文章详情

题名 · 作者 · 摘要 · 关键词 · DOI · 参考文献

工业物联网安全威胁综述

周建华1，马川1，朱雨雷1，黎曦翔2

（1.舟山中远海运重工有限公司，浙江 舟山 316131；2.同济大学，上海 201804）

栏目：智能制造 · 第 2025 年第 10 期 · 页码：152-159,164 · 2096-4706（2025）10-0152-09 · 中图分类号：TN915.08 · 文献标识码：A · DOI：10.19850/j.cnki.2096-4706.2025.10.028

摘要

随着工业物联网技术广泛应用，其安全问题日益凸显。文章调研国内外研究成果，综述工业物联网的安全威胁。首先定义工业物联网并阐述其在工业生产中的重要性。其次，详细分析其三层架构（感知层、网络层、应用层）的特点及威胁：感知层面临射频识别标签被破坏、无线传感器网络通信被干扰等风险；网络层因通信协议效率低、安全性不足，易出现身份认证漏洞和数据通信隐患；应用层需应对MQTT和CoAP协议的漏洞，如身份验证缺失、授权不当、加密不足等。最后，文章总结各层安全威胁的多样性和复杂性，呼吁采取综合性安全策略，包括机器学习、提升安全协议、强化身份验证和加密措施，发展先进威胁检测技术，保障工业物联网健康发展。

