# Analysis of Security Issues and Countermeasures for the Industrial Internet of Things
## 3 Security Issues in IIoT Systems
### Security Issues  
As noted earlier, some security issues in IIoT are inherited from IoT. Thus, a few of them can be overlapped for both IIoT and IoT systems [61; 62; 63; 64; 65; 66; 67]. For instance, [PERSON] et al. [68] suggest developing a scalable, robust, and structured (i.e., divided into layers) security infrastructure for the IoT systems. [PERSON] et al. discuss IoT security issues from a distributed IoT architecture point of view. They also enhance the edge intelligence of the devices and collaboration between them to satisfy a common goal [69]. They emphasize edge intelligence, resource-constrained IoT device provision to the services at the edge of the network (e.g., edge computing [70]), and collaboration. In such a case, the devices generate a diverse collaborative resource sharing environment among other devices located  
Figure 3: Outline of various available IIoT architectures based on layers (three-layer [5], four-layer [39], and five-layer [37]).  
in proximity. This is also envisioned for the IIoT discussed in proposal [34]. Both of the proposals address the issues of communication, control, and computation, as well as the potential security issues related to authentication, authorization, and access control. Proposal [71] discusses IoT security requirements looking at logical and technological points of view (includes device interactions, and technological device collaborations), which further advance the necessity of the IoT security requirements discussed in [69; 71].  
These features are significantly relevant for IIoT systems as well.  
[PERSON] et al. [72] present the state of the art security in distributed decentralized IIoT, focused on three core issues, i.e., privacy for humans, the confidentiality of the business process, and third-party dependability, which supports scalability and usability issues. The authors analyze the most recent approaches related to IoT security based on integrity, confidentiality, authentication, privacy, trust, and mobility management.  
Apart from the logical, technological, and architectural points of view, the integration of different IIoT security requirements poses several legal challenges over multiple jurisdictions. Further, the IIoT system must adjust to node failures and avoid a single point of failure for resilience to attacks. For data authentication, the client identity and the object information must be authenticated and then authorized for providing the desired assistance. From an access control point of view, successfully providing the information/resources to the authorized users also brings new security issues of trust. That said, the information/resources must be shared between trusted parties authorized to access the information/resources. Finally, the privacy of a specific user must be secured by the service provider within the system. We consider a wider context of IIoT and examine potential security issues that may come from communication, devices, networking, users, applications, and services. That said, we consider the broad range of areas, including CPS, Industry 4.0, and IoT. In Figure 5, we illustrate the core security issues of an IIoT system [39]. Note that these are security issues common for general IoT systems; however, in the case of an IIoT system, its scale and nature of adversary are different. Based on these core security issues, we list a number of potential security concerns as follows:  
Figure 4: An illustration of a smart healthcare application scenario used in our paper.