CoChat
Sign Up
Cited by 13Information and Cyber SecurityNetwork Security and Intrusion DetectionIoT and Edge/Fog Computing

Asset Management Method of Industrial IoT Systems for Cyber-Security Countermeasures

Open access
Matsumoto, Noritaka, Fujita, Junya, Endoh, Hiromichi, Yamada, Tsutomu, Sawada, Kenji, Kaneko, Osamu·2021·Information
DOI 10.3390/info12110460
Open this paper in CoChat — free accountOpen PDF

Abstract

Cyber-security countermeasures are important for IIoT (industrial Internet of things) systems in which IT (information technology) and OT (operational technology) are integrated. The appropriate asset management is the key to creating strong security systems to protect from various cyber threats. However, the timely and coherent asset management methods used for conventional IT systems are difficult to be implemented for IIoT systems. This is because these systems are composed of various network protocols, various devices, and open technologies. Besides, it is necessary to guarantee reliable and real-time control and save CPU and memory usage for legacy OT devices. In this study, therefore, (1) we model various asset configurations for IIoT systems and design a data structure based on SCAP (Security Content Automation Protocol). (2) We design the functions to automatically acquire the detailed information from edge devices by “asset configuration management agent”, which ensures a low processing load. (3) We implement the proposed asset management system to real edge devices and evaluate the functions. Our contribution is to automate the asset management method that is valid for the cyber security countermeasures in the IIoT systems.

AI snapshot

Written from the paper’s full text.

TL;DR

The paper proposes an agent-based asset configuration management method for IIoT systems, using SysML modeling and an SCAP/CPE-compatible data structure to collect security-relevant asset information. A prototype agent on real Linux-based IIoT devices collected software version and system password information while staying within CPU and memory targets intended not to disturb real-time control.

Key findings

  • The proposed asset configuration management agent satisfied the set performance targets for CPU load factor and memory occupancy on all target IIoT devices, with targets of no more than 1% increase.
  • In password checking, processing continued with an average CPU load close to a maximum of about 0.5%, attributed to password hashing.
  • Password-checking execution times were 170 s for the PLC, about 132 s for the IoT gateway, and about 77 s for the IoT device; the authors argue minute-order execution is practical because password changes are infrequent.
  • PLCs had slower execution times due to inferior CPU performance, but their CPU load factors in password checking were still lower, which the authors attribute to real-time patches distributing processing load more precisely.

Methods

  • The authors modeled IIoT asset configurations with SysML block definition diagrams based on the ANSI/ISA95 reference model, focusing on OT Levels 2, 1, and 0, and specified an asset data structure compatible with SCAP/CPE plus extended device and network information.
  • They designed an asset configuration management agent to collect software version information and system password information with low overhead, using lowest-priority execution, `nanosleep`-based subprocess splitting, and minimal data buffers; Node-RED was proposed for designing device/network-specific processing algorithms.
  • Evaluation implemented the prototype on three Linux-based IIoT devices: a PLC (ARM Cortex-A9, 866 MHz, 256 MiB, Linux 3.18.16-rt13), an IoT gateway (ARM Cortex-A7, 1.0 GHz, 512 MiB, Linux 4.9), and a Raspberry Pi 3 IoT device (ARM Cortex-A53, 1.4 GHz, 1 GiB, Raspbian 9); CPU load and memory occupancy were measured at 10 ms intervals via the `/proc` filesystem.

Limitations

  • Stated: support for other operating systems is left as future work; the authors believe the design method can apply to devices running any OS.
  • Stated: future work includes automating actual security measures such as software updates and hardening, and implementing secure coding/communication encryption so the agent itself does not become a security hole.
  • Evident from the text: the evaluation covers only three Linux-based devices and only two collection functions (software version and system password), so broader device/OS and function coverage is not demonstrated.

Model-written summary. Check it against the paper before relying on it.

Integrity signals

Registry

Crossref · 10.3390/info12110460

Cites

17 of 17 references verified0 citation errors · 0 not checkable

Statistics

Nothing to recompute.

Claims the paper makes

0 of 11 cited sources checked · 0 supported · 0 flagged

  • Findingown data

    The basic configuration of all surveyed control systems follows the ANSI/ISA95 reference model.

    “During our survey, we noticed that, although there are differences in the detailed configuration of all the control systems, their basic configuration follows the reference model defined in ANSI/ISA95 [18] (Figure 1).”
    Quote in the paperNot a substantial claim0 of 1 sources checked
    • cites [18] (2021, August 30). ANSI/ISA-95.00.01-2010 Enterprise-Control System Integration—Part 1: Models and Terminology. Available online: https://www.isa.org/products/ansi-isa-95-00-01-2010-iec-62264-1-mod-enterprise.

