ASTRIS uma proposta de método para avaliação de resiliência quanto à cibersegurança em redes de internet das coisas industriais

Abstract

In a context of high competitiveness and digital transformation, technological advances with the potential to increase the efficiency of industrial units are causing an exponential increase in the use of new technologies in these environments. Wireless communication is one of the most implemented solutions, allowing a high level of interconnectivity in different systems, including critical systems responsible for production control and safety. The performance gain with the increase in wireless connectivity between “things”, however, is accompanied by an increase in vulnerabilities due to the different types of risks related to the security of this type of communication. In this context, this study aims to present a method proposal for resilience analysis regarding cybersecurity in internet of things networks that allows the identification and mitigation of risks in an industrial environment. From the survey of threats and protection mechanisms for wireless networks described in the literature, the ASTRIS (Area Stack Threat Resilience Implementation & Scalability) method was developed for risk analysis that structures the necessary resilience for each layer of wireless networks, from the project through to its operational phase and future expansions. The application of the developed method in a real lloT network with wirelessHART protocol exposed hitherto unseen risk situations, contributing to the improvement of network resilience, as well as the awareness and maturity in security of the team responsible for operation and maintenance. Although the analyzed network demonstrates full capacity in scalability, it presented only 39% of resilience against vulnerability and threats, as well as 47% of resilience for network operation requirements. As for the recommended actions to increase resilience, 87% of these represented about 25% of the network design cost. These results demonstrate the potential of the ASTRIS method in helping to identify the current resilience of lloT networks and in the recognition of necessary actions to increase the maturity in security and robustness for these networks.