A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective <s> c: SECURITY AND PRIVACY <s> A power grid is a complex system connecting electric power generators to consumers through power transmission and distribution networks across a large geographical area. System monitoring is necessary to ensure the reliable operation of power grids, and state estimation is used in system monitoring to best estimate the power grid state through analysis of meter measurements and power system models. Various techniques have been developed to detect and identify bad measurements, including interacting bad measurements introduced by arbitrary, nonrandom causes. At first glance, it seems that these techniques can also defeat malicious measurements injected by attackers. In this article, we expose an unknown vulnerability of existing bad measurement detection algorithms by presenting and analyzing a new class of attacks, called false data injection attacks, against state estimation in electric power grids. Under the assumption that the attacker can access the current power system configuration information and manipulate the measurements of meters at physically protected locations such as substations, such attacks can introduce arbitrary errors into certain state variables without being detected by existing algorithms. Moreover, we look at two scenarios, where the attacker is either constrained to specific meters or limited in the resources required to compromise meters. We show that the attacker can systematically and efficiently construct attack vectors in both scenarios to change the results of state estimation in arbitrary ways. We also extend these attacks to generalized false data injection attacks, which can further increase the impact by exploiting measurement errors typically tolerated in state estimation. We demonstrate the success of these attacks through simulation using IEEE test systems, and also discuss the practicality of these attacks and the real-world constraints that limit their effectiveness. <s> BIB001 </s> A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective <s> c: SECURITY AND PRIVACY <s> Internet of Things (IoT) has provided a promising opportunity to build powerful industrial systems and applications by leveraging the growing ubiquity of radio-frequency identification (RFID), and wireless, mobile, and sensor devices. A wide range of industrial IoT applications have been developed and deployed in recent years. In an effort to understand the development of IoT in industries, this paper reviews the current research of IoT, key enabling technologies, major IoT applications in industries, and identifies research trends and challenges. A main contribution of this review paper is that it summarizes the current state-of-the-art IoT in industries systematically. <s> BIB002 </s> A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective <s> c: SECURITY AND PRIVACY <s> Today, embedded, mobile, and cyberphysical systems are ubiquitous and used in many applications, from industrial control systems, modern vehicles, to critical infrastructure. Current trends and initiatives, such as "Industrie 4.0" and Internet of Things (IoT), promise innovative business models and novel user experiences through strong connectivity and effective use of next generation of embedded devices. These systems generate, process, and exchange vast amounts of security-critical and privacy-sensitive data, which makes them attractive targets of attacks. Cyberattacks on IoT systems are very critical since they may cause physical damage and even threaten human lives. The complexity of these systems and the potential impact of cyberattacks bring upon new threats. This paper gives an introduction to Industrial IoT systems, the related security and privacy challenges, and an outlook on possible solutions towards a holistic security framework for Industrial IoT systems. <s> BIB003 </s> A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective <s> c: SECURITY AND PRIVACY <s> The fast development of Internet of Things (IoT) and cyber-physical systems (CPS) has triggered a large demand of smart devices which are loaded with sensors collecting information from their surroundings, processing it and relaying it to remote locations for further analysis. The wide deployment of IoT devices and the pressure of time to market of device development have raised security and privacy concerns. In order to help better understand the security vulnerabilities of existing IoT devices and promote the development of low-cost IoT security methods, in this paper, we use both commercial and industrial IoT devices as examples from which the security of hardware, software, and networks are analyzed and backdoors are identified. A detailed security analysis procedure will be elaborated on a home automation system and a smart meter proving that security vulnerabilities are a common problem for most devices. Security solutions and mitigation methods will also be discussed to help IoT manufacturers secure their products. <s> BIB004 </s> A Survey on Industrial Internet of Things: A Cyber-Physical Systems Perspective <s> c: SECURITY AND PRIVACY <s> Fog/edge computing has been proposed to be integrated with Internet of Things (IoT) to enable computing services devices deployed at network edge, aiming to improve the user’s experience and resilience of the services in case of failures. With the advantage of distributed architecture and close to end-users, fog/edge computing can provide faster response and greater quality of service for IoT applications. Thus, fog/edge computing-based IoT becomes future infrastructure on IoT development. To develop fog/edge computing-based IoT infrastructure, the architecture, enabling techniques, and issues related to IoT should be investigated first, and then the integration of fog/edge computing and IoT should be explored. To this end, this paper conducts a comprehensive overview of IoT with respect to system architecture, enabling technologies, security and privacy issues, and present the integration of fog/edge computing and IoT, and applications. Particularly, this paper first explores the relationship between cyber-physical systems and IoT, both of which play important roles in realizing an intelligent cyber-physical world. Then, existing architectures, enabling technologies, and security and privacy issues in IoT are presented to enhance the understanding of the state of the art IoT development. To investigate the fog/edge computing-based IoT, this paper also investigate the relationship between IoT and fog/edge computing, and discuss issues in fog/edge computing-based IoT. Finally, several applications, including the smart grid, smart transportation, and smart cities, are presented to demonstrate how fog/edge computing-based IoT to be implemented in real-world applications. <s> BIB005
Ensuring security and privacy of the I-IoT system is a challenging task. Considering that the I-IoT system integrates information communication technologies to enable strong interconnection between industrial devices, the protection of the I-IoT system from cyber-attacks is crucial. Moreover, cyber-attacks on the I-IoT system may cause not only information delay and uncertainty, but also safety issues for humans, the environment, and the machines, as well. In addition, the data collected during industrial manufacturing and production is valuable and privacy-sensitive, which makes I-IoT systems valuable targets for attackers BIB005 , BIB002 , BIB003 , BIB001 - BIB004 . To investigate the challenges in I-IoT, Sadeghi et al. BIB003 reviewed the security and privacy challenges from three perspectives: attacks on I-IoT systems, attack surfaces, and security goals and requirements. To protect I-IoT systems from attacks, they proposed solutions to protect the industrial devices, including implementing security architectures, integrity verification and secure IoT device management. As security and privacy of the I-IoT is extremely important, we outline the research directions to protect the security and privacy of I-IoT systems. First, we shall understand security features (e.g., confidentiality, integrity, availability, identification and authentication, privacy and trust, among others) in the context of I-IoT BIB005 . Then, towards ensuring security of I-IoT, we shall identify and understand security challenges (e.g., node capture attacks, false data injection attacks, DoS attacks, phishing attack, and so on). Towards ensuring data privacy in I-IoT, we shall understand the different steps of data processing (e.g., data collection, data aggregation, and data analysis) in I-IoT. Finally, with an understanding of the security and privacy challenges in I-IoT, corresponding defensive countermeasures and privacy-preserving mechanisms shall be developed to ensure effective security and privacy.