      Not checked in the free run.

  • Findingnone given

    The proposed asset configuration management agent can collect software version information and system password information with low processing overhead.

    “As described above, this paper proposes and evaluates an asset configuration management agent that can collect software version information and system password information with a low processing overhead.”
    Quote in the paperNot a substantial claim
  • Findingnone given

    The prototype asset configuration management agent can execute its functional processing without disturbing real-time control.

    “We have developed and evaluated the prototype of an asset configuration management agent that can execute its functional processing without disturbing real-time control.”
    Quote in the paperSubstantial claim
  • Findingreasoning

    Because the processing was divided to reduce the CPU load factor, the password checking execution time exceeded one minute.

    “Since the processing was divided to reduce the CPU load factor, the execution time exceeded one minute.”
    Quote in the paperNot a substantial claim
  • Findingreasoning

    In the password checking process, the processing continues with an average processing load close to a maximum CPU load factor of about 0.5%.

    “In the password checking process, the processing continues with an average processing load close to the maximum CPU load factor of about 0.5%.”
    Quote in the paperSubstantial claim
  • May combine two claims. 15
  • Classified as probably not a substantial claim. 24

  • May combine two claims.

    Findingown data

    The measured execution time required for the password checking process was 170 s for the PLC, about 132 s for the IoT gateway, and about 77 s for the IoT device.

    “We measured the execution time required for the password checking process, which was 170 s for the PLC, about 132 s for the IoT gateway, and about 77 s for the IoT device, as shown in Figure 9.”
    Quote in the paperSubstantial claim

  • May combine two claims.

    Findingreasoning

    PLCs have inferior CPU performance (slower operating frequencies) and therefore longer execution times than the other evaluated IIoT devices.

    “since PLCs have inferior CPU performance (i.e., slower operating frequencies), their execution times are longer.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based). May combine two claims.

    Findingnone given

    In the collection of version information, the execution time can differ greatly from one device to the next, and this is due to differences in the number of installed applications.

    “In the collection of version information, the execution time can differ greatly from one device to the next, but this is due to differences in the number of installed applications.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S4 (based).

    Premisenone given

    The control devices and IoT devices used in IIoT systems run diverse operating systems and software environments.

    “The various control devices and IoT devices used in IIoT systems also run diverse operating systems and software environments.”
    Quote in the paperNot a substantial claim

  • May combine two claims.

    Interpretationreasoning

    Software version information is the most important management target because software updates and patches are decided based on version information.

    “In principle, the application of software updates and patches is decided based on version information, so the correspondence between the software installed on the devices and the version information of this software is the most important management target.”
    Quote in the paperSubstantial claim

  • Probably not a substantial claim: may not pass S4 (based).

    Premisenone given

    The versions of Linux used in embedded systems such as IIoT devices may lack the standard package-management and binary-library version tools because of storage capacity limitations.

    “However, the versions of Linux used in embedded systems, such as those used for IIoT devices, may not have these tools due to storage capacity limitations.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S4 (based). May combine two claims.

    Interpretationnone given

    The reference architecture created using a SysML block definition diagram is versatile and extensible and capable of representing the asset structure of an IIoT system.

    “Using a SysML block definition diagram, we create a reference architecture (Figure 2) that is both versatile and extensible and is capable of representing the asset structure of an IIoT system.”
    Quote in the paperNot a substantial claim

  • Classified as probably not a substantial claim.

    Interpretationreasoning

    When the asset configuration management agent acquires asset configuration management data, it must not hold up the real-time control process.

    “Therefore, when the asset configuration management agent mounted in a control device or the like acquires asset configuration management data, such as software management information and password information, as described above, this must not hold up the real-time control process.”
    Quote in the paperSubstantial claim
    • Rests on an assumption: In control devices such as DCSs and PLCs, and in some IoT devices, real-time control processing is needed to control plant equipment.
    • Rests on an assumption: The response time is ensured by reliably running the control process within a prescribed control cycle of about 1 ms to 10 ms.
    • Rests on an assumption: Depending on the speed of this control cycle, some devices may require a small amount of deviation (jitter) from the specified control cycle duration.

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Premisecitation

    International standards ISA99 and IEC62443 refer to the hierarchical structure according to the ISA95 model.