关键词

工业物联网；无线传感器网络；入侵检测；射频识别；机器学习

参考文献

  1. [1] ASHTON K. That “Internet of Things” Thing [J].RFID Journal，2009，22：97-114.
  2. [2] KHAN W Z，REHMAN M H U，ZANGOTI H M，et al. Industrial Internet of Things: Recent Advances,Enabling Technologies,and Open Challenges [J/OL].Computers & Electrical Engineering Comput，2019，81（2）：106522[2024-10-03]. https://doi.org/10.1016/j.compeleceng.2019.106522.
  3. [3] GILCHRIST A. Industry 4.0: The Industrial Internet of Things [M].[S.I.]：Apress，2016.
  4. [4] RAYES A，SALAM S. Internet of Things From Hype to Reality: The Road to Digitization [M].[S.I.]：Springer，2017.
  5. [5] MOSENIA A，JHA N K. A Comprehensive Study of Security of Internet-of-Things [J].IEEE Transactions on Emerging Topics in Computing，2017，5（4）：586-602.
  6. [6] KAN C，YANG H，KUMARA S. Parallel Computing and Network Analytics for Fast Industrial Internet-of-Things (IIoT) Machine Information Processing and Condition Monitoring [J].Journal of Manufacturing Systems，2018，46：282-293.
  7. [7] WEBER E，BÜTTGEN M，BARTSCH S. How to Take Employees on the Digital Transformation Journey: An Experimental Study on Complementary Leadership Behaviors in Managing Organizational Change [J].Journal of Business Research，2022，143：225-238.
  8. [8] KAUR J，SANTHOSHKUMAR N，NOMANI M Z M，et al. Impact of Internets of Things (IOT) in Retail Sector [J].Materials Today: Proceedings，2022，51：26-30.
  9. [9] WANG J X，LIM M K L，WANG C，et al. The Evolution of the Internet of Things (IoT) Over the Past 20 Years [J/OL].Computers & Industrial Engineering，2021，155：107174[2024-09-26].https://doi.org/10.1016/j.cie.2021.107174.
  10. [10] LI S C，XU L D，ZHAO S S. The Internet of Things: A Survey [J].Information Systems Frontiers，2014，17：243-259.
  11. [11] RANA A，TANEJA A，SALUJA N. WITHDRAWN: Accelerating IoT Applications New Wave with 5G: A Review [J/OL].Materials Today: Proceedings，2021[2024-09-26].https://doi.org/10.1016/j.matpr.2021.03.292.
  12. [12] 郑尧文，文辉，程凯，等.物联网安全威胁与安全模型 [J].信息安全学报，2023，8（5）：81-95.
  13. [13] BERTINO E，ISLAM N. Botnets and Internet of Things Security [J].Computer，2017，50（2）：76-79.
  14. [14] KOLIAS C，KAMBOURAKIS G，STAVROU A，et al. DDoS in the IoT: Mirai and Other Botnets [J].Computer，2017，50：80-84.
  15. [15] LI F L，GUO Z B，LIANG B C，et al. A Measurement Study on Device-to-Device Communication Technologies for IIoT [J/OL].Comput Networks，2021，192：108072[2024-09-06].https://doi.org/10.1016/j.comnet.2021.108072.
  16. [16] BILLER S R. The Operational Butterfly Effect: How IoT Data + AI Help Deliver on the Promise of 4IR [C]//2019 IEEE 15th International Conference on Automation Science and Engineering (CASE).Vancouver：IEEE，2019：1-1.
  17. [17] AL-GARADI M A，MOHAMED A M，AL-ALI A K，et al. A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security [J].IEEE Communications Surveys & Tutorials，2018，22（3）：1646-1685.
  18. [18] ABBAS S G，HASHMAT F，SHAH G A. A Multi-layer Industrial-IoT Attack Taxonomy: Layers, Dimensions, Techniques and Application [C]//2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom).Guangzhou：IEEE，2020：1820-1825.
  19. [19] KHAN M A，SALAH K. IoT Security: Review, blockchain Solutions, and Open Challenges [J].Future Generation Computer Systems，2017，82：395-411.
  20. [20] KFOURY E F，SAAB J，YOUNES P，et al. A Self Organizing Map Intrusion Detection System for RPL Protocol Attacks [J].International Journal of Interdisciplinary Telecommunications and Networking，2019，11（1）：30-43.
  21. [21] 杨毅宇，周威，赵尚儒，等.物联网安全研究综述：威胁、检测与防御 [J].通信学报，2021，42（8）：188-205.
  22. [22] 王斌.工业物联网信息安全防护技术研究 [D].成都：电子科技大学，2018.
  23. [23] KAUR K，GARG S，AUJLA G S，et al. Edge Computing in the Industrial Internet of Things Environment: Software-Defined-Networks-Based Edge-Cloud Interplay [J].IEEE Communications Magazine，2018，56（2）：44-51.
  24. [24] DAI X X，XIAO Z，JIANG H B，et al. Task Co-Offloading for D2D-Assisted Mobile Edge Computing in Industrial Internet of Things [J].IEEE Transactions on Industrial Informatics，2023，19：480-490.
  25. [25] MOORE S J，NUGENT C D，ZHANG S，et al. IoT Reliability: A Review Leading to 5 Key Research Directions [J].CCF Transactions on Pervasive Computing and Interaction，2020，2：147-163.
  26. [26] ABBAS S G，HASHMAT F，SHAH G A. A Multi-layer Industrial-IoT Attack Taxonomy: Layers, Dimensions, Techniques and Application [C]//2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom).Guangzhou：IEEE，2020：1820-1825.
