The DOI matches its Crossref record; 3 of the 3 references it cites were found in a registry or an index.
Integrating redundancy, diversity, and hardening to improve security of industrial internet of things
Abstract
As the Industrial Internet of Things (IIoT) becomes more ubiquitous in critical application domains, such as smart water-distribution and transportation systems, providing security and resilience against cyber-attacks grows into an issue of utmost importance. Cyber-attacks against critical infrastructure pose significant threats to public health and safety. To alleviate the severity of these threats, various security techniques are available, including redundancy, diversity, and hardening. However, no single technique can address the whole spectrum of cyber-attacks that may be launched by a determined and resourceful attacker. In light of this, we consider a multi-pronged approach that integrates redundancy (deploying additional components and devices), diversity (using multiple implementation variants), and hardening (reinforcing individual components) techniques for designing secure and resilient IIoT systems. We introduce a framework for quantifying cyber-security risks and optimizing IIoT design. We show that finding optimal designs is an NP-hard problem, and then present an efficient meta-heuristic algorithm that finds near optimal designs in practice. To demonstrate the applicability of our framework, we present two case studies in water-distribution and transportation systems. Our numerical evaluation shows that integrating redundancy, diversity, and hardening can lead to reduced security risks at the same cost.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“However, the main focus of the paper is on the efficiency of security investments and not on the design and problems of creating an all-encompassing hardening framework.”
From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as Laszka et al. [107]
In the citing paper
“They propose a framework that, among other things, discusses the hardening process from the point of view of cost-efficiency. They mention the need for multiple layers of defense.”
From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as Laszka et al. [107]
Citations
Cites
Cyber-Physical Systems Security—A Survey
Humayed, A., Lin, J., Li, F., & Luo, B. (2017) · IEEE Internet of Things Journal · doi:10.1109/jiot.2017.2703172 · Cited by 1,185 · cited 1×
“Securing large-scale IIoT systems against cyber- and cyber-physical attacks is a complicated task since these systems often face a variety of threats, have large attack surfaces, comprise heterogeneous components, may contain a number of undiscovered vulnerabilities, and have constrained resources [1,2,5,6].”
BackgroundA review of cyber security risk assessment methods for SCADA systems
Cherdantseva, Y., Burnap, P., Blyth, A., Eden, P., Jones, K., Soulsby, H., & Stoddart, K. (2016) · Computers & Security · doi:10.1016/j.cose.2015.09.009 · Cited by 606 · cited 2×
“transactive energy systems [17]); we refer the reader to [18] for CYBER-PHYSICAL SYSTEMS 7”
BackgroundReview of security issues in industrial networks
Cheminod, M., Durante, L., & Valenzano, A. (2013) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2012.2198666 · Cited by 349 · cited 2×
“Conventional cybersecurity mechanisms are inadequate and thus need to be expanded to incorporate the complexity and physical aspects of such systems [1,5,34].”
Background
Research works printed but not linked: 72
- 10.1109/JIOT.2017.2707465 · DOI
- 10.1109/JIOT.2017.2749883 · DOI
- 10.1109/JIOT.2017.2755620 · DOI
- 10.1109/MSP.2009.24 · DOI
- 10.1201/1086/44797.13.5.20041101/84907.5 · DOI
- 10.1109/TNSM.2004.4623689 · DOI
- 10.1109/MSP.2005.23 · DOI
- 10.1126/science.1130992 · DOI
- 10.1145/581271.581274 · DOI
- 10.1109/TIFS.2016.2516916 · DOI
- Hoo KJS, 2000, How much is enough? a risk management approach to computer security
- 10.1109/JSAC.2013.130413 · DOI
- 10.1061/(ASCE)WR.1943-5452.0000749 · DOI · Paper page
- Slay J, 2008, Critical infrastructure protection, 73
- 10.1016/0191-2615(94)90002-7 · DOI
- 10.1061/(ASCE)WR.1943-5452.0000352 · DOI
- 10.1109/TMC.2013.66 · DOI
- 10.1287/trsc.34.1.37.12281 · DOI
- 10.1016/0191-2615(94)00022-R · DOI
- 10.1109/JPROC.2006.887325 · DOI
- 10.1109/MIE.2017.2648857 · DOI
- 10.1109/JPROC.2017.2731741 · DOI
- 10.1109/JIOT.2017.2767291 · DOI
- 10.1109/JIOT.2017.2787962 · DOI
- 10.1109/JPROC.2005.849714 · DOI · Paper page
- 10.1002/sec.698 · DOI
- 10.1109/TII.2014.2300753 · DOI · Paper page
- Meltzer D, 2015, Inf Syst Secur Assoc J, 24
- 10.1016/j.mfglet.2014.12.001 · DOI · Paper page
- 10.1007/s11276-014-0761-7 · DOI
- 10.1016/j.cose.2008.04.003 · DOI
- 10.1109/MSP.2013.137 · DOI
- Kartakis S Next generation cyber-physical water distribution systems [dissertation]. Imperial College London; 2016.
