## 3 Methodology
### Framework for SMS and SMIS
#### 3.1.1 Framework for a Newly Personalized Customization Factory
This can be done using techniques like static application security testing (SAST), dynamic application security testing (DAST), manual code reviews, and third-party security assessments. * Authentication and authorization: Robust authentication mechanisms should be implemented to authenticate users and devices and to ensure that only legitimate users can access the features or data. It may include techniques like two-factor authentication, username/password authentication, digital certificates, and role-based access control. * Secure deployment and maintenance practices: Before putting them into production, secure deployment practices should be implemented to ensure that the applications are correctly hardened and configured. The process of regular updating helps to secure from malicious updates. * Application programming interface (API) security: IoT-enabled manufacturing systems depend heavily on APIs for communication between devices and applications. It is vital to secure APIs; the security techniques involved include input validation, rate limiting, and secure API gateways. Device security: Device security is a critical aspect that ensures the system's overall security; it has the following key aspects. * Hardware security: IoT devices must be designed with hardware that enables security features. It may include crypto accelerators, tamper-proofing, secure boot mechanisms, and hardware random number generators. * Device authentication: Before communication starts, to join the network, the devices must authenticate and have unique identities. This may involve certificates or other forms of robust authentication. * Firmware and software integrity: The integrity of device firmware and software must be ensured to avoid unauthorized access or tampering. It may involve secure boot mechanisms, digital signatures, or checksums to validate the authenticity and integrity of firmware updates. Firmware updates must be appropriately signed and encrypted to avoid installing malicious software. * Least privilege principle: Careful considerations are required while using the devices and their applications. These must operate using the least privilege principle, depending on the functions, to prevent the security breach's potential damage. * Anomaly detection: Devices should be monitored regularly to prevent security issues, such as unexpected traffic flow or changes in power usage. The security of IoT-enabled manufacturing systems is necessary due to their interconnectedness and potential vulnerabilities to provide the integrity of industrial operations and ensure the safety of the manufacturing ecosystem. In order to guarantee the security of the reorganized system due to customized operations, the following security measures must be implemented. * Data encryption: The confidential data should be encrypted during transmission to avoid tampering or unauthorized access. * Access control: Role-based access control mechanisms and identity management protocols are introduced to only provide authorized personnel access. By doing so, only authorized personnel can interact with or modify the system. * Regular audits: To identify and tackle vulnerabilities in the system, regular audits are mandatory. * Device authentication: Before communicating within the network, IoT devices must be authenticated to prevent unauthorized devices from intervening. Robust authentication mechanisms are used for this purpose. * Intrusion detection and monitoring: Any unusual or malicious activities within the manufacturing system can be detected by real-time monitoring tools and intrusion detection systems. This will mitigate security issues and promote timely responses. * Security updates and patches: The manufacturing system containing IoT devices and sensors must be regularly updated and securely configured with patches to fix any security loopholes and protect against the latest threats.