Cybersecurity of Industrial Cyber-Physical Systems: A Review

Industrial cyber-physical systems (ICPSs) manage critical infrastructures by controlling the processes based on the "physics" data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly interconnected systems to ICPSs. Hence, the "security by obscurity" principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition while the most common ones are related to weak boundary protection. Although there are existing surveys in this context, very little is mentioned regarding these reports. This paper bridges this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating real-life ICPS cyber incidents. We also identify the general shortcomings and highlight the points that cause a gap in existing literature while defining future research directions.Comment: 32 pages, 10 figure

Simple Design Approach for Shared Digital Twins

The collaborative utilization of data becomes increasingly important in industry and requires increased consideration of interoperability and data sovereignty aspects. Distributed systems play a decisive role in this context, which allow for a closer communication between the stakeholders involved and are characterized by the shared use of data and devices. At the same time new concepts emerge that enable a structured mapping of data. These include Digital Twins, which primarily allow a holistic digital representation of an entire asset lifecycle. Digital Twins offer significant potential for distributed systems and form a suitable basis for the collaborative utilization of an asset's lifecycle data. Although studies assume an increased use of Digital Twins in cross-company networks, they are still predominantly used as a purely company-internal concept. In the context of this publication, we demonstrate how to get started easily with the design of Digital Twins intended for use in collaborative distributed systems

Putative Abscopal Effect in Three Patients Treated by Combined Radiotherapy and Modulated Electrohyperthermia

Purpose: True abscopal responses from radiation therapy are extremely rare; the combination of immune checkpoint inhibitors with radiation therapy has led to more reports of the abscopal effect, but even in this setting, the genuine magnitude remains unknown and is still considered generally uncommon. We report the occurrence of what appears to be putative, durable abscopal tumor responses with associated auto-immune systemic reactions resulting from the combination of local radiotherapy (RT) and modulated electrohyperthermia (mEHT). Materials and Methods: Data from advanced cancer patients treated palliatively with RT and mEHT between January and December 2017 were collected as part of a post-marketing safety monitoring program of mEHT therapy. We specified a minimum RT dose of 30 Gy and at least four mEHT treatments for reporting toxicities, which was the primary aim of the larger study. Results: Thirty-three patients treated with RT and mEHT, both applied to the same lesion, were included. The median RT dose was 45.5 Gy in 20 fractions (fxs) and the median number of mEHT treatments was 12 (range, 4–20). Most patients had subsequent systemic therapy after one course of RT and mEHT. Three patients (9.1%) developed autoimmune toxicities. Case number 1 received RT and mEHT only; case number 2 had two cycles of concurrent low dose chemotherapy during RT; and case number 3 received concurrent immune checkpoint inhibitors. None of the three patients received any further systemic treatment due to obvious treatment-related autoimmune reactions which occurred rapidly after RT; one had autoimmune hepatitis, one had dermatitis herpetiformis and the third developed severe myasthenia gravis. Interestingly, what we surmise to be long-lasting abscopal responses outside the irradiated area, were noted in all three patients. Conclusion: RT combined with mEHT could putatively result in enhancing immune responsiveness. These preliminary observational findings lead to the generation of a hypothesis that this combination induces both an in-situ, tumor-specific immune reaction and an anti-self-autoimmune reaction, in at least a small proportion of patients, and of those who experience the auto-immune response, tumor response is a concomitant finding. Mechanisms underlying this phenomenon need to be investigated further

Towards The Internet Of Production – How To Increase Data Sharing For Successful Supply Chain Collaboration

Numerous start-ups and now even some major corporates are currently trying to improve visibility and foresight in the manufacturing industry through connected supply chains, or in other words, through increased data sharing. This study strives to support companies in leveraging the potential of increased data sharing in supply chain collaborations. Despite the great potential of digitizing manufacturing and automated data sharing throughout the supply chain, most companies are not yet able or willing to implement this kind of openness. The main reason for this lack of transparency in the supply chain is the high complexity and high cost of the required interfaces. In practice, instead of automated and extensive data sharing, companies exchange spreadsheets and PDFs with minimum information. This study supports companies in the pre-stage before automated data sharing is technically implemented. We find that building trustful relationships is a necessary step towards extended and automated data sharing. Moreover, we find that social capital provides a means to partially compensate for a lack of automation in terms of shortening lead times and dealing with disruptions. Introducing a supply chain collaboration typology and showcasing descriptive and qualitative results for 36 firms, we show how to navigate the frontend of the Internet of Production

A concept for integrated care pathways for atopic dermatitis-A GA2 LEN ADCARE initiative

