Blending Shared Responsibility and Zero Trust to Secure the Industrial Internet of Things

IF 2.9 4区计算机科学 Q2 COMPUTER SCIENCE, INFORMATION SYSTEMS

IEEE Security & Privacy Pub Date : 2024-09-13 DOI:10.1109/msec.2024.3432208

Kenneth G. Crowther

引用次数: 0

Abstract

This article explores the integration of shared responsibility and zero trust architecture models to enhance the cybersecurity of Industrial Internet of Things (IIoT) systems. It examines the foundational principles and challenges of each model, highlighting their philosophical contradictions and practical applications. By defining key elements and providing illustrative examples, the article identifies common ground and proposes a hybrid approach to secure IIoT deployments. The findings emphasize the importance of collaboration, standardization, and robust security practices to achieve a resilient and secure IIoT environment.

查看原文本刊更多论文

融合共同责任与零信任，确保工业物联网安全

本文探讨了如何整合共同责任和零信任架构模式，以加强工业物联网（IIoT）系统的网络安全。文章研究了每种模式的基本原则和挑战，强调了它们之间的哲学矛盾和实际应用。通过定义关键要素和提供示例，文章找出了共同点，并提出了一种确保 IIoT 部署安全的混合方法。研究结果强调了合作、标准化和稳健的安全实践对实现弹性和安全的物联网环境的重要性。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

IEEE Security & Privacy 工程技术-计算机：软件工程

CiteScore

4.30

自引率

5.30%

发文量

159

审稿时长

6-12 weeks

期刊介绍： IEEE Security & Privacy’s primary objective is to stimulate and track advances in security, privacy, and dependability and present these advances in a form that can be useful to a broad cross-section of the professional community—ranging from academic researchers to industry practitioners. It provides articles with both a practical and research bent by the top thinkers in the field of security and privacy, along with case studies, surveys, tutorials, columns, and in-depth interviews and podcasts for the information security industry. Through special issues, the magazine explores other timely aspects of privacy in areas such as usable security, the Internet of Things, cloud computing, cryptography, and big data. Other popular topics include software, hardware, network, and systems security, privacy-enhancing technologies, data analytics for security and privacy, wireless/mobile and embedded security, security foundations, security economics, privacy policies, integrated design methods, sociotechnical aspects, and critical infrastructure. In addition, the magazine accepts peer-reviewed articles of wide interest under a general call, and also features regular columns on hot topics and interviews with luminaries in the field.