A Common Framework for IIoT Security

The vulnerability of Internet-enabled endpoints in the Industrial Internet of Things (IIoT) is a critical security concern. The rapid proliferation of these connected devices, which include sensors, PLCs, embedded systems, mobile devices, industrial and desktop computers, cloud systems and virtual machines, promises unprecedented growth and performance gains in industrial systems and processes.  However, the connected devices also make attractive targets for all types of malicious threats that can ultimately cause significant harm to businesses and industrial processes.

A typical IIoT system is a complex assembly of components. The trustworthiness of the system depends upon trust in all of the system elements, how these elements are integrated and how they interact with each other. Trustworthy systems and endpoints must meet key characteristics and architectural standards of security, safety, reliability, resilience, and privacy. Roots of trust provide confidence in the endpoint identity while integrity protection ensures the endpoint is in the proper configuration required to perform its functions predictably.

In the past year, thirty-two members of the Industrial Internet Consortium’s (IIC’s) security working group have worked tirelessly towards creating a common framework to address the many security issues inherent in the IIoT, including endpoint security. Their expertise, best practices and guidelines are embodied in the Industrial Internet Security Framework (IISF) document that will be presented by IIC member security experts at a special event on Thursday, October 6, 2016.

The public Industrial Internet Security Forum, hosted by IIC and RTI, will feature many of the key contributors to the IISF in a series of in-depth presentations, security case studies, interactive panels and demonstrations. It will be a great opportunity for executives and business managers to gain a greater understanding of the risk assessments, threat metrics, and performance indicators that will help them protect their organizations and processes.

The Forum is open to the public and will be held at the RTI headquarters in Sunnyvale, CA. You can see the full agenda and register here.