    “The international standards regarding industrial control systems, such as ISA99 and IEC62443, also refer to the hierarchical structure according to the ISA95 model [19,20].”
    Quote in the paperNot a substantial claim0 of 2 sources checked
    • cites [19] Leander, B., Čauševic´, A., and Hansson, H. (2019, January 26–29). Applicability of the IEC 62443 standard in Industry 4.0/IIoT. Proceedings of the 14th International Conference on Availability, Reliability and Security, Canterbury, UK. source

      Not checked in the free run.

    • cites [20] Hassani, 2021, Vulnerability and security risk assessment in a IIoT environment in compliance with standard IEC 62443, Procedia Comput. Sci. source

      Not checked in the free run.

  • Probably not a substantial claim: may not pass S4 (based).

    Interpretationnone given

    The specified data structure allows the asset configuration management agent to efficiently collect and manage information effective for security measures.

    “In the IIoT system modeled in the previous section, we specified a suitable data structure whereby the asset configuration management agent can efficiently collect and manage information that is effective for security measures.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S2 (checkable).

    Interpretationreasoning

    To collect and centrally manage asset configuration management data, the asset configuration management agent should be equipped with processing algorithms appropriate for each device and the type of network to which it is connected.

    “To collect and centrally manage the asset configuration management data, the asset configuration management agent should, therefore, be equipped with processing algorithms that are appropriate for each device and the type of network to which it is connected.”
    Quote in the paperNot a substantial claim

  • Classified as probably not a substantial claim.

    Interpretationreasoning

    System password management is crucial for avoiding the risk of malware spreading through internal networks.

    “On the other hand, system password management is crucial for avoiding the risk of this type of malware spreading through internal networks.”
    Quote in the paperSubstantial claim
    • Rests on an assumption: Sites where control systems are running do not always have in place the sorts of password policies that are becoming common in IT systems.

  • Probably not a substantial claim: may not pass S4 (based).

    Study design and conductnone given

    The agent functions are targeted to cause CPU load factor and memory occupancy to increase by no more than 1%.

    “Our targets are set so that the agent functions will cause the CPU load factor and memory occupancy to increase by no more than 1%.”
    Quote in the paperNot a substantial claim

  • Classified as probably not a substantial claim.

    Interpretationreasoning

    Using CPE for IIoT asset configuration management makes it easy to establish links with existing IT systems' asset configuration management.

    “The use of CPE for IIoT asset configuration management makes it easy establish links with the asset configuration management of existing IT systems.”
    Quote in the paperSubstantial claim

  • Probably not a substantial claim: may not pass S2 (checkable), S4 (based). May combine two claims.

    Interpretationreasoning

    It is important to visualize the status of each device and to generate a visual warning urging administrators to act when a security vulnerability is found in a device.

    “It is also important to visualize the status of each device, and to generate a visual warning to urge system administrators to take action when a security vulnerability has been found in a device.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S2 (checkable), S4 (based).

    Interpretationnone given

    For effective security measures in IIoT systems, in addition to automatically collecting asset configuration management data, a system that deploys patches and security settings to each asset in cooperation with external vulnerability-management systems is necessary.

    “For effective security measures, in addition to automatically collecting asset configuration management data, it is necessary to have a system that deploys patches and security settings to each asset in cooperation with systems, such as external servers, that manage vulnerabilities.”
    Quote in the paperNot a substantial claim

  • May combine two claims.

    Study design and conductreasoning

    An upper limit is defined for the amount of CPU time that the acquisition process is allowed to take, and the system is designed so that processes cannot take more time than this.

    “Therefore, an upper limit is defined for the amount of CPU time that the acquisition process is allowed to take, and the system is designed so that processes cannot take more time than this.”
    Quote in the paperSubstantial claim

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    IIoT devices in industrial and social infrastructure systems will probably be less exposed to indiscriminate password-based cyberattacks than IoT devices that access the Internet.

    “IIoT devices in industrial and social infrastructure systems will probably be less exposed to this type of cyberattack than IoT devices that access the Internet.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S2 (checkable), S4 (based). May combine two claims.

    Premisenone given

    It is necessary to guarantee reliable and real-time control and save CPU and memory usage for legacy OT devices.

    “Besides, it is necessary to guarantee reliable and real-time control and save CPU and memory usage for legacy OT devices.”
    Quote in the paperNot a substantial claim

  • Classified as probably not a substantial claim.

    Interpretationreasoning

    Processing algorithms can be designed flexibly and easily by visually combining existing or new functional blocks.

    “processing algorithms can be designed flexibly and easily by visually combining existing or new functional blocks.”
    Quote in the paperSubstantial claim

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based).

    Interpretationnone given

    The asset configuration management agent design method proposed in this paper can be applied to devices running any operating system.