- 10.1109/JSEN.2014.2336240 · DOI
- 10.3390/s150407172 · DOI
- 10.1002/j.1551-8833.2008.tb08131.x · DOI
- 10.1016/j.watres.2010.08.049 · DOI
- 10.1109/MCS.2014.2320336 · DOI
- 10.1016/j.automatica.2016.06.005 · DOI
- 10.1109/MNET.2011.5687953 · DOI
- Torbol M, Kim S, Chou P Remote structural health monitoring systems for next generation SCADA. Smart Structures and Systems. 2013;11. · DOI
- 10.1109/TCST.2012.2211873 · DOI
- Antonioli D, Bernieri G, Tippenhauer NO Taking control: design and implementation of botnets for cyber-physical attacks with CPSBot. arXiv preprint arXiv:180200152. 2018.
- Ghanavati M, 2017, IEEE Trans Control Network Syst
- 10.1016/j.trb.2016.05.017 · DOI
- Grad S, 2009, Engineers who hacked into LA traffic signal computer, jamming streets, sentenced
- 10.3141/2619-06 · DOI
- 10.1109/SURV.2011.122111.00145 · DOI
- 10.1109/MSP.2009.76 · DOI
- 10.1109/TPWRD.2010.2046654 · DOI
- 10.1016/j.future.2011.04.014 · DOI
- 10.1016/j.rser.2015.12.114 · DOI
- 10.1016/j.comnet.2011.07.010 · DOI
- 10.1109/TSG.2011.2159818 · DOI
- 10.1109/TPDS.2014.2321378 · DOI
- 10.1016/j.future.2015.09.021 · DOI
- 10.1016/j.comnet.2012.12.017 · DOI
- 10.1109/MSP.2010.49 · DOI
- 10.1109/SURV.2011.101911.00087 · DOI
- 10.1109/JPROC.2011.2161428 · DOI
- 10.1109/JPROC.2011.2165269 · DOI
- Yang Q, 2017, IEEE Trans Inf Forensics Secur, 12, 1735
- 10.1109/TSG.2016.2610582 · DOI
- 10.1109/TSG.2011.2159819 · DOI
- Thale SS, 2015, IEEE Trans Sustain Energy, 51, 1805
- 10.1109/JPROC.2017.2691357 · DOI
- 10.1109/MPE.2015.2397334 · DOI · Paper page
- 10.1109/JPROC.2017.2679040 · DOI · Paper page
- 10.1109/TSG.2010.2044898 · DOI
- 10.1109/TIFS.2016.2607701 · DOI
- 10.1109/TNNLS.2018.2885530 · DOI
- Lillicrap TP, Hunt JJ, Pritzel A, et al. Continuous control with deep reinforcement learning. arXiv preprint arXiv:150902971. 2015.
Cited by
Mapping of Industrial IoT to IEC 62443 Standards
Cindrić, I., Jurčević, M., & Hadjina, T. (2025) · Sensors · doi:10.3390/s25030728 · Cited by 29
Metadata
- Authors
- Laszka, A., Abbas, W., Vorobeychik, Y., & Koutsoukos, X.
- Affiliations
- Department of Computer Science, University of Houston, Houston, TX, USA
- Information Technology University (PK)
- Washington University in St. Louis (US)
- Vanderbilt University (US)
- Venue
- Cyber-Physical Systems
- Publisher
- Informa UK Limited
- Published
- 2019-06-10
- Volume
- 6
- Issue
- 1
- Pages
- 1-32
- ISSN
- 2333-5777 (ISSN-L)
- 2333-5785
- OpenAlex
- W2951840990
- Cited by
- 22
- References
- 3
- Citations by year
- 2026: 4 · 2025: 8 · 2024: 2 · 2022: 3 · 2021: 4 · 2020: 1
- FWCI
- 2.49
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Cyber-Physical Systems (publishedVersion)
- Funders
- Air Force Research Laboratory (FA-8750-14-2-0180)
- National Institute of Standards and Technology (70NANB18H198)
- National Science Foundation (IIS-1905558, CNS-1238959)
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Engineering › Civil and Structural Engineering › Infrastructure Resilience and Vulnerability Analysis
- Keywords
- Industrial Internet of Things, cybersecurity, redundancy, diversity, hardening, critical infrastructure resilience, NP-hardness, metaheuristic optimization, water distribution systems, transport systems
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Integrating redundancy, diversity, and hardening to improve security of industrial internet of things. https://app.cochat.ai/papers/10.1080/23335777.2019.1624620
- The paper
- Laszka, A., Abbas, W., Vorobeychik, Y., & Koutsoukos, X. (2020). Integrating redundancy, diversity, and hardening to improve security of industrial internet of things. Cyber-Physical Systems. https://doi.org/10.1080/23335777.2019.1624620