Digital Twins Are the Future, Here Are 5 Ways to Keep Them Secure While Manufacturing Innovation

2022-08-05
关注

As technology continues to revamp existing business models, novel methods of manufacturing and projection are increasingly being used. Digital twins are perhaps the best example of how companies marry technology with the natural world to create innovative solutions. A digital twin is an electronic version of a real-work entity. It allows companies to model business conditions and predict the impact of their choices.

Research by Capgemini reveals that digital twin usage is bound to increase by 36 percent over the next five years. Increased adoption will certainly help enterprises create better products. However, increased use often brings significant security risks.

Related: Why Blockchain and Digital Twins Are Good Partners

Data freely flows between the real-world entity and the digital twin. For instance, manufacturers create data flows between a real-world assembly line and its digital twin. This situation makes digital twins prime targets for malicious hackers who can wreak havoc on enterprise systems.

Here are five ways your company can secure its digital twins while ensuring peak productivity.

Evaluate all security practices

One of the most significant risks to digital twins is the prospect of hacking real-world security lines. For instance, a malicious actor might tap into the data stream between a real-world manufacturing line and its digital twin, damaging any IoT or mechanical elements significantly. To mitigate this risk, companies must review every security process in detail, including access protocols. Companies must analyze who accesses the digital twin and why.

Access management is central to a company's cybersecurity posture. Organizations must take the time to review everything related to it thoroughly, along with checking server security.

The data a digital twin generates will be stored on physical servers. Companies must examine their data pipeline as well. How well are they secured, and are there any gaps in that infrastructure? Connecting the pipeline to prevent rogue access in a malware attack is critical.

Related: Into the Metaverse: How Digital Twins Can Change the Business Landscape

Examine IoT security

Digital twins rely on IoT sensors and other devices in process chains to gather, transmit and analyze data. IoT offers several benefits, but these devices can act as a loophole in security infrastructure. Most IoT devices are not designed with a bigger picture in mind.

For instance, a single IoT device can secure the data it gathers very well. However, manufacturers cannot anticipate how this data will be used and the devices the product will interact with. Thus, they cannot configure the device for network security and leave it up to the user to do so.

Companies must check whether their IoT devices' configurations align with network security practices. Using devices with hardcoded security settings and pre-configured network passwords exposes them to significant risk.

Model security using twins

An under-appreciated area when speaking of digital twin usage is security modeling. While securing the digital twin to prevent real-world impact gains a lot of attention, companies must recognize that they can model attacks on digital twins to assess the impact on real-world systems.

Organizations must run scenarios that model different threats. They'll learn more about their network and its vulnerabilities. Standard cybersecurity measures such as penetration tests and continuous security monitoring allow organizations to attack their systems in a controlled environment.

Related: Five Ways To Protect Your Company Against Cyber Attacks

Companies must follow these tests with a detailed analysis of what happened. Creating a change management plan based on findings is essential to improving a digital twin's security and that of its real-world counterpart.

Check network security

Digital twins are a relatively new concept despite their growing popularity. Many manufacturing networks have not adjusted to their presence, leading to confusing security protocols. For instance, most manufacturers struggle to define where their twin will live on the web and how it will communicate with its real-world counterpart.

Should the twin use communication networks beyond the manufacturer's network when gathering data? How will those communication lines be secured? Answering these questions will reveal gaps in network security processes.

Default security architecture houses twins behind networks following Purdue Enterprise Reference Architecture (PERA) standards. However, as technology has evolved, PERA is not changing fast enough to secure data. PERA places sensors at level zero, barring all network connectivity. This model is unsuited for modern manufacturers.

Another solution is using the air-gap method, where sensors are housed in particular network sections. This keeps network traffic isolated from outside communication channels. However, the result is manual data uploads for analysis, and inevitably, the digital twin falls behind real-world conditions.

Developing network architecture that accounts for modern needs is of the essence. Companies must collaborate with design experts and brainstorm better ways to secure network data.

Related: Why Your Business Growth Depends on IT Infrastructure

Embrace zero trust

One way of solving the network security problem is to embrace zero-trust solutions. As more significant portions of cybersecurity infrastructure move towards automation, zero-trust is quickly emerging as the best solution for sophisticated networks.

A zero-trust system allows devices on a network to communicate seamlessly while validating each other's identities. Zero-trust also helps organizations define activity levels and the degree of data shared. For instance, they can specify the degree of a machine's privileges on a network, preventing unwanted data sharing.

The result is a data footprint that can be controlled, along with risk-based access management. By managing the degree of communication between systems, companies can prevent the spread of malware should any component of a digital twin become infected.

Innovative solutions need robust security

There's no doubt that digital twins can create better manufacturing processes. However, companies must secure data and access before realizing those benefits. Cybersecurity is a business pillar, and it is essential when speaking of digital twins.

