The Safe, Secure and Reliable Industrial Internet: A Standards Story March 2017

Size: px

Start display at page:

Download "The Safe, Secure and Reliable Industrial Internet: A Standards Story March 2017"

Todd Esmond Hardy
5 years ago
Views:

Industrial Internet Consortium (IIC) Mission To be a global, member supported, organization that promotes the accelerated growth of the Industrial Internet of Things (IIoT) by coordinating ecosystem

2 Industrial Internet Consortium (IIC) Mission To be a global, member supported, organization that promotes the accelerated growth of the Industrial Internet of Things (IIoT) by coordinating ecosystem initiatives to securely connect, control and integrate assets and systems of assets with people, processes and data using common architectures, interoperability and open standards to deliver transformational business and societal outcomes across industries and public infrastructure. Launched in March 2014 now over 270 members 270+ Member Organizations Spanning 30 Countries The IIC is an open, neutral sandbox where industry, academia and government meet to collaborate, innovate and enable MITRE. All rights reserved, all other material used with permission. 2

Open Standards Usecases Security Framework New Technologie s Data Reference Architecture Open,

3 Collaboration within the Industrial Internet Consortium IIC Working Groups have individual charters, inter-related outcomes both within the Working Groups and with external organizations. Open Standards Usecases Security Framework New Technologie s Data Reference Architecture Open, Standards, Horizontal Enable & Accelerate Testbeds 2017 MITRE. All rights reserved, all other material used with permission. 3

4 Definition: The Industrial Internet of Things (IIoT) "An Industrial Internet of Things (IIoT) system connects and integrates control systems with enterprise systems, business processes, and analytics. An IIoT system enables significant advances in optimizing decision-making, operations, and collaborations among a large number of increasingly autonomous control systems. Insights gained through the IIoT technologies will provide new business outcomes and will likely disrupt many existing business practices. IIoT technology is useful for all industry and infrastructure, from manufacturing to utilities, healthcare, financial services, and telecommunications. Because of the nature of the assets connected to the Industrial Internet, IIoT systems must be designed to be secure, reliable and resilient to insure safety, business innovation, and public trust." MITRE. All rights reserved, all other material used with permission.

7 The IIC Addresses IIoT Systems in Numerous Sectors & Verticals agriculture building consumer & home defense/ aerospace energy healthcare manufacturing public sector public security transportation & safety farming building/ consumer defense energy connected factory education public safety mobility construction products medical devices ranching smart home home products military utilities hospitals industrial environment public security transportation automation fishing office cooking (commercial) aerospace mining medical offices smart products water surveillance public transportation weather building security entertainment oil and gas pharmacies transportation disaster prevention vehicle building phone & network smart grid medical therapy waste law enforcement/ traffic maintenance services management police infrastructure sporting events home healthcare civil fire logistics administration travel disease diagnosis emergency and crisis response freight management tourism continuous patient monitoring military pipelines 2017 MITRE. All rights reserved, all other material used with permission. clinical trials shipping assisted care aeronautics dentistry 7

8 Collaboration within the Industrial Internet Consortium IIC Working Groups have individual charters, inter-related outcomes both within the Working Groups and with external organizations. Open Standards Usecases Security Framework New Technologie s Data Reference Architecture Open, Standards, Horizontal Enable & Accelerate Testbeds 2017 MITRE. All rights reserved, all other material used with permission. 8

9 Industrial Internet Reference Architecture Chapters 34, 5, 6, & 7 Stakeholders Concern 1.1 Concern 1.2 Business Viewpoint Viewpoint 1 Concern 2.1 Concern 2.2 Usage Viewpoint Viewpoint 2 Concern 3.1 Concern 3.2 Functional Viewpoint Viewpoint 3 Concern 4.1 Concern 4.2 Implementation Viewpoint Viewpoint IIC. All rights reserved, used with permission. 9

Information Application Control Sense Actuation 2017 IIC.

10 Viewpoints Chapter 6 Functional Viewpoint IIRA FUNCTIONAL VIEW Human Users Functional Domains Business Operations Information Application Control Sense Actuation 2017 IIC. All rights reserved, used with permission. Physical Systems 18

11 Viewpoints Chapter 7 Implementation Viewpoint Edge Tier Platform Tier Enterprise Tier IIOT SYSTEM VIEW other information domains $ Monetization data flows Information Domains Data Services and Platforms Analytic Services and Platforms Business Domain Ingestion & transformation data flows Persistence & distribution Streaming & batch Persistence & distribution information flows Biz Analytics CRM EMR Control Domain OSS BSS Actuators Controller data flows Application Domain Logic & rules Sensors Application & Gateway Asset mgmt flows orchestration flows asset mgmt service flows Operations Domain Provisioning & Deployment Prognostics & Optimization API & Portal biz app flows Biz Apps Biz users Asset & Meta data API & Portal ops app flows OT Apps OT users Management Monitor & Diagnostics 2017 IIC. All rights reserved, used with permission. Proximity Network Access Network Service Network 19

