ThreatGet: Ensuring the Implementation of Defense-in-Depth Strategy for IIoT Based on IEC 62443

Christoph Schmittner; Abdelkader Magdy Shaaban; Georg MacHer

doi:10.1109/ICPS51978.2022.9816864

ThreatGet: Ensuring the Implementation of Defense-in-Depth Strategy for IIoT Based on IEC 62443

Christoph Schmittner, Abdelkader Magdy Shaaban, Georg MacHer

Institute of Technical Informatics (4480)

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Abstract

Security engineering is a major challenge in the distributed and heterogeneous nature of the Industrial Internet of Things (IIoT). While IEC 62443 is available as a security engineering standard for the industrial domain, the increased complexity and dynamic of combining IoT with industrial sys-tems challenges approaches without automation. Security analy-sis in the IIoT with a model-based engineering tool is essential to ensure the proper method is applied to protect the system model. This work follows the Defense-in-depth strategy presented by IEC 62443, then adapted for IIoT applications. We use ThreatGet threat modeling tool to show how this strategy could be implemented in the IIoT domain using threat modeling. The research findings demonstrate how the threat modeling approach ensures the implementation of a defense-in-depth strategy in the IIoT domain.

Original language	English
Title of host publication	Proceedings - 2022 IEEE 5th International Conference on Industrial Cyber-Physical Systems, ICPS 2022
Publisher	Institute of Electrical and Electronics Engineers
Number of pages	6
ISBN (Electronic)	9781665497701
DOIs	https://doi.org/10.1109/ICPS51978.2022.9816864
Publication status	Published - 2022
Event	5th IEEE International Conference on Industrial Cyber-Physical Systems: ICPS 2022 - Virtual, Online, United Kingdom Duration: 24 May 2022 → 26 May 2022

Conference

Conference	5th IEEE International Conference on Industrial Cyber-Physical Systems
Abbreviated title	ICPS 2022
Country/Territory	United Kingdom
City	Virtual, Online
Period	24/05/22 → 26/05/22

Keywords

IEC 62443
IIoT
Model-based
Security Analysis

ASJC Scopus subject areas

Artificial Intelligence
Computer Science Applications
Software
Information Systems and Management
Industrial and Manufacturing Engineering
Control and Optimization

Access to Document

10.1109/ICPS51978.2022.9816864

Cite this

ThreatGet: Ensuring the Implementation of Defense-in-Depth Strategy for IIoT Based on IEC 62443. / Schmittner, Christoph; Shaaban, Abdelkader Magdy; MacHer, Georg.
Proceedings - 2022 IEEE 5th International Conference on Industrial Cyber-Physical Systems, ICPS 2022. Institute of Electrical and Electronics Engineers, 2022.

Research output: Chapter in Book/Report/Conference proceeding › Conference paper › peer-review

Schmittner, C, Shaaban, AM & MacHer, G 2022, ThreatGet: Ensuring the Implementation of Defense-in-Depth Strategy for IIoT Based on IEC 62443. in Proceedings - 2022 IEEE 5th International Conference on Industrial Cyber-Physical Systems, ICPS 2022. Institute of Electrical and Electronics Engineers, 5th IEEE International Conference on Industrial Cyber-Physical Systems, Virtual, Online, United Kingdom, 24/05/22. https://doi.org/10.1109/ICPS51978.2022.9816864

@inproceedings{62f455c0559e46669b566732dfbfd56a,

title = "ThreatGet: Ensuring the Implementation of Defense-in-Depth Strategy for IIoT Based on IEC 62443",

abstract = "Security engineering is a major challenge in the distributed and heterogeneous nature of the Industrial Internet of Things (IIoT). While IEC 62443 is available as a security engineering standard for the industrial domain, the increased complexity and dynamic of combining IoT with industrial sys-tems challenges approaches without automation. Security analy-sis in the IIoT with a model-based engineering tool is essential to ensure the proper method is applied to protect the system model. This work follows the Defense-in-depth strategy presented by IEC 62443, then adapted for IIoT applications. We use ThreatGet threat modeling tool to show how this strategy could be implemented in the IIoT domain using threat modeling. The research findings demonstrate how the threat modeling approach ensures the implementation of a defense-in-depth strategy in the IIoT domain.",

keywords = "IEC 62443, IIoT, Model-based, Security Analysis",

author = "Christoph Schmittner and Shaaban, {Abdelkader Magdy} and Georg MacHer",

note = "Publisher Copyright: {\textcopyright} 2022 IEEE.; 5th IEEE International Conference on Industrial Cyber-Physical Systems : ICPS 2022, ICPS 2022 ; Conference date: 24-05-2022 Through 26-05-2022",

year = "2022",

doi = "10.1109/ICPS51978.2022.9816864",

language = "English",

booktitle = "Proceedings - 2022 IEEE 5th International Conference on Industrial Cyber-Physical Systems, ICPS 2022",

publisher = "Institute of Electrical and Electronics Engineers",

address = "United States",

}

TY - GEN

T1 - ThreatGet

T2 - 5th IEEE International Conference on Industrial Cyber-Physical Systems

AU - Schmittner, Christoph

AU - Shaaban, Abdelkader Magdy

AU - MacHer, Georg

PY - 2022

Y1 - 2022

N2 - Security engineering is a major challenge in the distributed and heterogeneous nature of the Industrial Internet of Things (IIoT). While IEC 62443 is available as a security engineering standard for the industrial domain, the increased complexity and dynamic of combining IoT with industrial sys-tems challenges approaches without automation. Security analy-sis in the IIoT with a model-based engineering tool is essential to ensure the proper method is applied to protect the system model. This work follows the Defense-in-depth strategy presented by IEC 62443, then adapted for IIoT applications. We use ThreatGet threat modeling tool to show how this strategy could be implemented in the IIoT domain using threat modeling. The research findings demonstrate how the threat modeling approach ensures the implementation of a defense-in-depth strategy in the IIoT domain.

AB - Security engineering is a major challenge in the distributed and heterogeneous nature of the Industrial Internet of Things (IIoT). While IEC 62443 is available as a security engineering standard for the industrial domain, the increased complexity and dynamic of combining IoT with industrial sys-tems challenges approaches without automation. Security analy-sis in the IIoT with a model-based engineering tool is essential to ensure the proper method is applied to protect the system model. This work follows the Defense-in-depth strategy presented by IEC 62443, then adapted for IIoT applications. We use ThreatGet threat modeling tool to show how this strategy could be implemented in the IIoT domain using threat modeling. The research findings demonstrate how the threat modeling approach ensures the implementation of a defense-in-depth strategy in the IIoT domain.

KW - IEC 62443

KW - IIoT

KW - Model-based

KW - Security Analysis

UR - http://www.scopus.com/inward/record.url?scp=85135614719&partnerID=8YFLogxK

U2 - 10.1109/ICPS51978.2022.9816864

DO - 10.1109/ICPS51978.2022.9816864

M3 - Conference paper

AN - SCOPUS:85135614719

BT - Proceedings - 2022 IEEE 5th International Conference on Industrial Cyber-Physical Systems, ICPS 2022

PB - Institute of Electrical and Electronics Engineers

Y2 - 24 May 2022 through 26 May 2022

ER -

ThreatGet: Ensuring the Implementation of Defense-in-Depth Strategy for IIoT Based on IEC 62443

Abstract

Conference

Keywords

ASJC Scopus subject areas

Access to Document

Other files and links

Fingerprint

Cite this