Article Details

Title · Authors · Abstract · Keywords · DOI · References

Overview of Industrial Internet of Things Security Threats

ZHOU Jianhua1, MA Chuan1, ZHU Yulei1, LI Xixiang2

(1.Zhoushan COSCO Shipping Heavy Industry Co., Ltd., Zhoushan 316131, China; 2.Tongji University, Shanghai 201804, China)

Section：Intelligent Manufacturing · Vol. 2025, Issue 10 · Pages：152-159,164 · 2096-4706（2025）10-0152-09 · CLC number：TN915.08 · Document code：A · DOI：10.19850/j.cnki.2096-4706.2025.10.028

Abstract

With the wide application of Industrial Internet of Things technology, its security issues have become increasingly prominent. This paper investigates the research results at home and abroad, and summarizes the security threats of the Industrial Internet of Things. Firstly, the Industrial Internet of Things is defined and its importance in Industrial production is expounded. Secondly, the characteristics and threats of its three-tier architecture (perception layer, network layer and application layer) are analyzed in detail. The perception layer faces the risk of the destruction of Radio-Frequency Identification tags and the interference of Wireless Sensor Network communication. The network layer is prone to identity authentication vulnerabilities and data communication risks due to low communication protocol efficiency and insufficient security. The application layer needs to deal with the vulnerabilities of MQTT and CoAP protocols, such as lack of authentication, improper authorization, and insufficient encryption. Finally, the article summarizes the diversity and complexity of security threats at all levels, and calls for comprehensive security strategies, including Machine Learning, improving security protocols, strengthening authentication and encryption measures, developing advanced threat detection technologies, and ensuring the healthy development of the Industrial Internet of Things.

Keywords

Industrial Internet of Things; Wireless Sensor Network; intrusion detection; Radio-Frequency Identification; Machine Learning

