Cybersecurity for Industry 4.0 in the current literature: A reference framework
Open accessAbstract
Abstract The cybersecurity issues represent a complex challenge for all companies committing to Industry 4.0 paradigm. On the other hand, the characterization of cybersecurity concept within Industry 4.0 contexts proved to be an emerging and relevant topic in the recent literature. The paper proposes to analyse, through a systematic literature review approach, the way in which the existing state of art deals with the cybersecurity issues in Industry 4.0 contexts. In particular, the focus will be on the investigation of the main elements associated with cybersecurity theme (i.e. asset involved into cyber-attacks, system vulnerabilities, cyber threats, risks and countermeasures) within those industrial contexts where physical systems (machines, shop floors, plants) are connected each other via the Internet. Four areas of analysis are defined: definitions of cybersecurity and Industry 4.0 concepts, the industrial focus of the analysed studies, the cybersecurity characterization and the management attempts of cybersecurity issues. Through the literature review analysis, a framework of the main features characterizing each area is discussed, providing interesting evidences for future research and applications.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
According to [10], a three-level approach can be used to guarantee the security of industrial control systems: perimeter hardening, multi-layer defense, and isolation of remote users in a separated zone/network.
“According to [10], the following three-level approach can be used to guarantee the security of industrial control systems:”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
Among the reasons companies are not ready are the lack of accurate reference standards and the lack of managerial and technical skills to understand and implement them.
“Among the given reasons there is the lack of accurate reference standards, and the lack of managerial and technical skills to understand and implement them.”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
There is no isolation between the different networks in factories.
“No isolation between the different networks.”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
Multiple pathways for intrusion exist, such as laptops carried in and out and USB sticks.
“Multiple pathways for intrusion (laptops carried in and out, USB sticks, etc.);”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
In factories, devices run for weeks or months without security updates or antivirus deployment.
“In factories, the devices run for weeks or months without any security updates or antivirus deployment;”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
In the industrial sector, manufacturing is the most targeted by security attacks, and the number of threats increases every year.
“In the industrial sector, manufacturing is the most targeted by security attacks, and the number of threats increases every year [10].”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
Only 16% of companies are ready to face cybersecurity challenges.
“However, other surveys show that only 16% of companies are ready to face cybersecurity challenges [10].”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
The National Institute of Standards and Technology (NIST) recommended that companies undertake a vulnerability assessment, a process to identify and assess potential vulnerabilities of systems.
“As mentioned in [10], the National Institute of Standards and Technology (NIST) recommended companies undertake a vulnerability assessment which is a process to identify and assess potential vulnerabilities of systems.”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
A general view of cybersecurity guidelines found in the literature was proposed by [10], presented in four axes: support for connected products, define a security approach, fix set of actions guaranteeing information security, and define/respect a specific policy when implementing new industrial security services.
“A general view of cybersecurity guidelines found in the literature was proposed by [10], and presented in four axes:”
From A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0 (2021) · cites this paper as [10]
Cites
Bell, E., Bryman, A., & Harley, B. (2022) · Oxford University Press eBooks · doi:10.1093/hebz/9780198869443.001.0001 · Cited by 10,965 · see citing works
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377 · see citing works
Mishra, P. (2015) · Cited by 1,245 · see citing works