  27. [27] KHATTAK H A，SHAH M A，KHAN S，et al. Perception Layer Security in Internet of Things [J].Future Generation Computer Systems，2019，100：144-164.
  28. [28] ESLIM L M，IBRAHIM W M，HASSANEIN H S. GOSSIPY: A Distributed Localization System for Internet of Things Using RFID Technology [C]//2013 IEEE Global Communications Conference (GLOBECOM).Atlanta：IEEE，2013：140-145.
  29. [29] AHMED E，YAQOOB I，GANI A，et al. Internet-of-Things-Based Smart Environments: State of the Art, Taxonomy, and Open Research Challenges [J]. IEEE Wireless Communications，2016，23（5）：10-16.
  30. [30] FERNÁNDEZ-CARAMÉS T M，FRAGA-LAMAS P，SUÁREZ-ALBELA M，et al. Reverse Engineering and Security Evaluation of Commercial Tags for RFID-Based IoT Applications [J/OL]. Sensors （Basel, Switzerland），2016，17（1）：28[2024-09-21].https://doi.org/10.3390/s17010028.
  31. [31] LIN J，YU W，ZHANG N，et al. A Survey on Internet of Things: Architecture, Enabling Technologies, Security and Privacy, and Applications [J].IEEE Internet of Things Journal，2017，4（5）：1125-1142.
  32. [32] HASHEMI S Y，ALIEE F S. Dynamic and Comprehensive Trust Model for IoT and its Integration into RPL [J].The Journal of Supercomputing，2018，75：3555-3584.
  33. [33] PIRAYESH H，ZENG H C. Jamming Attacks and Anti-Jamming Strategies in Wireless Networks: A Comprehensive Survey [J].IEEE Communications Surveys & Tutorials，2021，24（2）：767-809.
  34. [34] SHI Z Y，LIAO K，YIN S P，et al. Design and implementation of the mobile internet of things based on td-scdma network [C]//2010 IEEE International Conference on Information Theory and Information Security.Beijing：IEEE，2010：954-957.
  35. [35] XIE N，LI Z Y，TAN H J. A Survey of Physical-Layer Authentication in Wireless Communications [J].IEEE Communications Surveys & Tutorials，2021，23（1）：282-310.
  36. [36] TRAPPE W. The Challenges Facing Physical Layer Security [J].IEEE Communications Magazine，2015，53（6）：16-20.
  37. [37] REHMAN A，REHMAN S U，RAHEEM H. Sinkhole Attacks in Wireless Sensor Networks: A Survey [J].Wireless Personal Communications，2018，106（4）：2291-2313.
  38. [38] DWIVEDI R K，SHARMA P，KUMAR R. Detection and Prevention Analysis of Wormhole Attack in Wireless Sensor Network [C]//2018 8th International Conference on Cloud Computing, Data Science & Engineering (Confluence).Noida：IEEE，2018：727-732.
  39. [39] LAI G-H. Detection of Wormhole Attacks on IPv6 Mobility-Based Wireless Sensor Network [J].EURASIP Journal on Wireless Communications and Networking，2016，2016：1-11.
  40. [40] GURUNG S，CHAUHAN S. A Novel Approach for Mitigating Route Request Flooding Attack in MANET [J].Wireless Networks，2017，24（8）：2899-2914.
  41. [41] SRINIVAS T A S，MANIVANNAN S S. Prevention of Hello Flood Attack in IoT Using Combination of Deep Learning with Improved Rider Optimization Algorithm [J].Computer Communications，2020，163：162-175.
  42. [42] JAHANGEER A，BAZAI S U，ASLAM S，et al. A Review on the Security of IoT Networks: From Network Layer' s Perspective [J].IEEE Access，2023，11：71073-71087.
  43. [43] ZHANG K，LIANG X H，LU R X，et al. Sybil Attacks and Their Defenses in the Internet of Things [J].IEEE Internet of Things Journal，2014，1（5）：372-383.
  44. [44] NING H S，LIU H，YANG L T. Aggregated-Proof Based Hierarchical Authentication Scheme for the Internet of Things [J].IEEE Transactions on Parallel and Distributed Systems，2015，26（3）：657-667.
  45. [45] EVANGELISTA D，MEZGHANI F，NOGUEIRA M，et al. Evaluation of Sybil Attack Detection Approaches in the Internet of Things Content Dissemination [J]. 2016 Wireless Days (WD).Toulouse：IEEE，2016：1-6.
  46. [46] MISHRA A K，TRIPATHY A K，PUTHAL D，et al. Analytical Model for Sybil Attack Phases in Internet of Things [J].IEEE Internet of Things Journal，2019，6（1）：379-387.
  47. [47] BADR Y，ZHU X Y，ALRAJA M N. Security and Privacy in the Internet of Things: Threats and Challenges [J].Service Oriented Computing and Applications，2021，15：257-271.
  48. [48] LU X F，QU Z W，LI Q，et al. Privacy Information Security Classification for Internet of Things Based on Internet Data [J/OL].International Journal of Distributed Sensor Networks，2015，2015：23[2024-09-06].https://doi.org/10.1155/2015/932941.
  49. [49] HOSSAIN M M，FOTOUHI M，HASAN R. Towards an Analysis of Security Issues, Challenges, and Open Problems in the Internet of Things [C]//2015 IEEE World Congress on Services.New York：IEEE，2015：21-28.
  50. [50] JAHANGEER A，BAZAI S U，ASLAM S，et al. A Review on the Security of IoT Networks: From Network Layer' s Perspective [J].IEEE Access，2023，11：71073-71087.