References

  1. [1] ASHTON K. That “Internet of Things” Thing [J].RFID Journal，2009，22：97-114.
  2. [2] KHAN W Z，REHMAN M H U，ZANGOTI H M，et al. Industrial Internet of Things: Recent Advances,Enabling Technologies,and Open Challenges [J/OL].Computers & Electrical Engineering Comput，2019，81（2）：106522[2024-10-03]. https://doi.org/10.1016/j.compeleceng.2019.106522.
  3. [3] GILCHRIST A. Industry 4.0: The Industrial Internet of Things [M].[S.I.]：Apress，2016.
  4. [4] RAYES A，SALAM S. Internet of Things From Hype to Reality: The Road to Digitization [M].[S.I.]：Springer，2017.
  5. [5] MOSENIA A，JHA N K. A Comprehensive Study of Security of Internet-of-Things [J].IEEE Transactions on Emerging Topics in Computing，2017，5（4）：586-602.
  6. [6] KAN C，YANG H，KUMARA S. Parallel Computing and Network Analytics for Fast Industrial Internet-of-Things (IIoT) Machine Information Processing and Condition Monitoring [J].Journal of Manufacturing Systems，2018，46：282-293.
  7. [7] WEBER E，BÜTTGEN M，BARTSCH S. How to Take Employees on the Digital Transformation Journey: An Experimental Study on Complementary Leadership Behaviors in Managing Organizational Change [J].Journal of Business Research，2022，143：225-238.
  8. [8] KAUR J，SANTHOSHKUMAR N，NOMANI M Z M，et al. Impact of Internets of Things (IOT) in Retail Sector [J].Materials Today: Proceedings，2022，51：26-30.
  9. [9] WANG J X，LIM M K L，WANG C，et al. The Evolution of the Internet of Things (IoT) Over the Past 20 Years [J/OL].Computers & Industrial Engineering，2021，155：107174[2024-09-26].https://doi.org/10.1016/j.cie.2021.107174.
  10. [10] LI S C，XU L D，ZHAO S S. The Internet of Things: A Survey [J].Information Systems Frontiers，2014，17：243-259.
  11. [11] RANA A，TANEJA A，SALUJA N. WITHDRAWN: Accelerating IoT Applications New Wave with 5G: A Review [J/OL].Materials Today: Proceedings，2021[2024-09-26].https://doi.org/10.1016/j.matpr.2021.03.292.
  12. [12] Zheng Yaowen, Wen Hui, Cheng Kai, etc IoT Security Threats and Security Models [J]. Journal of Information Security, 2023, 8 (5): 81-95
  13. [13] BERTINO E，ISLAM N. Botnets and Internet of Things Security [J].Computer，2017，50（2）：76-79.
  14. [14] KOLIAS C，KAMBOURAKIS G，STAVROU A，et al. DDoS in the IoT: Mirai and Other Botnets [J].Computer，2017，50：80-84.
  15. [15] LI F L，GUO Z B，LIANG B C，et al. A Measurement Study on Device-to-Device Communication Technologies for IIoT [J/OL].Comput Networks，2021，192：108072[2024-09-06].https://doi.org/10.1016/j.comnet.2021.108072.
  16. [16] BILLER S R. The Operational Butterfly Effect: How IoT Data + AI Help Deliver on the Promise of 4IR [C]//2019 IEEE 15th International Conference on Automation Science and Engineering (CASE).Vancouver：IEEE，2019：1-1.
  17. [17] AL-GARADI M A，MOHAMED A M，AL-ALI A K，et al. A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security [J].IEEE Communications Surveys & Tutorials，2018，22（3）：1646-1685.
  18. [18] ABBAS S G，HASHMAT F，SHAH G A. A Multi-layer Industrial-IoT Attack Taxonomy: Layers, Dimensions, Techniques and Application [C]//2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom).Guangzhou：IEEE，2020：1820-1825.
  19. [19] KHAN M A，SALAH K. IoT Security: Review, blockchain Solutions, and Open Challenges [J].Future Generation Computer Systems，2017，82：395-411.
  20. [20] KFOURY E F，SAAB J，YOUNES P，et al. A Self Organizing Map Intrusion Detection System for RPL Protocol Attacks [J].International Journal of Interdisciplinary Telecommunications and Networking，2019，11（1）：30-43.
  21. [21] Yang Yiyu, Zhou Wei, Zhao Shangru, etc A Review of IoT Security Research: Threats, Detection, and Defense [J]. Journal of Communications, 2021, 42 (8): 188-205
  22. [22] Wang Bin Research on Information Security Protection Technology of Industrial Internet of Things [D]. Chengdu: University of Electronic Science and Technology of China, 2018
  23. [23] KAUR K，GARG S，AUJLA G S，et al. Edge Computing in the Industrial Internet of Things Environment: Software-Defined-Networks-Based Edge-Cloud Interplay [J].IEEE Communications Magazine，2018，56（2）：44-51.
  24. [24] DAI X X，XIAO Z，JIANG H B，et al. Task Co-Offloading for D2D-Assisted Mobile Edge Computing in Industrial Internet of Things [J].IEEE Transactions on Industrial Informatics，2023，19：480-490.
  25. [25] MOORE S J，NUGENT C D，ZHANG S，et al. IoT Reliability: A Review Leading to 5 Key Research Directions [J].CCF Transactions on Pervasive Computing and Interaction，2020，2：147-163.
  26. [26] ABBAS S G，HASHMAT F，SHAH G A. A Multi-layer Industrial-IoT Attack Taxonomy: Layers, Dimensions, Techniques and Application [C]//2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom).Guangzhou：IEEE，2020：1820-1825.