12 Relevant Business, Usage, Functional, & Implementation Standards OMG Business Process Model and Notation (BPMN) Standard OMG Unified Modeling Language (UML) Standard OMG System Modeling Language (SysML) Standard Knowledge Discovery Metamodel (KDM) - ISO/IEC & OMG KDM OMG Unified Architecture Framework Standard OMG Unified Component Model for Standard OMG Interaction Flow Modelling Language (IFML) OMG Data-Distribution Service for Real-Time Systems (DDS) Standard March 22,

13 Collaboration within the Industrial Internet Consortium IIC Working Groups have individual charters, inter-related outcomes both within the Working Groups and with external organizations. Open Standards Usecases Security Framework New Technologie s Data Reference Architecture Open, Standards, Horizontal Enable & Accelerate Testbeds 2017 MITRE. All rights reserved, all other material used with permission. 13

14 The IIC and Standards Organizations The IIC is not a standards organization. It evaluates and organizes existing standards to: Advocate for open standard technologies Influence the global standards development The Technology Working Group is currently: Evaluating existing standards Identifying requirements for the Industrial Internet IIC Formal Liaisons as of July MITRE. All rights reserved, all other material used with permission. 14

Need Secure, Safe, Reliable, and Resilient Behavior that

17 Key System Characteristics Enabling Trustworthiness System Reliability Resilience Safety Security Privacy Assurance Engineering 2017 MITRE. All rights reserved, all other material used with permission. ISO Assurance Case Standard OMG Structured Assurance Case Metamodel Standard Open Group Dependability through Assurance Standard 17

20 The Key System Characteristics of Trustworthiness as a Quality Measure Industrial IoT Quality is a continuum of system characteristics OT Safety (IEC 62443*) meets IT Security (ISO 27000*) Privacy (GDPR*), Resilience (ISO*, IEC*), Reliability (NIS*) are quality features in both OT and IT Determine and ensure quality measures per vertical, e.g. audit, certification Security Safety 0.4 Privacy Reliability Resilience Trustworthiness Measure Vertical Customer * Examples Resilience Reliability Security Privacy Safety Interaction and relations 20

21 Composition of a Trustworthiness Quality Measure Art7 Resilience* 50 Art Art2 Art 4 Reliability* EU: NIS UK: (after Brexit) US:... CN: () JP: analog NIS Art 1 0 Art 2 Art6 Art7 Security* 40 Art1 30 Art Art3 Art 222 Privacy* EU: GDPR UK: (after Brexit) US: CN: () JP: analog GDPR Art Art 99 REQ N Safety* EU: IEC 61508/62626 UK: (after Brexit) US: IEC CN: () JP: IEC SL 3 REQ A REQ B Art5 Art3 Art4 Art 4 Art 3 Art5 Art4 Art 111 REQ D REQ C * Examples Resilience Reliability Security Privacy Safety Interaction and relations 21

22 Capturing of Complicated Claims-Evidence Relationships 22

23 OMG Structured Assurance Case MetaModel Exchange and Composition of Assurance Cases between tools and programs Approved for Public Release; Distribution Unlimited

24 Evidence of Trustworthiness as Assurance Cases Art7 Resilience* 50 Art Art2 Art 4 Reliability* EU: NIS UK: (after Brexit) US:... CN: () JP: analog NIS Art 1 0 Art 2 Art6 Art7 Security* 40 Art1 30 Art Art3 Art 222 Privacy* EU: GDPR UK: (after Brexit) US: CN: () JP: analog GDPR Art Art 99 REQ N Safety* EU: IEC 61508/62626 UK: (after Brexit) US: IEC CN: () JP: IEC SL 3 REQ A REQ B Art5 Art3 Art4 Art 4 Art 3 Art5 Art4 Art 111 REQ D REQ C Evidence-based Assurance Case supporting Resilience claims Evidence-based Assurance Case supporting Reliability claims Evidence-based Assurance Case supporting Security claims Evidence-based Assurance Case supporting Privacy claims Evidence-based Assurance Case supporting Safety claims

