Amirova A., Aldasheva L., Abdiraman A.
Securing the industrial internet of things: threats, vulnerabilities, and recommendations // Procedia Computer Science. — 2025. — DOI: 10.1016/j.procs.2025.10.258.

Abstract: The Industrial Internet of Things (IIoT) is a core element of Industry 4.0, enabling intelligent automation, real-time data exchange, and integration of cyber-physical systems. However, increasing complexity and connectivity introduce significant cybersecurity challenges. This paper presents an overview of IIoT security, including a conceptual analysis of IIoT and its differences from general IoT applications. It reviews research from 2018–2023, focusing on threat models, asset classification, and risk assessment frameworks. A taxonomy of IIoT-specific threats and vulnerabilities is developed, highlighting the limitations of traditional IT security approaches in industrial environments. The study also analyzes protected asset categories and attack vectors. Based on literature analysis and observations from Kazakhstan’s industrial digitalization initiatives, the paper identifies key security gaps and proposes recommendations for improving cybersecurity across system design, data protection, incident response, and personnel training. The results aim to support the development of adaptive and robust IIoT security strategies.

Link / DOI: https://doi.org/10.1016/j.procs.2025.10.258