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · see citing works
Blockchain technology innovations
Ahram, T., Sargolzaei, A., Sargolzaei, S., Daniels, J., & Amaba, B. (2017) · IEEE Technology & Engineering Management Conference (TEMSCON) · doi:10.1109/temscon.2017.7998367 · Cited by 612 · see citing works
Cyber physical systems security: analysis, challenges and solutions
Ashibani, Y., & Mahmoud, Q. H. (2017) · Computers & Security · doi:10.1016/j.cose.2017.04.005 · Cited by 447 · see citing works
IEEE Congress on Evolutionary Computation
(2006) · IEEE Transactions on Evolutionary Computation · doi:10.1109/tevc.2006.888276 · Cited by 360 · see citing works
The Vision of “Industrie 4.0” in the Making—a Case of Future Told, Tamed, and Traded
Pfeiffer, S. (2017) · NanoEthics · doi:10.1007/s11569-016-0280-3 · Cited by 328 · see citing works
Continuous maintenance and the future – Foundations and technological challenges
Roy, R., Stark, R., Tracht, K., Takata, S., & Mori, M. (2016) · CIRP Annals · doi:10.1016/j.cirp.2016.06.006 · Cited by 309 · see citing works
Security for the Robot Operating System
Dieber, B., Breiling, B., Taurer, S., Kacianka, S., Raß, S., & Schartner, P. (2017) · Robotics and Autonomous Systems · doi:10.1016/j.robot.2017.09.017 · Cited by 176 · see citing works
Security framework for industrial collaborative robotic cyber-physical systems
Khalid, A., Kirisci, P. T., Khan, Z. H., Ghrairi, Z., Thoben, K., & Pannek, J. (2018) · Computers in Industry · doi:10.1016/j.compind.2018.02.009 · Cited by 163 · see citing works
He, H., Maple, C. R., Watson, T., Tiwari, A., Mehnen, J., Jin, Y., & Gabryś, B. (2016) · IEEE Congress on Evolutionary Computation (CEC) · doi:10.1109/cec.2016.7743900 · Cited by 120 · see citing works
Flatt, H., Schriegel, S., Jasperneite, J., Trsek, H., & Adamczyk, H. (2016) · IEEE International Conference on Emerging Technologies and Factory Automation (ETFA) · doi:10.1109/etfa.2016.7733634 · Cited by 101 · see citing works
Lightweight Searchable Public-Key Encryption for Cloud-Assisted Wireless Sensor Networks
Xu, P., He, S., Wang, W., Susilo, W., & Jin, H. (2017) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2017.2784395 · Cited by 92 · see citing works
Cyber-security of SCADA and Other Industrial Control Systems
Kott, A., & Colbert, E. J. M. (2016) · Advances in information security · doi:10.1007/978-3-319-32125-7 · Cited by 85 · see citing works
Avoiding the Internet of Insecure Industrial Things
Urquhart, L. D., & McAuley, D. (2018) · Computer Law and Security Review · doi:10.1016/j.clsr.2017.12.004 · Cited by 85 · see citing works
On Servitization of the Manufacturing Industry in the UK
Huxtable, J., & Schaefer, D. (2016) · Procedia CIRP · doi:10.1016/j.procir.2016.07.042 · Cited by 78 · see citing works
Survey on artificial intelligence for additive manufacturing
Yang, J., Chen, Y., Huang, W., & Li, Y. (2017) · 2017 23rd International Conference on Automation and Computing (ICAC) · doi:10.23919/iconac.2017.8082053 · Cited by 73 · see citing works
Towards effective security control assignment in the Industrial Internet of Things
Hassanzadeh, A., Modi, S. K., & Mulchandani, S. (2015) · IEEE World Forum on Internet of Things (WF-IoT) · doi:10.1109/wf-iot.2015.7389155 · Cited by 72 · see citing works
A review on the readiness level and cyber-security challenges in Industry 4.0
Benias, N., & Markopoulos, A. P. (2017) · doi:10.23919/seeda-cecnsm.2017.8088234 · Cited by 66 · see citing works
Cyber Physical Security for Industrial Control Systems and IoT
Kobara, K. (2016) · IEICE Transactions on Information and Systems · doi:10.1587/transinf.2015ici0001 · Cited by 60 · see citing works
Overview of cyber-security of industrial control system
Fan, X., Fan, K., Wang, Y., & Zhou, R. (2015) · International Conference on Security of Smart Cities, Industrial Control System and Communications (SSIC) · doi:10.1109/ssic.2015.7245324 · Cited by 55 · see citing works
Securing the Industrial-Tactile Internet of Things With Deterministic Silicon Photonics Switches
Szymanski, T. H. (2016) · IEEE Access · doi:10.1109/access.2016.2613512 · Cited by 53 · see citing works
Design and implementation of cybersecurity testbed for industrial IoT systems
Lee, S., Lee, S.-J., Yoo, H., et al. (2017) · The Journal of Supercomputing · doi:10.1007/s11227-017-2219-z · Cited by 52 · see citing works
Trustworthy data-driven networked production for customer-centric plants
Preuveneers, D., Joosen, W., & Ilie‐Zudor, E. (2017) · Industrial Management & Data Systems · doi:10.1108/imds-10-2016-0419 · Cited by 46 · see citing works
Mitigating risks of digitalization through managed industrial security services