参考译文
数字双胞胎是未来,这里有5种方法在制造创新时保证它们的安全
随着技术不断革新现有商业模式,新的制造和投影方法正被越来越广泛地应用。数字孪生也许是最佳示例,展示了企业如何将技术与现实世界结合,以创造创新解决方案。数字孪生是现实世界实体的电子版本,它帮助企业模拟商业状况并预测其决策的影响。Capgemini 的研究显示,未来五年内数字孪生的使用将增长 36%。这种增长肯定有助于企业生产出更优质的产品。然而,使用频率的增加也往往带来显著的安全风险。相关:为什么区块链与数字孪生是理想的合作伙伴 现实世界实体与数字孪生之间数据自由流动。例如,制造商在现实世界中的装配线与其数字孪生之间创建数据流动。这种情况使数字孪生成为恶意黑客的主要攻击目标,他们可能会对企业的系统造成严重破坏。以下是五种方法,可以帮助您的公司在确保生产效率的同时保护数字孪生的安全。评估所有安全措施 数字孪生最大的风险之一是现实世界安全线路受到黑客攻击的可能性。例如,一个恶意行为者可能侵入现实世界制造线与其数字孪生之间的数据流,从而严重破坏任何物联网或机械元件。为了缓解这种风险,企业必须详细审查每一项安全流程,包括访问协议。公司必须分析谁访问了数字孪生,以及为什么访问。访问管理是企业网络安全态势的核心。组织必须花时间全面审查与此相关的一切内容,并检查服务器的安全性。数字孪生生成的数据将存储在物理服务器上。公司还必须审视其数据管道。这些管道的安全性如何?其基础设施中是否存在任何漏洞?将管道连接以防止恶意软件攻击期间的非法访问是至关重要的。相关:进入元宇宙:数字孪生如何改变商业格局 检查物联网安全 数字孪生依赖物联网传感器和其他设备在流程链中收集、传输和分析数据。物联网确实带来了诸多好处,但这些设备也可能成为安全基础设施的漏洞。大多数物联网设备并不是从整体网络安全的角度设计的。例如,某一个物联网设备可能非常安全地保护其收集的数据。然而,制造商无法预测这些数据将如何被使用,以及这些产品将与哪些设备交互。因此,他们无法为设备配置网络安全,而是将此任务留给用户。公司必须检查其物联网设备的配置是否符合网络安全实践。使用固定安全设置和预配置网络密码的设备会暴露于重大风险中。使用孪生进行安全建模 在数字孪生的使用中,经常被忽视的一个领域是安全建模。虽然保护数字孪生以防止对现实世界造成影响受到很多关注,但企业必须认识到,他们可以模拟对数字孪生的攻击,以评估其对现实世界系统的影响。组织必须运行模拟不同威胁的场景。他们将更了解自己的网络及其漏洞。标准的网络安全措施,如渗透测试和持续安全监控,允许组织在受控环境下攻击其系统。公司必须对这些测试进行详细分析,并根据发现结果制定变更管理计划,这对于提高数字孪生及其现实世界对应实体的安全性至关重要。检查网络安全 尽管数字孪生越来越受欢迎,但它仍然是一个相对较新的概念。许多制造网络尚未适应它的存在,从而导致安全协议混乱。例如,大多数制造商难以定义其数字孪生在网上的位置,以及它如何与其现实世界对应实体进行通信。数字孪生在收集数据时是否需要使用制造商网络之外的通信网络?这些通信线路如何加以保护?回答这些问题将揭示网络安全流程中的漏洞。默认的安全架构将数字孪生放置在遵循 Purdue 企业参考架构(PERA)标准的网络之后。然而,随着技术的发展,PERA 并没有快到足以保护数据。PERA 将传感器放置在第零层,完全禁止所有网络连接。这种模式不适合现代制造商。另一种解决方案是使用空气隔离方法,将传感器放置在特定的网络部分。这将网络流量与外部通信信道隔离开来。然而,其结果是需要手动上传数据进行分析,不可避免地导致数字孪生滞后于现实世界情况。开发能够满足现代需求的网络安全架构至关重要。公司必须与设计专家合作,共同探讨更好的网络数据保护方法。相关:为什么你的业务增长依赖于 IT 基础设施 采纳零信任原则 解决网络安全问题的一种方法是采纳零信任解决方案。随着越来越多的网络安全基础设施向自动化转变,零信任正在迅速成为复杂网络的最佳解决方案。零信任系统允许网络上的设备无缝通信,同时验证彼此的身份。零信任还有助于组织定义活动级别和数据共享程度。例如,他们可以指定某个设备在网络中的权限级别,从而防止不必要的数据共享。其结果是可控的数据足迹,以及基于风险的访问管理。通过管理系统之间的通信程度,公司可以在数字孪生的任何组件受到感染时防止恶意软件的扩散。创新解决方案需要强大的安全保障 毫无疑问,数字孪生可以创造更好的制造流程。然而,企业必须在获得这些好处之前确保数据和访问的安全。网络安全是企业的支柱,在涉及数字孪生时尤为重要。
您觉得本篇内容如何
评分

评论

您需要登录才可以回复|注册

提交评论

广告
广告
提取码
复制提取码
点击跳转至百度网盘