  27. [27] KHATTAK H A，SHAH M A，KHAN S，et al. Perception Layer Security in Internet of Things [J].Future Generation Computer Systems，2019，100：144-164.
  28. [28] ESLIM L M，IBRAHIM W M，HASSANEIN H S. GOSSIPY: A Distributed Localization System for Internet of Things Using RFID Technology [C]//2013 IEEE Global Communications Conference (GLOBECOM).Atlanta：IEEE，2013：140-145.
  29. [29] AHMED E，YAQOOB I，GANI A，et al. Internet-of-Things-Based Smart Environments: State of the Art, Taxonomy, and Open Research Challenges [J]. IEEE Wireless Communications，2016，23（5）：10-16.
  30. [30] FERNÁNDEZ-CARAMÉS T M，FRAGA-LAMAS P，SUÁREZ-ALBELA M，et al. Reverse Engineering and Security Evaluation of Commercial Tags for RFID-Based IoT Applications [J/OL]. Sensors （Basel, Switzerland），2016，17（1）：28[2024-09-21].https://doi.org/10.3390/s17010028.
  31. [31] LIN J，YU W，ZHANG N，et al. A Survey on Internet of Things: Architecture, Enabling Technologies, Security and Privacy, and Applications [J].IEEE Internet of Things Journal，2017，4（5）：1125-1142.
  32. [32] HASHEMI S Y，ALIEE F S. Dynamic and Comprehensive Trust Model for IoT and its Integration into RPL [J].The Journal of Supercomputing，2018，75：3555-3584.
  33. [33] PIRAYESH H，ZENG H C. Jamming Attacks and Anti-Jamming Strategies in Wireless Networks: A Comprehensive Survey [J].IEEE Communications Surveys & Tutorials，2021，24（2）：767-809.
  34. [34] SHI Z Y，LIAO K，YIN S P，et al. Design and implementation of the mobile internet of things based on td-scdma network [C]//2010 IEEE International Conference on Information Theory and Information Security.Beijing：IEEE，2010：954-957.
  35. [35] XIE N，LI Z Y，TAN H J. A Survey of Physical-Layer Authentication in Wireless Communications [J].IEEE Communications Surveys & Tutorials，2021，23（1）：282-310.
  36. [36] TRAPPE W. The Challenges Facing Physical Layer Security [J].IEEE Communications Magazine，2015，53（6）：16-20.
  37. [37] REHMAN A，REHMAN S U，RAHEEM H. Sinkhole Attacks in Wireless Sensor Networks: A Survey [J].Wireless Personal Communications，2018，106（4）：2291-2313.
  38. [38] DWIVEDI R K，SHARMA P，KUMAR R. Detection and Prevention Analysis of Wormhole Attack in Wireless Sensor Network [C]//2018 8th International Conference on Cloud Computing, Data Science & Engineering (Confluence).Noida：IEEE，2018：727-732.
  39. [39] LAI G-H. Detection of Wormhole Attacks on IPv6 Mobility-Based Wireless Sensor Network [J].EURASIP Journal on Wireless Communications and Networking，2016，2016：1-11.
  40. [40] GURUNG S，CHAUHAN S. A Novel Approach for Mitigating Route Request Flooding Attack in MANET [J].Wireless Networks，2017，24（8）：2899-2914.
  41. [41] SRINIVAS T A S，MANIVANNAN S S. Prevention of Hello Flood Attack in IoT Using Combination of Deep Learning with Improved Rider Optimization Algorithm [J].Computer Communications，2020，163：162-175.
  42. [42] JAHANGEER A，BAZAI S U，ASLAM S，et al. A Review on the Security of IoT Networks: From Network Layer' s Perspective [J].IEEE Access，2023，11：71073-71087.
  43. [43] ZHANG K，LIANG X H，LU R X，et al. Sybil Attacks and Their Defenses in the Internet of Things [J].IEEE Internet of Things Journal，2014，1（5）：372-383.
  44. [44] NING H S，LIU H，YANG L T. Aggregated-Proof Based Hierarchical Authentication Scheme for the Internet of Things [J].IEEE Transactions on Parallel and Distributed Systems，2015，26（3）：657-667.
  45. [45] EVANGELISTA D，MEZGHANI F，NOGUEIRA M，et al. Evaluation of Sybil Attack Detection Approaches in the Internet of Things Content Dissemination [J]. 2016 Wireless Days (WD).Toulouse：IEEE，2016：1-6.
  46. [46] MISHRA A K，TRIPATHY A K，PUTHAL D，et al. Analytical Model for Sybil Attack Phases in Internet of Things [J].IEEE Internet of Things Journal，2019，6（1）：379-387.
  47. [47] BADR Y，ZHU X Y，ALRAJA M N. Security and Privacy in the Internet of Things: Threats and Challenges [J].Service Oriented Computing and Applications，2021，15：257-271.
  48. [48] LU X F，QU Z W，LI Q，et al. Privacy Information Security Classification for Internet of Things Based on Internet Data [J/OL].International Journal of Distributed Sensor Networks，2015，2015：23[2024-09-06].https://doi.org/10.1155/2015/932941.
  49. [49] HOSSAIN M M，FOTOUHI M，HASAN R. Towards an Analysis of Security Issues, Challenges, and Open Problems in the Internet of Things [C]//2015 IEEE World Congress on Services.New York：IEEE，2015：21-28.
  50. [50] JAHANGEER A，BAZAI S U，ASLAM S，et al. A Review on the Security of IoT Networks: From Network Layer' s Perspective [J].IEEE Access，2023，11：71073-71087.
  51. [51] WINTER T，THUBERT P，BRANDT A，et al. RPL: IPv6 Routing Protocol for Low-Power and Lossy Networks [J].RFC，2012，6550：1-157.