Jansen, C., & Jeschke, S. (2018) · AI & Society · doi:10.1007/s00146-018-0812-1 · Cited by 38 · see citing works
Secure Communication and Data Processing Challenges in the Industrial Internet
Gurtov, A., Liyanage, M., & Korzun, D. (2016) · Baltic Journal of Modern Computing · doi:10.22364/bjmc.2016.4.4.28 · Cited by 34 · see citing works
Cyberphysical Security for Industrial Control Systems Based on Wireless Sensor Networks
Lu, T., Guo, X., Li, Y., Peng, Y., Zhang, X., Xie, F., & Gao, Y. (2014) · International Journal of Distributed Sensor Networks · doi:10.1155/2014/438350 · Cited by 31 · see citing works
A cost estimation approach for IoT modular architectures implementation in legacy systems
Tedeschi, S., Rodrigues, D., Emmanouilidis, C., et al. (2018) · Procedia Manufacturing · doi:10.1016/j.promfg.2018.01.015 · Cited by 30 · see citing works
Leveraging SDN to improve security in industrial networks
Cheminod, M., Durante, L., Seno, L., Valenza, F., Valenzano, A., & Zunino, C. (2017) · IEEE International Workshop on Factory Communication Systems (WFCS) · doi:10.1109/wfcs.2017.7991960 · Cited by 28 · see citing works
Protecting Industry 4.0 Systems Against the Malicious Effects of Cyber-Physical Attacks
Bordel, B., Alcarria, R., Sánchez-de-Rivera, D., et al. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-67585-5_17 · Cited by 24 · see citing works
Security challenges in SCADA systems over Wireless Sensor and Actuator Networks
Januário, F., Carvalho, C., Cardoso, A., & Gil, P. S. (2016) · International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT) · doi:10.1109/icumt.2016.7765386 · Cited by 22 · see citing works
Babiceanu, R. F., & Seker, R. (2017) · Studies in computational intelligence · doi:10.1007/978-3-319-51100-9_15 · Cited by 22 · see citing works
Components of Industrial Control Systems
Sullivan, D. J., Luiijf, H. A. M., & Colbert, E. J. M. (2016) · Advances in information security · doi:10.1007/978-3-319-32125-7_2 · Cited by 16 · see citing works
Smart Behavioural Filter for Industrial Internet of Things
Corbò, G., Foglietta, C., Palazzo, C., & Panzieri, S. (2017) · Mobile Networks and Applications · doi:10.1007/s11036-017-0882-1 · Cited by 15 · see citing works
Palavicini, G., Bryan, J. A., Sheets, E., et al. (2017) · International Conference on Internet of Things, Big Data and Security (IoTBDS) · doi:10.5220/0006393704700477 · Cited by 15 · see citing works
(2018) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-99229-7 · Cited by 15 · see citing works
Software Updates in Safety and Security Co-engineering
Mugarza, I., Parra, J., & Jacob, E. (2017) · Lecture notes in computer science · doi:10.1007/978-3-319-66284-8_17 · Cited by 14 · see citing works
Preuveneers, D., Joosen, W., & Ilie‐Zudor, E. (2017) · Symposium on Applied Computing · doi:10.1145/3019612.3019861 · Cited by 13 · see citing works
van Lier, B. (2017) · International Conference on System Theory, Control and Computing (ICSTCC) · doi:10.1109/icstcc.2017.8107108 · Cited by 13 · see citing works
Stabilizing the Industrial System: Managed Security Services’ Contribution to Cyber-Peace
Jansen, C. (2017) · IFAC-PapersOnLine · doi:10.1016/j.ifacol.2017.08.786 · Cited by 11 · see citing works
Cyber security concept for Internet of Everything (IoE)
Melnik, S., Nikolay, S., & Sergey, E. (2017) · 2018Systems of Signal Synchronization, Generating and Processing in Telecommunications (SYNCHROINFO) · doi:10.1109/sinkhroinfo.2017.7997540 · Cited by 10 · see citing works
Industrial RFID sensing networks for critical infrastructure security
Occhiuzzi, C., Amendola, S., Manzari, S., et al. (2016) · European Microwave Conference (EuMC) · doi:10.1109/eumc.2016.7824598 · Cited by 5 · see citing works
Cyber security primer for legacy process plant operation
Sandberg, C., & Hunter, B. (2017) · Record of conference papers/Record of conference papers - Petroleum and Chemical Industry Conference · doi:10.1109/pcicon.2017.8188728 · Cited by 3 · see citing works
Cybersecurity Implications of the Industrial Internet of ThingsPreprint
Urquhart, L., & McAuley, D. (2017) · SSRN Electronic Journal · Cited by 2 · see citing works
Chaturvedi, R. (2017) · Annual Conference of the Society of Instrument and Control Engineers of Japan (SICE) · doi:10.23919/sice.2017.8105618 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Tange, K., De Donno, M., Fafoutis, X., & Dragoni, N. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.3011208 · Cited by 410 · see citing works
“To the best of our knowledge, the most recent works focused on reviewing IIoT security are [14] and [15].”
