학술논문

Design Guidelines and a Prototype Implementation for Cyber-Resiliency in IT/OT Scenarios Based on Blockchain and Edge Computing
Document Type
Periodical
Source
IEEE Internet of Things Journal IEEE Internet Things J. Internet of Things Journal, IEEE. 9(7):4816-4832 Apr, 2022
Subject
Computing and Processing
Communication, Networking and Broadcast Technologies
Security
Topology
Blockchains
Network topology
Logic gates
Standards
Monitoring
Blockchain
cyber resiliency
edge computing
hyperledger fabric
Industrial Internet of Things (IoT)
Language
ISSN
2327-4662
2372-2541
Abstract
The advent of the Internet of Things (IoT) and its spread in industrial environments has changed production lines by dramatically fostering the dynamicity of data sharing and the connectivity of machines. However, such increased flexibility (also pushed by the adoption of edge devices) must not negatively affect the security and safety of industrial environments. The proposed solution adopts the blockchain to securely store in distributed ledgers topology information and access rules, maximizing the cyber resiliency of industrial networks. Topology information and access rules are stored and queried in a completely distributed manner, ensuring data availability even in case a centralized controller is temporarily down or the network partitioned. Moreover, blockchain consensus algorithms foster a participative validation of topology information, to ensure the identity of interacting machines/nodes, to securely distribute topology information and commands in a privacy-preserving manner, and to trace any past modification in a nonrepudiable manner. Finally, the adoption of configurable edge gateways allows to take prompt countermeasures in case potential threats are identified, by activating access rules stored in ledgers in a secure and distributed manner. In addition to solution design guidelines and architectural considerations, the article also presents performance results achieved with our CyberChain working prototype, with the goal of not only demonstrating the feasibility of the proposed solution but also its suitability in industrial environments.