  52. [52] WU D，HU G. Research and Improve on Secure Routing Protocols in Wireless Sensor Networks [C]//2008 4th IEEE International Conference on Circuits and Systems for Communications.Shanghai：IEEE，2008：853-856.
  53. [53] CONTI M，DRAGONI N，LESYK V. A Survey of Man In The Middle Attacks [J]. IEEE Communications Surveys & Tutorials，2016，18：2027-2051.
  54. [54] AL-FUQAHA A，GUIZANI M，MOHAMMADI M S，et al. Internet of Things: A Survey on Enabling Technologies, Protocols, and Applications [J].IEEE Communications Surveys & Tutorials，2015，17（4）：2347-2376.
  55. [55] SANTOS B P，SILVA L A M，CELES C S F S，et al. Internet das Coisas: da Teoria à Prática [EB/OL].[2024-08-30].https://homepages.dcc.ufmg.br/~mmvieira/cc/papers/internet-das-coisas.pdf.
  56. [56] QUINCOZES V E，QUINCOZES S E，KAZIENKO J F，et al. A Survey on IoT Application Layer Protocols, Security Challenges, and the Role of Explainable AI in IoT (XAIoT) [J].International Journal of Information Security，2024，23：1975-2002.
  57. [57] CABRERA C，PALADE A，CLARKE S. An Evaluation of Service Discovery Protocols in the Internet of Things [C]//Proceedings of the Symposium on Applied Computing.Marrakech：ACM，2017：469-476.
  58. [58] DIZDAREVIC J，CARPIO F，JUKAN A，et al. A Survey of Communication Protocols for Internet of Things and Related Challenges of Fog and Cloud Computing Integration [J].ACM Computing Surveys (CSUR)，2018，51（6）：1-29.
  59. [59] NAIK N. Choice of effective messaging protocols for IoT systems: MQTT, CoAP, AMQP and HTTP [C]//2017 IEEE International Systems Engineering Symposium (ISSE).Vienna：IEEE，2017：1-7.
  60. [60] WAHER P. Learning Internet of Things [M].[S.I.]：Packt Publishing，2015.
  61. [61] NEBBIONE G，CALZAROSSA M. Security of IoT Application Layer Protocols: Challenges and Findings [J/OL].Future Internet，2020，12（3）：55[2024-08-30].https://doi.org/10.3390/fi12030055.
  62. [62] QUINCOZES V E，QUINCOZES S E，KAZIENKO J F，et al. A Survey on IoT Application Layer Protocols, Security Challenges, and the Role of Explainable AI in IoT (XAIoT) [J].International Journal of Information Security，2024，23：1975-2002.
  63. [63] THANGAVEL D，MA X P，VALERA A C，et al. Performance Evaluation of MQTT and CoAP Via a Common Middleware [C]//2014 IEEE Ninth International Conference on Intelligent Sensors, Sensor Networks and Information Processing (ISSNIP).Singapore：IEEE，2014：1-6.
  64. [64] COLLINA M，CORAZZA G E，VANELLI CORALLI A. Introducing the QEST Broker: Scaling the IoT by Bridging MQTT and REST [C]//2012 IEEE 23rd International Symposium on Personal，Indoor and Mobile Radio Communications(PIMRC).Sydney：IEEE，2012：36-41.
  65. [65] ABUBAKAR M，JAROUCHEH Z，AL-DUBAI A Y，et al. Blockchain-Based Identity and Authentication Scheme for MQTT Protocol [C]//Proceedings of the 2021 3rd International Conference on Blockchain Technology.Shanghai：ACM，2021：73-81.
  66. [66] RAMPELOTTO JUNIOR C，QUINCOZES S E，KAZIENKO J F. LegitimateBroker: Mitigando Ataques de Personificação em Broker MQTT na Internet das Coisas [C]//Anais do XIX Simpósio Brasileiro de Segurança da Informação e de Sistemas Computacionais (SBSeg 2019).São Paulo：Sociedade Brasileira de Computação，2019：141-154.
  67. [67] SHELBY Z，HARTKE K，BORMANN C. The Constrained Application Protocol (CoAP) [J].RFC，2014，7252：1-112.
  68. [68] TARIQ M A，KHAN M，KHAN M T R，et al. Enhancements and Challenges in CoAP—A Survey [J/OL].Sensors，2020，20：6391[2024-09-03].https://doi.org/10.3390/s20216391.
  69. [69] SEOANE V，GARCÍA-RUBIO C，ALMENÁRES F，et al. Performance Evaluation of CoAP and MQTT with Security Support for IoT Environments [J/OL].Computer Networks，2021，197：108338[2024-09-13].https://doi.org/10.1016/j.comnet.2021.108338.
  70. [70] RAY R，BHALE P，BISWAS S，et al. DAISS: Design of an Attacker Identification Scheme in CoAP Request/Response Spoofing [C]//TENCON 2021-2021 IEEE Region 10 Conference (TENCON).Auckland：IEEE，2021：941-946.
  71. [71] GONG X，FENG T. Lightweight Anonymous Authentication and Key Agreement Protocol Based on CoAP of Internet of Things [J/OL].Sensors，2022，22（19）：7191[2024-08-19].https://doi.org/10.3390/s22197191.

About the authors

Zhou Jianhua (1974-), male, Han ethnicity, born in Jinxian, Jiangxi, is a senior engineer and a doctoral student with a research focus on ship and ocean engineering; Ma Chuan (1979-), male, Han ethnicity, from Zouping, Shandong, is an engineer with a bachelor's degree in Ship and Ocean Engineering; Zhu Yulei (1981-), male, Han ethnicity, from Zhoushan, Zhejiang, is a senior engineer with a bachelor's degree. His research interests include technological innovation and digital transformation in shipbuilding enterprises; Li Xixiang (2000-), male, Han ethnicity, from Xuancheng, Anhui Province, is currently pursuing a master's degree in Control Science and Engineering.