# Analysis of Security Issues and Countermeasures for the Industrial Internet of Things
### Problem Statement and Motivation  
There are several interpretations to define an IIoT system. For example, according to [18], it is combined with _\"machines, computers and people enabling intelligent industrial operations using advanced data analytics for transformational business outcomes\"_. According to [5], IIoT _\"covers the domains of machine-to-machine (M2M) and industrial communication technologies with automation applications\"_. The optimization of IIoT can be seen as a transformation rather than an evolutionary technological progression for both conventional and non-conventional fields of application. From a logical point of view, IIoT can be seen as a collaborative and interconnected system with the help of smart devices/machines to share a common objective as Industry 4.0 and CPSs. From a technological point of view, IIoT combines and adopts various architectures, communication and networking technologies, processing methodologies, and design concepts to fulfill a common goal based on their target. That said, the IIoT uses a broad range of communication platforms, which integrates a broad range of technologies, including sensing, networking, service-oriented architecture (SOA), or even intelligent information processing technologies that deal with complex system information and its uncertainty [19; 20]. In Figure 2, we illustrate the basic concept of an IIoT infrastructure. The benefits of IIoT are promising, for example, for reducing human errors, lowering the need for manual labor, cost-effectiveness, etc. In addition, it indicates the significant improvement towards the automation that IIoT brings to industry, and at the same time provides affordability and flexibility in applications for end-users [21]. However, there are numerous security issues that must be addressed to provide a flexible, scalable, and trustworthy IIoT environment to both the client and users [22]. Recent attacks on IIoT elevate a significant security concern for industry [23; 24; 25; 26; 27]. These attacks can cause a large amount of business failure/damage and also sometimes may bring about life-threatening situations. Among others, data security is one of the core issues in an IIoT system (along with the Industry 4.0 infrastructure). Typically, the nature (e.g., resource-constrained) and the properties (e.g., heterogeneity, mobility) of an IIoT system make it difficult where the traditional heavy-weight security architectures cannot be applied directly to address such issues. Instead, they require additional mechanisms and frameworks that can capture the particular requirements of an IIoT system. That said, there is a need for a seamless data exchange platform across companies that allow for efficient data acquisition and collection, transfer, and analysis of various data sources, for example, in a supply chain network [28]. Thus, in addition to the technical considerations, organizational aspects, e.g., cross-company information sharing and collaboration (through data exchange and data transparency), are highly demanding. As IIoT is an interconnected network of multiple platforms, networks, services, and applications, a potential vulnerability in one part of the system can make an impact on the overall performance of the system to a greater extent [29]. For instance, in 2021, a Canadian manufacturer of business jets called Bombardier was compromised by a cyber attack. The attackers entered into the network and tried to steal sensitive information associated with employees, customers, and suppliers [30]. In 2021, Harris Federation, a multi-academy trust based in London was compromised by a cyber attack. The attackers disabled the devices and email systems for academics for a short period of time [31]. In 2017, WannaCry ransomware attacks disrupted the services of several manufacturers and spread rapidly across many computer networks to collapse the interconnected systems.