Keamanan Hardware Memimpin IIoT dengan Ketahanan Manipulasi dan Perlindungan Kuat
Otomatisasi industri diproyeksikan menjadi segmen biaya terbesar dalam lanskap IoT pada 2019. Pertanyaan kritis bagi setiap produsen adalah: bagaimana kita menjamin kepercayaan perangkat yang menautkan sistem ini ke jaringan? Artikel ini mengulas mengapa keamanan berbasis hardware muncul sebagai solusi paling andal untuk IIoT, memberikan tidak hanya perlindungan yang kuat tetapi juga waktu ke pasar yang lebih cepat, skalabilitas yang lebih besar, dan fleksibilitas manufaktur yang ditingkatkan.
Menurut perkiraan terbaru oleh International Data Corporation (IDC), manufaktur, transportasi, dan utilitas akan mendominasi investasi IoT tahun ini. Pengeluaran global diperkirakan mencapai $745 miliar, dengan manufaktur diskrit ($119 miliar), manufaktur proses ($78 miliar), transportasi ($71 miliar), dan utilitas ($61 miliar) memimpin jalan. Produsen akan fokus pada solusi yang menyederhanakan operasi dan mengelola aset produksi, sementara sektor transportasi akan mengalokasikan lebih dari setengah anggarannya untuk pemantauan freight, diikuti oleh manajemen armada. Utilitas akan memprioritaskan teknologi smart-grid untuk listrik, gas, dan air.
Pengadaan hardware diperkirakan mencapai $250 miliar, sebagian besar didorong oleh $200+ miliar dalam modul dan sensor. Seiring dengan pertumbuhan pasar ini, permukaan ancaman dari serangan siber tumbuh seiring. Integrator sistem harus menerapkan teknologi keamanan dengan cepat, menimbang opsi hardware dan perangkat lunak. Faktor penentu seringkali adalah profil kerentanan dari setiap pendekatan.
Solusi perangkat lunak secara inheren lebih terpapar; penyerang dapat membongkar kode untuk menemukan kelemahan. Sebaliknya, chip keamanan hardware dirancang untuk ketahanan manipulasi, dengan memori terenkripsi, fault‑tolerance, dan eksekusi kode yang terlindungi. Ketika perangkat lunak berjalan pada hardware tersebut, ia mewarisi lingkungan yang dilindungi yang melindungi dari pembacaan, salinan, atau manipulasi.
Apa yang dikatakan standar
Standar industri terkemuka—IEC 62443, NIST, dan Industrial Internet Consortium (IIC)—mewajibkan keamanan hardware untuk tingkat jaminan tertinggi. NIST’s “Platform Firmware Resiliency Guidelines” emphasize that roots of trust (RoTs) and chains of trust (CoTs) must withstand tampering from any software running on the host processor. The guidelines state that any data passed from host software to platform firmware should be treated as untrusted.
RoTs form the foundation of resilience in industrial control systems and anchor the chain of trust. Each successive component collaborates to preserve the trust established by the RoT, enabling secure functions such as device updates. After completing its task, a RoT or CoT may relinquish privileges, or it may pass control to a lower‑trust element.
Because RoTs perform critical security functions, they must be secure by design. Confidence in a RoT hinges on a thorough attack‑surface analysis and effective mitigations. Vendors are responsible for safeguarding RoTs, typically by making them immutable or verifying the integrity and authenticity of any changes before applying updates. RoTs often operate in isolated environments with higher privilege levels or complete their functions before exposure to potential modification.
Offering more than just security
Steve Hanna, Senior Principal at Infineon Technologies, explains why hardware security is not only the most resilient but also delivers added value. “Hardware‑based security brings tamper resistance, accelerated time‑to‑market, scalability, and performance. It also protects against theft and counterfeiting throughout the supply chain,” he says. A dedicated security chip, rigorously tested by independent laboratories and certified by international bodies, can perform cryptographic operations, simplifying design and reducing implementation time from months to weeks.
Haydn Povey, board member of the IoT Security Foundation and CEO of Secure Thingz, stresses the importance of an immutable boot path. “Hardware provides the control needed for a root of trust, auditability, and a secure enclave that can enforce a known good state,” he notes. He adds that a silicon vendor can provision secure elements at wafer level for high volumes, while distributors like Arrow can program secure keys for smaller batches, forming a trusted ecosystem.
Infineon’s Hanna highlights that ready‑made, certified security chips allow designers to embed device authentication, supplier key protection, and other trust functions with minimal effort. This is especially valuable given the steep learning curve of IIoT security.
Chart: Infineon’s OPTIGA product family provides a range of security chips for authentication and other functions. (Source: Infineon Technologies)
Scalability, performance, and manufacturing flexibility
With IIoT adoption accelerating in 2019, time‑to‑market and scalability become critical. Hardware security modules can be tailored to different performance, security, and platform requirements, enabling a single discrete controller to secure an entire product portfolio. Consistent security implementation across multiple devices enhances confidence for customers and regulators alike.
Adding security can impact device performance and power consumption. Hardware solutions excel in secure storage and cryptographic calculations. A tamper‑resistant chip can execute a key operation in a single pass within a protected environment, whereas software implementations may require multiple obfuscation steps, degrading performance and increasing power usage.
Supply‑chain security is another major concern. Devices often receive a unique key pair—public and private—to establish identity and access rights. If a private key is intercepted during manufacturing or shipping, counterfeit devices could infiltrate the network. Hardware security chips provide traceability throughout the value chain, allowing verification of authenticity at each stage and reducing the risk of counterfeiting.
Ultimately, Hanna asserts that hardware security offers significant benefits for IIoT devices and systems. “Even if an attacker gains access, they cannot easily decipher the chip’s operations. Our technology makes it extremely hard to locate or exploit vulnerabilities,” he says.