    “we believe that the asset configuration management agent design method proposed in this paper can be applied to devices running any operating system.”
    Quote in the paperNot a substantial claim

  • Classified as probably not a substantial claim. May combine two claims.

    Study design and conductreasoning

    The IIoT devices selected for the prototype all run a Linux-based operating system, so they can be compared under the same conditions in the performance evaluation.

    “Since they are all running a Linux-based operating system, they can be compared under the same conditions when conducting the performance evaluation described below.”
    Quote in the paperSubstantial claim

  • May combine two claims.

    Interpretationreasoning

    Executing the collection functions with the lowest priority and splitting their process sequences into subprocesses via nanosleep calls reduces the CPU occupancy time of the asset configuration management agent and ensures the responsiveness of control-related processes.

    “With this method, the CPU occupancy time of the asset configuration management agent can be reduced, thereby ensuring the responsiveness of control-related processes.”
    Quote in the paperSubstantial claim

  • Probably not a substantial claim: may not pass S3 (load-bearing). May combine two claims.

    Interpretationreasoning

    PLCs' CPU load factors are lower in the password checking process because real-time patches applied to their operating systems distribute the processing load more precisely than in other operating systems.

    “On the other hand, their CPU load factors are still lower in the password checking process.We think this is because real-time patches are applied to their operating systems so that the processing load can be distributed more precisely than in other operating systems.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S3 (load-bearing).

    Interpretationreasoning

    The approximately 0.5% CPU load of the password checking process is due to the processing load associated with password hashing.

    “We think this is due to the processing load associated with password hashing.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S4 (based). May combine two claims.

    Interpretationreasoning

    The primitive method of directly starting managed software to obtain version information is supported by most officially distributed software and is therefore applicable to a wider range of devices and software.

    “However, since it is supported by most of the officially distributed software, it is thought to be applicable to a wider range of devices and software.”
    Quote in the paperNot a substantial claim

  • Probably not a substantial claim: may not pass S2 (checkable). May combine two claims.

    Interpretationreasoning

    Use of this method will make it possible to reduce the administrator workload needed for security countermeasures and will contribute to strengthening the security of industrial control systems increasingly targeted at IoT applications.

    “We believe that the use of this method will make it possible to reduce the administrator workload needed for security countermeasures and will contribute to strengthening the security of industrial control systems that are being increasingly targeted at IoT applications.”
    Quote in the paperNot a substantial claim

  • Classified as probably not a substantial claim. May combine two claims.

    Study design and conductreasoning

    The CPU load factor was measured at intervals of 10 ms, the general control cycle, because disrupting real-time control even briefly is unacceptable.

    “in this study, we decided to measure the CPU load factor at intervals of 10 ms, which is used as a general control cycle because it is not acceptable to disrupt real-time control even for a very short time.”
    Quote in the paperSubstantial claim

  • Probably not a substantial claim: may not pass S3 (load-bearing), S4 (based). May combine two claims.

    Interpretationreasoning

    Because software updates generally occur about once a day at most, updates will not cause practical difficulties if their execution time is within a few minutes.

    “In addition, since software updates generally occur about once a day at most, we believe that updates will not cause any practical difficulties if their execution time is within a few minutes.”
    Quote in the paperNot a substantial claim
29 of 29

  • The paper relies on this without support.

    IIoT systems are composed of various network protocols, various devices, and open technologies.

    “This is because these systems are composed of various network protocols, various devices, and open technologies.”

  • The paper relies on this without support.

    There are still many security challenges left on the OT side.

    “In this paper, we will focus on the OT side, where there are still many security challenges left.”

  • The paper relies on this without support.

    An attacker will perform a preliminary investigation to find version information of the OS/software installed on the attack target device and then select an attack method to exploit vulnerabilities in those specific versions, unless cyber-attacks are carried out indiscriminately.

    “Furthermore, unless cyber-attacks are carried out indiscriminately, an attacker will perform a preliminary investigation to find out the version information of the OS/software installed on the attack target device and then select an attack method to exploit the vulnerabilities that exist in these specific versions.”

  • The paper relies on this without support.

    Sites where control systems are running do not always have in place the sorts of password policies that are becoming common in IT systems.

    “In particular, the sites where control systems are running do not always have in place the sorts of password policies that are becoming common in IT systems.”

  • The paper relies on this without support.

    In control devices such as DCSs and PLCs, and in some IoT devices, real-time control processing is needed to control plant equipment.

    “In control devices, such as DCSs and PLCs, that are used in IIoT systems, and in some IoT devices, real-time control processing is needed to control plant equipment.”

  • The paper relies on this without support.

