Oriol Rius

I have been talking about IIoT security for days. The truth is that I am passionate about this subject. But it is also true that the subject is so vast that there is plenty of content to go around.
In today’s video, I focus on good practices, and on things you can do to improve safety in your factory.

Do you know what a botnet is? Does the name Mirai ring a bell?
I’ll tell you about it.
A botnet is a network of zombie devices that have been infected by malware, devices that are ready to be used for some illicit activity.
Mirai was a botnet that infected IoT devices. It brought hundreds of thousands of IoT devices under its control, which was used to launch an attack against a US college. Leaving it without service for 54 hours. It is one of the most important attacks in the history of the Internet.

It is highly likely that you have at some point purchased a home monitoring device connected to the Internet, such as an IP camera. And I’m also pretty sure you didn’t change the default password.
Such small devices are still computers that have been manufactured a long time ago and have been waiting on the shelf for months to be sold. At best, they are products that offer upgrades, but this is not the norm.

The vast majority of data from IIoT solutions end up in the cloud. And in the cloud, there are a variety of important services, each with its own specifications.
Today I am going to talk to you about the degree of responsibility for each of these services, to see what depends on you and what depends on the contracted provider.
In the graph I have summarised it by colour: in orange everything that depends on you, the customer. In grey, everything depends on the supplier.
To start with, we see the typical cloud services at the top of the image: IaaS (infrastructure as a service), PaaS (platform as a service), and SaaS (software as a service). We also see that from left to right, we have less and less responsibility for service.