INTRODUCTION: The integrated care pathways for atopic dermatitis (AD-ICPs) aim to bridge the gap between existing AD treatment evidence-based guidelines and expert opinion based on daily practice by offering a structured multidisciplinary plan for patient management of AD. ICPs have the potential to enhance guideline recommendations by combining interventions and aspects from different guidelines, integrating quality assurance, and describing co-ordination of care. Most importantly, patients can enter the ICPs at any level depending on AD severity, resources available in their country, and economic factors such as differences in insurance reimbursement systems. METHODS: The GA2 LEN ADCARE network and partners as well as all stakeholders, abbreviated as the AD-ICPs working group, were involved in the discussion and preparation of the AD ICPs during a series of subgroup workshops and meetings in years 2020 and 2021, after which the document was circulated within all GAL2 EN ADCARE centres. RESULTS: The AD-ICPs outline the diagnostic procedures, possible co-morbidities, different available treatment options including differential approaches for the pediatric population, and the role of the pharmacists and other stakeholders, as well as remaining unmet needs in the management of AD. CONCLUSION: The AD-ICPs provide a multidisciplinary plan for improved diagnosis, treatment, and patient feedback in AD management, as well as addressing critical unmet needs, including improved access to care, training specialists, implementation of educational programs, assessment on the impact of climate change, and fostering a personalised treatment approach. By focusing on these key areas, the initiative aims to pave the way for a brighter future in the management of AD

A concept for integrated care pathways for atopic dermatitis—A GA2LEN ADCARE initiative

Introduction: The integrated care pathways for atopic dermatitis (AD-ICPs) aim to bridge the gap between existing AD treatment evidence-based guidelines and expert opinion based on daily practice by offering a structured multidisciplinary plan for patient management of AD. ICPs have the potential to enhance guideline recommendations by combining interventions and aspects from different guidelines, integrating quality assurance, and describing co-ordination of care. Most importantly, patients can enter the ICPs at any level depending on AD severity, resources available in their country, and economic factors such as differences in insurance reimbursement systems. Methods: The GA2LEN ADCARE network and partners as well as all stakeholders, abbreviated as the AD-ICPs working group, were involved in the discussion and preparation of the AD ICPs during a series of subgroup workshops and meetings in years 2020 and 2021, after which the document was circulated within all GAL2EN ADCARE centres. Results: The AD-ICPs outline the diagnostic procedures, possible co-morbidities, different available treatment options including differential approaches for the pediatric population, and the role of the pharmacists and other stakeholders, as well as remaining unmet needs in the management of AD. Conclusion: The AD-ICPs provide a multidisciplinary plan for improved diagnosis, treatment, and patient feedback in AD management, as well as addressing critical unmet needs, including improved access to care, training specialists, implementation of educational programs, assessment on the impact of climate change, and fostering a personalised treatment approach. By focusing on these key areas, the initiative aims to pave the way for a brighter future in the management of AD

A concept for integrated care pathways for atopic dermatitis-A GA2^{2} LEN ADCARE initiative

Introduction: The integrated care pathways for atopic dermatitis (AD‐ICPs) aim to bridge the gap between existing AD treatment evidence‐based guidelines and expert opinion based on daily practice by offering a structured multidisciplinary plan for patient management of AD. ICPs have the potential to enhance guideline recommendations by combining interventions and aspects from different guidelines, integrating quality assurance, and describing co‐ordination of care. Most importantly, patients can enter the ICPs at any level depending on AD severity, resources available in their country, and economic factors such as differences in insurance reimbursement systems. Methods: The GA$^{2}$LEN ADCARE network and partners as well as all stakeholders, abbreviated as the AD‐ICPs working group, were involved in the discussion and preparation of the AD ICPs during a series of subgroup workshops and meetings in years 2020 and 2021, after which the document was circulated within all GAL$^{2}$EN ADCARE centres. Results: The AD‐ICPs outline the diagnostic procedures, possible co‐morbidities, different available treatment options including differential approaches for the pediatric population, and the role of the pharmacists and other stakeholders, as well as remaining unmet needs in the management of AD. Conclusion: The AD‐ICPs provide a multidisciplinary plan for improved diagnosis, treatment, and patient feedback in AD management, as well as addressing critical unmet needs, including improved access to care, training specialists, implementation of educational programs, assessment on the impact of climate change, and fostering a personalised treatment approach. By focusing on these key areas, the initiative aims to pave the way for a brighter future in the management of AD

Evaluation of (De-)Centralized IT technologies in the fields of Cyber-Physical Production Systems