30 Relevant Trustworthiness Assurance Standards Assurance Case Standard ISO/IEC :2011 OMG Structured Assurance Case Metamodel (SACM) Standard 2.0 OMG Dependability Assurance Framework for Safety-Sensitive Consumer Devices (DAF) Open Group Dependability through Assurance Standard OMG Threat & Risk Model RFP OMG Cyber Risk Assessment Framework (CRAF) Metamodel RFC Safety and Reliability for UML RFP OMG Automated Source Code Maintainability Measure Standard (ASCMM) OMG Automated Source Code Performance Efficiency Measure Standard (ASCPEM) OMG Automated Source Code Reliability Measure Standard (ASCRM) OMG Automated Source Code Security Measure Standard (ASCSEM) ITU-T Common Vulnerabilities and Exposures (X.1520 CVE) ITU-T Common Vulnerabilities Scoring System (X.1521 CVSS) ITU-T Common Weakness Enumeration (X.1524 CWE) ITU-T Common Weakness Scoring System (X.1525 CWSS) Extensible Configuration Checklist Description Format (XCCDF) ISO/IEC 18180:2013 March 22,

31 Collaboration within the Industrial Internet Consortium IIC Working Groups have individual charters, inter-related outcomes both within the Working Groups and with external organizations. Open Standards Usecases Security Framework New Technologie s Data Reference Architecture Open, Standards, Horizontal Enable & Accelerate Testbeds 2017 MITRE. All rights reserved, all other material used with permission. 31

32 25 Approved Testbeds Approved Testbed Portfolio INFINITE: Dell EMC CM & PM: IBM, NI, SparkCognition Connected Care: Infosys, GE, PTC, RTI, MD PnP Track & Trace: Bosch, Tech Mahindra, Cisco, SAP Factory Operations Visibility & Intelligence: Fujitsu, Cisco Smart Manufacturing Connectivity: TE Connectivity, SAP Smart Asset Outage Management: Genpact, GE, NI Smart Energy Management: Infosys, Schneider Electric, PTC Connected Vehicle Urban Traffic Mgmt: Infosys, RTI, Bosch, Microsoft Intelligent Urban Water Supply: Water & Process Group, Thingswise, CAICT Smart Airline Baggage Management: GE, M2Mi, Oracle, Boeing, Infosys Factory Automation Platform as a Service: Hitachi, Mitsubishi Electric, Intel Asset Efficiency: Infosys, PTC, Bosch, Intel, GE, IBM, NI, Foghorn, KUKA Security Claims Evaluation: Xilinx, UL, Aicas, RTI, Infineon, GMO GlobalSign Smart Supply Chain: Manufacturing: TCS, Cisco, Siemens, Oracle, Infineon, Tego Manufacturing Quality Management: Huawei, Haier Group, China Telcom, CAICT Edge Intelligence: HP, RTI High-Speed Network: GE Microgrid: TRI, NI, Cisco, IBM Industrial Digital Thread: Infosys, GE Precision Crop Management: Infosys Smart Factory Web: KETI, Fraunhofer IOSB Deep Learning Facility: Toshiba, Dell EMC Time Sensitive Networks: Cisco, Bosch, GE, KUKA, NI, TTTech, Intel, Schneider Electric, B&R, Innovasic Smart Water Management: Infosys, GE, EMC, Cisco 2017 MITRE. All rights reserved, all other material used with permission. 6

33 Approved Testbed Portfolio March 22,

34 Collaboration within the Industrial Internet Consortium IIC Working Groups have individual charters, inter-related outcomes both within the Working Groups and with external organizations. Open Standards Usecases Security Framework New Technologie s Data Reference Architecture Open, Standards, Horizontal Enable & Accelerate Testbeds 2017 MITRE. All rights reserved, all other material used with permission. 34

This image cannot currently be displayed.

Technology & Security, and Testbeds Industrial Internet Reference

8 Industrial Internet Security Framework - IISF 1.

0 Industrial Internet Connectivity Framework - IICF 1.

35 This image cannot currently be displayed. This image cannot currently be displayed. This image cannot currently be displayed. The IIC has three primary areas of activity: Community Engagement, Technology & Security, and Testbeds Industrial Internet Reference Architecture - IIRA 1.8 Industrial Internet Security Framework - IISF 1.0 Business Strategy Innovation Framework - BSIF 1.0 Industrial Internet Connectivity Framework - IICF 1.0 Industrial IoT Opportunities for National IoT/IIoT effort alignment? Germany, India, France, Japan, China, US, Russia, Italy, EU, South Korea, Singapore, 2017 MITRE. All rights reserved, all other material used with permission. 35

36 270+ Member Organizations

Introduction of the Industrial Internet Consortium. May 2016

Introduction of the Industrial Internet Consortium May 2016 An Open Membership Consortium now 250 companies strong May 26, 2016 2 IIC Founders, Contributing Members, & Large Industry Members IIC Founding