BackgroundCorallo, A., Lazoi, M., & Lezzi, M. (2020) · Computers in Industry · doi:10.1016/j.compind.2019.103165 · Cited by 298 · see citing works
Self-citationCorallo, A., Lazoi, M., Lezzi, M., & Luperto, A. (2022) · Computers in Industry · doi:10.1016/j.compind.2022.103614 · Cited by 238 · see citing works
Self-citationSupply Chain 4.0: A Survey of Cyber Security Challenges, Solutions and Future Directions
Sobb, T., Turnbull, B., & Moustafa, N. (2020) · Electronics · doi:10.3390/electronics9111864 · Cited by 189 · see citing works
Addressing Industry 4.0 Cybersecurity Challenges
Culot, G., Fattori, F., Podrecca, M., & Sartor, M. (2019) · IEEE Engineering Management Review · doi:10.1109/emr.2019.2927559 · Cited by 184 · see citing works
A Review of Cybersecurity Guidelines for Manufacturing Factories in Industry 4.0
Mullet, V., Sondi, P., & Ramat, E. (2021) · IEEE Access · doi:10.1109/access.2021.3056650 · Cited by 161 · see citing works
“As an example, a manufacturing line can be considered a CPS [10].”
BackgroundMethodInfluentialUnsupervised Learning Approach for Anomaly Detection in Industrial Control Systems
Choi, W.-H., & Kim, J. (2024) · Applied System Innovation · doi:10.3390/asi7020018 · Cited by 74 · see citing works
Zero-Trust Model for Smart Manufacturing Industry
Paul, B., & Rao, M. (2022) · Applied Sciences · doi:10.3390/app13010221 · Cited by 53 · see citing works
Marian, M., Cusman, A., Stinga, F., Ionica, D., & Popescu, D. (2020) · IEEE Access · doi:10.1109/access.2020.3019112 · Cited by 18 · see citing works
Industrial IoT: Challenges and Mitigation Policies
Kumar, P., Singh, A., & Sengupta, A. (2021) · Lecture Notes on Data Engineering and Communications Technologies · doi:10.1007/978-981-16-0965-7_13 · Cited by 1 · see citing works
- Authors
- Lezzi, M., Lazoi, M., & Corallo, A.
- Affiliations
- University of Salento (IT)
- Corresponding author
- Lezzi, Marianna
- Venue
- Computers in Industry
- Publisher
- Elsevier BV
- Published
- 2018-12
- Volume
- 103
- Pages
- 97-110
- ISSN
- 0166-3615 (ISSN-L)
- OpenAlex
- W2895400994
- Semantic Scholar
- f062f3c00b9f602a7c6395ec82fb95c5a5d92500
- Cited by
- 404
- References
- 49
- Citations by year
- 2026: 26 · 2025: 35 · 2024: 59 · 2023: 68 · 2022: 95 · 2021: 63 · 2020: 41 · 2019: 17
- FWCI
- 48.73
- Type
- journal article
- Language
- en
- Open access
- green
- hdl.handle.net
- Licence
- Locations
- Computers in Industry (publishedVersion)
- AIRUS (submittedVersion, cc-by-nc-nd)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Engineering › Industrial and Manufacturing Engineering › Digital Transformation in Industry
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- cybersecurity, Industry 4.0, reference framework, cyberattacks, system vulnerabilities, cyber threats, risk management, countermeasures, Industrial Internet of Things, cybersecurity management
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