In the course of the digital transformation, organizations are not only facing increasing volatility of the markets, but also increasing customer requirements and thus an increasing complexity in production and logistics systems. Therefore, production plants need to become more flexible by transforming conventional production systems to Cyber-physical Production Systems (CPPS). CPPS allow organizations to dynamically react to fluctuations in demand and markets and to introduce new product lines quickly and effectively. The challenge in implementing CPPS is to handle and store relevant data streams between Cyber-physical objects in a secure but transparent way. As CPPS involve a high level of decentralization, the data storage can either be combined with centralized IT-solutions like a Cloud or utilize decentralized IT-technologies like Edge Computing or Distributed Ledger Technologies (DLT) like Blockchains. The paper addresses the suitability of centralized and decentralized technologies in terms of dealing with data streams in the fields of CPPS. For this purpose, based on a paper exploration, appropriate evaluation criteria are derived, followed by a comparison of exemplary centralized and decentralized technologies. The outcome is a qualitative evaluation of the supplement of each technology regarding its suitability of dealing with data streams

Cybersecurity of industrial cyber-physical systems: a review

Industrial cyber-physical systems (ICPSs) manage critical infrastructures by controlling the processes based on the “physics” data gathered by edge sensor networks. Recent innovations in ubiquitous computing and communication technologies have prompted the rapid integration of highly interconnected systems to ICPSs. Hence, the “security by obscurity” principle provided by air-gapping is no longer followed. As the interconnectivity in ICPSs increases, so does the attack surface. Industrial vulnerability assessment reports have shown that a variety of new vulnerabilities have occurred due to this transition. Although there are existing surveys in this context, very little is mentioned regarding the outputs of these reports. While these reports show that the most exploited vulnerabilities occur due to weak boundary protection, these vulnerabilities also occur due to limited or ill defined security policies. However, current literature focuses on intrusion detection systems (IDS), network traffic analysis (NTA) methods, or anomaly detection techniques. Hence, finding a solution for the problems mentioned in these reports is relatively hard. We bridge this gap by defining and reviewing ICPSs from a cybersecurity perspective. In particular, multi-dimensional adaptive attack taxonomy is presented and utilized for evaluating real-life ICPS cyber incidents. Finally, we identify the general shortcomings and highlight the points that cause a gap in existing literature while defining future research directions

Software Components for Smart Industry Based on Microservices: A Case Study in pH Control Process for the Beverage Industry

[EN] Modern industries require constant adaptation to new trends. Thus, they seek greater flexibility and agility to cope with disruptions, as well as to solve needs or meet the demand for growth. Therefore, smart industrial applications require a lot of flexibility to be able to react more quickly to continuous market changes, offer more personalized products, increase operational efficiency, and achieve optimum operating points that integrate the entire value chain of a process. This requires the capture of new data that are subsequently processed at different levels of the hierarchy of automation processes, with requirements and technologies according to each level. The result is a new challenge related to the addition of new functionalities in the processes and the interoperability between them. This paper proposes a distributed computational component-based framework that integrates communication, computation, and storage resources and real-time capabilities through container technology, microservices, and the publish/subscribe paradigm, as well as contributing to the development and implementation of industrial automation applications by bridging the gap between generic architectures and physical realizations. The main idea is to enable plug-and-play software components, from predefined components with their interrelationships, to achieve industrial applications without losing or degrading the robustness from previous developments. This paper presents the process of design and implementation with the proposed framework through the implementation of a complex pH control process, ranging from the simulation part to its scaling and implementation to an industrial level, showing the plug-and-play assembly from a definition of components with their relationships to the implementation process with the respective technologies involved. The effectiveness of the proposed framework was experimentally verified in a real production process, showing that the results scaled to an industrial scale comply with the simulated design process. A qualitative comparison with traditional industrial implementations, based on the implementation requirements, was carried out. The implementation was developed in the beverage production plant "Punta Delicia", located in Colima, Mexico. Finally, the results showed that the platform provided a high-fidelity design, analysis, and testing environment for cyber information flow and their effect on the physical operation of the pH control.This work has been supported by for research cooperation between Universidad de Colima (Mexico), Universidad Autonoma de Occidente (Colombia), Universitat Politecnica de Valencia (Spain) and the juice production plant Punta Delicia located in Colima, Mexico.Serrano-Magaña, H.; González-Potes, A.; Ibarra-Junquera, V.; Balbastre, P.; Martínez-Castro, D.; Simó Ten, JE. (2021). Software Components for Smart Industry Based on Microservices: A Case Study in pH Control Process for the Beverage Industry. Electronics. 10(7):1-21. https://doi.org/10.3390/electronics1007076312110