Industrial Internet Security Framework v 1.0 | Page 121

Security Framework 12: Looking Ahead—The Future of the IIoT 12 LOOKING AHEAD—THE FUTURE OF THE IIOT This document outlined best practices and considerations needed to address security risks associated with the Industrial Internet of Things. An overview of the differences between IIoT systems and traditional information technology systems was presented, as was the importance of considering key system characteristics and their relationship to risks, security assessments and risk analysis. The Functional and Implementation Viewpoints, described technologies and practices that affect the security and privacy of IIoT systems. This chapter provides an overview of the security implications that new technologies and trends may have on the future of the IIoT. The industrial internet shows great promise for vastly increasing the capabilities of the devices in a variety of applications, including factory automation, medical systems and a wide variety of other systems. By connecting devices to enable communication among each other and the cloud, it opens the possibilities of making the devices “intelligent”, potentially delivering unprecedented capabilities. Advances in technology will enable a new generation of devices that are more intelligent and have greater efficiency than their predecessors. This should lead to an inflection point where the promise of greater functionality, efficiency and intelligence will lead to more rapid updates of brownfield systems or perhaps even a wholesale set of greenfield upgrades. In OT, where system lifespans have historically been measured in decades, such inflection points are few and far between. As these high-value industrial systems are increasingly connected, it is even more critical that security and privacy risks be addressed. Broad forces such as increasingly powerful microcontrollers, microelectromechanical system (MEMS) sensors, battery-friendly wireless protocols, horizontally scalable computing infrastructures, high-assurance microkernels, additive manufacturing, desktop milling, venture funding and crowd funding will likely continue to disrupt industries in unpredictable ways. New wireless protocols stream richer sensor data and new microcontrollers may be energy friendly enough to work strictly via energy harvesting, opening untold possibilities for instrumenting discrete manufacturing, refineries and countless production and treatment plants. Of course, these revolutions in the core of industrial systems are not happening in isolation. Similar advances in sensing, instrumentation and automation of building controls are driving growth of smart building and smart cities. At the same time, falling costs of bandwidth and embedded processing are making it easier and easier to manage supply chains spanning tiers of suppliers scattered across multiple continents, including such exciting use cases as mass customization through just-in-time manufacturing of pipelined single-piece workflow. Traditional management models and operational architectures often don’t scale for such uses. Traditional operational architectures revolve around a centralized management and monitoring capability to ensure proper functionality. This is analogous to the human brain and the series of nerves that allow the brain to push commands to muscles (actuators) and receive information (from sensors). Increasingly, though, in industrial settings, we have the opportunity to leverage tremendous distributed computing power for intelligence at the edge of the network. IIC:PUB:G4:V1.0:PB:20160926 - 121 -