depends on the performance demand of IoT devices (Sicari et al., 2016), as shown in Figure 1.1.

Figure 1.1 Five-layer architecture of the IoT.

Big data generated by “things” in the IoT are analyzed, and this process begins in the physical layer that contains devices such as sensors that gather and also analyze and process the data collected. The physical devices or objects include actuators as well as sensors for submitting queries on weight, location, temperature, acceleration, motion, humidity, and so on. The object abstraction layer encompasses communication technologies such as the global system for mobile communication (GSM), 3G, radio frequency identification (RFID), Wi-Fi, infrared, Bluetooth (Low Energy), and Zigbee for transferring information which is generated in the object layer to the service management layer (Jia et al., 2010). The abstraction layer controls various tasks such as data management and cloud-computation-related processes. The service management layer connects together services and requesters depending on names as well as addresses. The application designers of the IoT deal with a wide variety of objects that involve hardware platforms. The service management layer processes the collected data, takes decisions, and brings in obliged services according to network protocols. The application layer makes available smart quality devices and services for smart buildings, smart homes, industrial automation, transportation, and smart healthcare facilities. The business layer’s responsibility is to manage the IoT system services, activities, graphs, the building of business models, and flow charts of the application layer. It plans, implements, evaluates, develops, and monitors IoT elements. Based on big data analysis, the business layer also supports decision-making processes.

The IoT protocol stack is designed as an enhancement of the TCP/IP protocol model. It consists of the following layers: physical/link layer, network layer, transport layer, application protocol layer, and application services layer. The most common physical layer protocols used by embedded systems are Ethernet, Bluetooth Low Energy, Wi-Fi, Wireless HART, Zigbee, Z-wave, RFID, Cellular (GPRS/2G/3G/4G/5G), and LoRAWAN. The network layer is accountable for the addressing and routing of information packets in the IoT. There are other network layer protocols such as 6LoWPAN, IPv6, and IPv4. The transport layer is accountable for transmitting and routing of data packets over a communication channel. The most commonly used transport layer protocols are TCP, UDP, and RPL (Routing Protocol for Low-Power and Lossy Networks). The application layer is accountable for data presentation and formatting, and is characteristically based on the Hypertext Transfer (HTTP) protocol. However, HTTP is not appropriate in a resource constrained environment since it is a heavy weight protocol and therefore involves a huge parsing overhead. Hence, there exist many application service protocols which have been invented for IoT surroundings; these include: MQTT, SMQTT, AMQP, DDS, CoAP, XMPP, REST, and SOAP.

1.2.2 Applications of the IoT

The IoT allows devices to interrelate, interact, collaborate, and be trained by each other’s knowledg...

Table of contents

• Cover
• Half Title Page
• Title Page
• Copyright Page
• Contents
• Preface
• Editors
• Contributors
• 1 Cyber Systems and Security in Industry 4.0
• 2 A Demand Response Program for Social Welfare Maximization in the Context of the Indian Smart Grid A Review
• 3 Cloud Computing Security Framework Based on Shared Responsibility Models Cloud Computing
• 4 Performance Analysis of a Hypervisor and the Container-based Migration Technique for Cloud Virtualization
• 5 Segmentation of Fine-Grained Iron Ore Using Deep Learning and the Internet of Things
• 6 Amalgamation of Blockchain Technology and Cloud Computing for a Secure and More Adaptable Cloud
• 7 Cloud, Edge, and Fog Computing Trends
• 8 Progression in Cyber Security Concerns for Learning Management Systems Analyzing the Role of Participants
• 9 A Security Model for Cloud-computing-based E-governance Applications
• 10 Automatic Time and Motion Study Using Deep Learning
• 11 Applications of IoT Based Frameworks in Industry 4.0 Applications of IoT Based Frameworks
• 12 Impact of Deep Learning and Machine Learning in Industry 4.0 Impact of Deep Learning
• 13 IoT Applications and Recent Advances
• 14 A Spatio-temporal Model for the Analysis and Classification of Soil Using the IoT
• 15 A Critical Survey of Autonomous Vehicles
• 16 A Meta-learning Approach for Algorithm Selection for Capacitated Vehicle Routing Problems
• 17 Early Detection of Autism Disorder Using Predictive Analysis
• 18 Computing Technologies for Prognosticating the Emanation of Carbon Using an ARIMA Model
• 19 DWT and SVD-Based Robust Watermarking Using Differential Evolution with Adaptive Optimization
• 20 A Novel Framework Based on a Machine Learning Algorithm for the Estimation of COVID-19 Cases
• 21 Assessing the Impact of Coronavirus on Pollutant Concentration A Case Study in Malaysia
• 22 A Comprehensive Review of SLAM Techniques
• 23 A Novel Evolutionary Computation Method for Securing the Data in Wireless Networks
• Index