[論文レビュー] Threat Analysis of Industrial Internet of Things Devices

Simon Liebl, Leah Lathrop+3 more|arXiv (Cornell University)|May 25, 2024

Smart Grid Security and Resilience参考文献 3被引用数 9

ひとこと要約

本論文は IIoT デバイスの脅威を分析し、脅威ソースをランク付けし、共通の脆弱性を説明し、産業コンテキストの低電力 IIoT デバイスに適した構造化された脅威分析手順を提案する。

ABSTRACT

As part of the Internet of Things, industrial devices are now also connected to cloud services. However, the connection to the Internet increases the risks for Industrial Control Systems. Therefore, a threat analysis is essential for these devices. In this paper, we examine Industrial Internet of Things devices, identify and rank different sources of threats and describe common threats and vulnerabilities. Finally, we recommend a procedure to carry out a threat analysis on these devices.

研究の動機と目的

• IoT、IIoT、OT、ICSの違いを明確にし、産業コンテキストでのIIoTの利用を説明する。
• IIoTデバイスに関係する脅威ソースと攻撃者の動機を特定・分類する。
• IIoTデバイスに影響を与える共通の脅威と脆弱性を要約し、それらがOTおよびICSに与える影響を説明する。
• リスク評価を含むIIoTデバイスの脅威分析を実施するための段階的な手順を提案する。
• ディフェンス・イン・デプスとアーキテクチャの選択が産業環境におけるIIoTセキュリティにどのように影響するかを強調する。）
• method
• objectives
• method: ["Classify threat sources based on targeting arbitrariness and attacker capabilities.","Describe and categorize common threats and vulnerabilities affecting IIoT devices (e.g., abuse, DoS, espionage, etc.).","Present attack vectors and device interface zones to illustrate potential compromise paths.","Provide a structured, six-step procedure for conducting threat analyses on IIoT devices, including asset identification and CVSS-based risk assessment."]
• research_questions: ["What are the main threat sources and attacker motives for IIoT devices in industrial settings?","What are the common threats and vulnerabilities that IIoT devices face, and how do they impact OT/ICS environments?","What practical procedure can organizations follow to perform effective threat analyses on IIoT devices?","How do IIoT architectures and cloud-connect setups influence threat surfaces and security considerations?"]
• key_findings:[

提案手法

• Classify threat sources based on targeting arbitrariness and attacker capabilities.
• Describe and categorize common threats and vulnerabilities affecting IIoT devices (e.g., abuse, DoS, espionage, etc.).
• Present attack vectors and device interface zones to illustrate potential compromise paths.
• Provide a structured, six-step procedure for conducting threat analyses on IIoT devices, including asset identification and CVSS-based risk assessment.

実験結果

リサーチクエスチョン

• RQ1 What are the main threat sources and attacker motives for IIoT devices in industrial settings?
• RQ2 What are the common threats and vulnerabilities that IIoT devices face, and how do they impact OT/ICS environments?
• RQ3 What practical procedure can organizations follow to perform effective threat analyses on IIoT devices?
• RQ4 How do IIoT architectures and cloud-connect setups influence threat surfaces and security considerations?

主な発見

• Threat sources include government-sponsored actors, organized crime, malware, insider threats, and hacktivists, with government-sponsored actors posing especially serious risks to critical infrastructure.
• Common threats and vulnerabilities include abuse, denial of service, destruction, espionage, intellectual property theft, misconfiguration, physical manipulation, privilege escalation, repudiation, and web-based vulnerabilities.
• Attack vectors are structured across device zones (hardware, software, and interfaces), highlighting physical, firmware, network, and application-level attack paths.
• IIoT devices in OT/ICS present higher risk due to their control of physical processes and safety implications, necessitating defense-in-depth and careful risk assessment.
• A six-step threat-analysis procedure is recommended, including device profiling, network-diagram creation, asset identification, threat source identification, threat/vulnerability identification, and CVSS-based risk assessment.