{"id":"https://openalex.org/W4416640834","doi":"https://doi.org/10.1016/j.procs.2025.10.258","title":"Securing the Industrial Internet of Things: Threats, Vulnerabilities, and Recommendations","display_name":"Securing the Industrial Internet of Things: Threats, Vulnerabilities, and Recommendations","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416640834","doi":"https://doi.org/10.1016/j.procs.2025.10.258"},"language":"en","primary_location":{"id":"doi:10.1016/j.procs.2025.10.258","doi":"https://doi.org/10.1016/j.procs.2025.10.258","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.258","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1016/j.procs.2025.10.258","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072827243","display_name":"Akzhibek Amirova","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":true,"raw_author_name":"Akzhibek Amirova","raw_affiliation_strings":["Astana IT University, Astana, 010000, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University, Astana, 010000, Kazakhstan","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025919195","display_name":"Laura Aldasheva","orcid":"https://orcid.org/0000-0001-6815-1989","observed_orcids":["https://orcid.org/0000-0001-6815-1989","https://orcid.org/0009-0002-0869-9066"]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Laura Aldasheva","raw_affiliation_strings":["Astana IT University, Astana, 010000, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University, Astana, 010000, Kazakhstan","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047799734","display_name":"Aliya Abdiraman","orcid":"https://orcid.org/0000-0001-5494-0223","observed_orcids":["https://orcid.org/0000-0001-5494-0223"]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Aliya Abdiraman","raw_affiliation_strings":["Astana IT University, Astana, 010000, Kazakhstan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University, Astana, 010000, Kazakhstan","institution_ids":["https://openalex.org/I4405257690"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5072827243"],"corresponding_institution_ids":["https://openalex.org/I4405257690"],"apc_list":null,"apc_paid":null,"fwci":6.0924,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.96539502,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"272","issue":null,"first_page":"625","last_page":"630"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.26440000534057617,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.26440000534057617,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.24619999527931213,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.15839999914169312,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/industrial-internet-of-things","display_name":"Industrial Internet of Things","score":0.9909999966621399},{"id":"https://openalex.org/keywords/threat-model","display_name":"threat model","score":0.7639999985694885},{"id":"https://openalex.org/keywords/vulnerability-computer-security","display_name":"vulnerability (computer security)","score":0.8640000224113464},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"risk assessment","score":0.6269999742507935},{"id":"https://openalex.org/keywords/asset-classification","display_name":"asset classification","score":0.8820000290870667},{"id":"https://openalex.org/keywords/attack-vectors","display_name":"attack vectors","score":0.9490000009536743},{"id":"https://openalex.org/keywords/cyber-physical-systems","display_name":"cyber-physical systems","score":0.7979999780654907},{"id":"https://openalex.org/keywords/industry-4-0","display_name":"Industry 4.0","score":0.9190000295639038},{"id":"https://openalex.org/keywords/industrial-digitalization","display_name":"industrial digitalization","score":0.8370000123977661},{"id":"https://openalex.org/keywords/incident-response","display_name":"incident response","score":0.8560000061988831},{"id":"https://openalex.org/keywords/employee-training","display_name":"employee training","score":0.671999990940094},{"id":"https://openalex.org/keywords/data-protection","display_name":"data protection","score":0.6869999766349792},{"id":"https://openalex.org/keywords/kazakhstan","display_name":"Kazakhstan","score":0.5809999704360962}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7868000268936157},{"id":"https://openalex.org/C76178495","wikidata":"https://www.wikidata.org/wiki/Q4808784","display_name":"Asset (computer security)","level":2,"score":0.7717000246047974},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7138000130653381},{"id":"https://openalex.org/C202839342","wikidata":"https://www.wikidata.org/wiki/Q60740481","display_name":"Industrial Internet","level":3,"score":0.6948000192642212},{"id":"https://openalex.org/C25516864","wikidata":"https://www.wikidata.org/wiki/Q1665949","display_name":"Interconnectivity","level":2,"score":0.5896999835968018},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5235000252723694},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4546999931335449},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.436599999666214},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.40869998931884766},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.39430001378059387},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3831999897956848},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.3828999996185303},{"id":"https://openalex.org/C2777986313","wikidata":"https://www.wikidata.org/wiki/Q1661989","display_name":"Industry 