  51. [51] WINTER T，THUBERT P，BRANDT A，et al. RPL: IPv6 Routing Protocol for Low-Power and Lossy Networks [J].RFC，2012，6550：1-157.
  52. [52] WU D，HU G. Research and Improve on Secure Routing Protocols in Wireless Sensor Networks [C]//2008 4th IEEE International Conference on Circuits and Systems for Communications.Shanghai：IEEE，2008：853-856.
  53. [53] CONTI M，DRAGONI N，LESYK V. A Survey of Man In The Middle Attacks [J]. IEEE Communications Surveys & Tutorials，2016，18：2027-2051.
  54. [54] AL-FUQAHA A，GUIZANI M，MOHAMMADI M S，et al. Internet of Things: A Survey on Enabling Technologies, Protocols, and Applications [J].IEEE Communications Surveys & Tutorials，2015，17（4）：2347-2376.
  55. [55] SANTOS B P，SILVA L A M，CELES C S F S，et al. Internet das Coisas: da Teoria à Prática [EB/OL].[2024-08-30].https://homepages.dcc.ufmg.br/~mmvieira/cc/papers/internet-das-coisas.pdf.
  56. [56] QUINCOZES V E，QUINCOZES S E，KAZIENKO J F，et al. A Survey on IoT Application Layer Protocols, Security Challenges, and the Role of Explainable AI in IoT (XAIoT) [J].International Journal of Information Security，2024，23：1975-2002.
  57. [57] CABRERA C，PALADE A，CLARKE S. An Evaluation of Service Discovery Protocols in the Internet of Things [C]//Proceedings of the Symposium on Applied Computing.Marrakech：ACM，2017：469-476.
  58. [58] DIZDAREVIC J，CARPIO F，JUKAN A，et al. A Survey of Communication Protocols for Internet of Things and Related Challenges of Fog and Cloud Computing Integration [J].ACM Computing Surveys (CSUR)，2018，51（6）：1-29.
  59. [59] NAIK N. Choice of effective messaging protocols for IoT systems: MQTT, CoAP, AMQP and HTTP [C]//2017 IEEE International Systems Engineering Symposium (ISSE).Vienna：IEEE，2017：1-7.
  60. [60] WAHER P. Learning Internet of Things [M].[S.I.]：Packt Publishing，2015.
  61. [61] NEBBIONE G，CALZAROSSA M. Security of IoT Application Layer Protocols: Challenges and Findings [J/OL].Future Internet，2020，12（3）：55[2024-08-30].https://doi.org/10.3390/fi12030055.
  62. [62] QUINCOZES V E，QUINCOZES S E，KAZIENKO J F，et al. A Survey on IoT Application Layer Protocols, Security Challenges, and the Role of Explainable AI in IoT (XAIoT) [J].International Journal of Information Security，2024，23：1975-2002.
  63. [63] THANGAVEL D，MA X P，VALERA A C，et al. Performance Evaluation of MQTT and CoAP Via a Common Middleware [C]//2014 IEEE Ninth International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP).Singapore：IEEE，2014：1-6.
  64. [64] COLLINA M，CORAZZA G E，VANELLI CORALLI A. Introducing the QEST Broker: Scaling the IoT by Bridging MQTT and REST [C]//2012 IEEE 23rd International Symposium on Personal，Indoor and Mobile Radio Communications(PIMRC).Sydney：IEEE，2012：36-41.
  65. [65] ABUBAKAR M，JAROUCHEH Z，AL-DUBAI A Y，et al. Blockchain-Based Identity and Authentication Scheme for MQTT Protocol [C]//Proceedings of the 2021 3rd International Conference on Blockchain Technology.Shanghai：ACM，2021：73-81.
  66. [66] RAMPELOTTO JUNIOR C，QUINCOZES S E，KAZIENKO J F. LegitimateBroker: Mitigando Ataques de Personificação em Broker MQTT na Internet das Coisas [C]//Anais do XIX Simpósio Brasileiro de Segurança da Informação e de Sistemas Computacionais (SBSeg 2019).São Paulo：Sociedade Brasileira de Computação，2019：141-154.
  67. [67] SHELBY Z，HARTKE K，BORMANN C. The Constrained Application Protocol (CoAP) [J].RFC，2014，7252：1-112.
  68. [68] TARIQ M A，KHAN M，KHAN M T R，et al. Enhancements and Challenges in CoAP—A Survey [J/OL].Sensors，2020，20：6391[2024-09-03].https://doi.org/10.3390/s20216391.
  69. [69] SEOANE V，GARCÍA-RUBIO C，ALMENÁRES F，et al. Performance Evaluation of CoAP and MQTT with Security Support for IoT Environments [J/OL].Computer Networks，2021，197：108338[2024-09-13].https://doi.org/10.1016/j.comnet.2021.108338.
  70. [70] RAY R，BHALE P，BISWAS S，et al. DAISS: Design of an Attacker Identification Scheme in CoAP Request/Response Spoofing [C]//TENCON 2021-2021 IEEE Region 10 Conference (TENCON).Auckland：IEEE，2021：941-946.
  71. [71] GONG X，FENG T. Lightweight Anonymous Authentication and Key Agreement Protocol Based on CoAP of Internet of Things [J/OL].Sensors，2022，22（19）：7191[2024-08-19].https://doi.org/10.3390/s22197191.

作者简介

周建华（1974—），男，汉族，江西进贤人，正高级工程师，博士研究生，研究方向：船舶与海洋工程；马川（1979—），男，汉族，山东邹平人，工程师，本科，研究方向：船舶与海洋工程；朱雨雷（1981—），男，汉族，浙江舟山人，高级工程师，本科，研究方向：船舶企业科技创新与数智化转型；黎曦翔（2000—），男，汉族，安徽宣城人，硕士研究生在读，研究方向：控制科学与工程。