Secure industrial IoT gateway

• Grant number: 20/05142-1
• Support type: Research Grants - Research Partnership for Technological Innovation - PITE
• Duration: March 01, 2021 - February 28, 2023
• Field of knowledge: Physical Sciences and Mathematics - Computer Science - Computer Systems
• Cooperation agreement: MCTI/MC
• Principal researcher: Antônio Augusto Medeiros Fröhlich
• Grantee: Antônio Augusto Medeiros Fröhlich
• Home Institution: Centro Tecnológico. Universidade Federal de Santa Catarina (UFSC). Ministério da Educação (Brasil). Florianópolis , SP, Brazil
• Company: Kryptus Segurança da Informação Ltda
• City: Florianópolis
• Assoc. researchers: Conrado Porto Lopes Gouvêa ; Jean Everson Martina ; Lucas Francisco Wanner ; Roberto Alves Gallo Filho ; Roberto Milton Scheffel
• Associated scholarship(s): 21/02384-7 - Development of an integrity checking protocol and a Gateway IIoT implementation based on a Trusted Execution Environment (TEE), BP.TT; 21/02385-3 - Machine Learning and Performance Monitoring for Integrity Checking in IIoT Gateways, BP.TT

Abstract

The Secure Industrial IoT Gateway project aims to push the state-of-the-art in secure communication for the Industrial Internet of Things (IIoT), focusing on the gateways that connect equipments and machines to the Internet and the Cloud. The project addresses the issue from two perspectives: making gateways more robust against attacks and detecting violations in case they occur. For the first aspect, the project will explore tools to validate the software at the core of gateways, mechanisms to isolate such software in Trusted Execution Environments, and techniques to promote redundancy and diversity in the sense of fault tolerance. For the second aspect, the project will investigate secure protocols to check the integrity of the data generated by IIoT devices on their way to the Cloud, and also non-intrusive monitoring systems to detect anomalous behavior of gateways. The project will be validated through a proof-of-concept implementation (for performance and energy-efficiency assessment) and simulations (for scalability assessment). Security will be evaluated in terms of robustness, hit rate, and false-positive rate. (AU)