4.0","level":2,"score":0.3799000084400177},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.36570000648498535},{"id":"https://openalex.org/C14224292","wikidata":"https://www.wikidata.org/wiki/Q13600188","display_name":"Conceptual framework","level":2,"score":0.3456000089645386},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.33809998631477356},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.3273000121116638},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3255999982357025},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.32199999690055847},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.31299999356269836},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.29280000925064087},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C2777834853","wikidata":"https://www.wikidata.org/wiki/Q96776939","display_name":"Liability","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2702000141143799},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.2685000002384186},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.26669999957084656},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.2630000114440918},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.2540000081062317},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.25360000133514404},{"id":"https://openalex.org/C2781133158","wikidata":"https://www.wikidata.org/wiki/Q1088669","display_name":"Survivability","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.procs.2025.10.258","doi":"https://doi.org/10.1016/j.procs.2025.10.258","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.258","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.procs.2025.10.258","doi":"https://doi.org/10.1016/j.procs.2025.10.258","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.258","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":1.0}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322726","display_name":"Ministry of Education and Science of the Republic of Kazakhstan","ror":"https://ror.org/03pj6ge82"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2792715678","https://openalex.org/W2811266402","https://openalex.org/W2894644265","https://openalex.org/W2921920205","https://openalex.org/W2978805838","https://openalex.org/W2985193296","https://openalex.org/W2996391599","https://openalex.org/W3044855437","https://openalex.org/W3116720533","https://openalex.org/W4387880846","https://openalex.org/W4390886812","https://openalex.org/W4409814304","https://openalex.org/W4411248324","https://openalex.org/W4412593751"],"related_works":["https://openalex.org/W4388638017","https://openalex.org/W4362498860","https://openalex.org/W4414788197","https://openalex.org/W4398328337","https://openalex.org/W4385241589","https://openalex.org/W4381952972","https://openalex.org/W4415818594","https://openalex.org/W4400450393","https://openalex.org/W7125595256","https://openalex.org/W3129061468"],"abstract_inverted_index":{"The":[0,71,168],"Industrial":[1],"Internet":[2],"of":[3,10,21,33,46,50,62,94,107,176,187],"Things":[4],"(IIoT)":[5],"is":[6,102],"a":[7,43,59],"key":[8],"component":[9],"Industry":[11],"4.0,":[12],"enabling":[13],"intelligent":[14],"automation,":[15],"real-time":[16],"data":[17,160],"exchange,":[18],"and":[19,31,64,87,96,122,131,145,159,165,178],"integration":[20],"cyber-physical":[22],"systems":[23,189],"in":[24,53,112],"industrial":[25,113,136],"environments.":[26],"However,":[27],"the":[28,47,105,116,174,184],"increasing":[29],"complexity":[30],"interconnectivity":[32],"IIoT":[34,54,63,100,188],"infrastructures":[35],"introduce":[36],"significant":[37],"cybersecurity":[38,151],"challenges.":[39],"This":[40],"paper":[41],"provides":[42],"comprehensive":[44],"overview":[45],"current":[48],"state":[49],"information":[51],"security":[52,110,143,180],"systems.":[55],"It":[56],"begins":[57],"with":[58],"conceptual":[60],"analysis":[61,130],"its":[65],"distinctions":[66],"from":[67,77,134,156],"general":[68],"IoT":[69],"applications.":[70],"study":[72],"reviews":[73],"recent":[74],"scientific":[75],"research":[76],"2018":[78],"to":[79,99,162,171,173,183],"2023,":[80],"focusing":[81],"on":[82,128],"threat":[83],"models,":[84],"asset":[85,120],"classification,":[86],"risk":[88],"assessment":[89],"frameworks.":[90],"A":[91],"detailed":[92],"taxonomy":[93],"threats":[95],"vulnerabilities":[97],"specific":[98],"environments":[101],"presented,":[103],"emphasizing":[104],"insufficiency":[106],"traditional":[108],"IT":[109],"strategies":[111,181],"settings.":[114],"Furthermore,":[115],"article":[117],"analyzes":[118],"protected":[119],"categories":[121],"their":[123],"corresponding":[124],"attack":[125],"vectors.":[126],"Drawing":[127],"literature":[129],"empirical":[132],"observations":[133],"Kazakhstan\u2019s":[135],"digitalization":[137],"initiatives,":[138],"this":[139],"work":[140],"identifies":[141],"pressing":[142],"gaps":[144],"proposes":[146],"practical":[147],"recommendations":[148],"for":[149],"enhancing":[150],"at":[152],"various":[153],"stages":[154],"-":[155],"system":[157],"design":[158],"protection":[161],"incident":[163],"response":[164],"personnel":[166],"training.":[167],"findings":[169],"aim":[170],"contribute":[172],"development":[175],"robust":[177],"adaptive":[179],"tailored":[182],"unique":[185],"needs":[186]},"counts_by_year":[{"year":2026,"cited_by_count":8}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2025-11-25T00:00:00"}