    The response time is ensured by reliably running the control process within a prescribed control cycle of about 1 ms to 10 ms.

    “Specifically, the response time is ensured by reliably running the control process within a prescribed control cycle of about 1 ms to 10 ms in duration.”

  • The paper relies on this without support.

    Depending on the speed of this control cycle, some devices may require a small amount of deviation (jitter) from the specified control cycle duration.

    “Depending on the speed of this control cycle, some devices may require a small amount of deviation (jitter) from the specified control cycle duration.”

  • The paper relies on this without support.

    The implementation of security countermeasures in infrastructure systems is a problem due to increased expenditure of time and money on introducing countermeasures to all IoT equipment in the system.

    “The implementation of security countermeasures of this sort in infrastructure systems is a problem due to the increased expenditure of time and money on introducing countermeasures to all IoT equipment in the system.”

  • The paper relies on this without support.

    The increase in IoT devices will further accelerate the incidence of cybersecurity issues in social infrastructure systems.

    “The increase in IoT devices will further accelerate the incidence of cybersecurity issues in social infrastructure systems.”

  • The paper relies on this without support.

    IIoT technology uses a diverse variety of wired and wireless connection methods, which makes network configuration more complex and makes it difficult to manage devices manually.

    “IIoT technology uses a diverse variety of wired and wireless connection methods, which makes the network configuration more complex and makes it difficult to manage devices manually.”

  • The authors state this as an assumption.

    A maximum memory occupancy of about 90% is taken as a general principle when designing control processes.

    “we instead assume a maximum memory occupancy of about 90% as a general principle when designing control processes.”

  • The paper relies on this without support.

    It is generally acceptable to continue using the same password for several months.

    “it is generally acceptable to continue using the same password for several months.”
12 of 12

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • IIoT systems can be low-performing but must be guaranteed to function reliably in real time.

    “Furthermore, these systems can be low-performing but must be guaranteed to function reliably in real time.”

    From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as [43]

  • Traditional asset management methods for conventional IT systems are difficult to implement for IIoT systems due to the variety of network protocols, devices, and technologies involved.

    “Traditional asset management methods for conventional IT systems are difficult to implement for IIoT systems due to the variety of network protocols, devices, and technologies involved.”

    From Mapping of Industrial IoT to IEC 62443 Standards (2025) · cites this paper as [43]

Cites

Flagged first, then by citations

Research works printed but not linked: 4

  1. Kanamaru, 2019, Kaizen of Measures for Cyber Security of Control Systems, SICE J. Control Meas. Syst. Integr., 58, 923
  2. Kawanishi, Y., Nishihara, H., Souma, D., Yoshida, H., and Hata, Y. (2018). A study on quantification of risk assessment in security design for industrial control systems. SCIS (Symposium on Cryptography and Information Security), IEICE (the Institute of Electronics, Information and Communication Engineers).
  3. Ito, A., Takeuchi, T., Schulz, G., Sakaino, A., and Watanabe, H. (2019, January 10–13). Operation technology cyber security insight related to FDT technology. Proceedings of the SICE Annual Conference 2019, Hiroshima, Japan.
  4. Matsumoto, N., Saito, N., Yamada, T., Takemoto, S., and Kamiwaki, T. (2014, January 9–12). A security-management scheme for assets with SCAP for IACS. Proceedings of the SICE Annual Conference 2014, Sapporo, Japan.

Cited by

Sorted by citations

Related

Authors
Matsumoto, N., Fujita, J., Endoh, H., Yamada, T., Sawada, K., & Kaneko, O.
Affiliations
  • Hitachi (Japan) (JP)
  • University of Electro-Communications (JP)
Corresponding author
Matsumoto, Noritaka
ORCID
Venue
Information
Publisher
MDPI AG
Published
2021-11-08
Volume
12
Issue
11
Pages
460
ISSN
2078-2489 (ISSN-L)
DOI
10.3390/info12110460
OpenAlex
W3211383514
Semantic Scholar
6bf453d0855c937922ddc47599fbb60871ede9c7
Cited by
13
References
17
Citations by year
2026: 2 · 2025: 4 · 2023: 5 · 2022: 2
FWCI
1.58
Type
journal article
Language
en
Open access
Licence
Locations
  • Information (publishedVersion, cc-by)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
Topics
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
Keywords
Industrial Internet of Things, asset management, SCAP, edge devices, operational technology, security automation, real-time control

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Claims read by deepseek-v4.1-flash under definition version 3 (extract-v3) on 2026-10-09.

Classified by jev-1.13-20260917 (gold-guideline-v0.2) on 2026-10-09.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review