A Novel EDGE SIEM for Industrial IoT Flows Within 5G Private Networks

IIoT (Industrial Internet of Things) has been the object of numerous exploration and innovation in the upcoming years, especially thanks to the recent development and emergence of 5G-capable networks for multiple frequency spectrum such as EMBB (Enhanced Mobile Broadband), URLLC (Ultra Reliable Low Latency Communications) and mMTC (Massive Machine Type Communication). The latter is tending to be used in industrial ecosystems to replace older technologies such as LoRaWAN, and thus opening up new ways of connecting entire infrastructures. This new type of ecosystems will create new kind of challenges, especially in regard of cybersecurity. In this paper, we will investigate new solutions for industrial cybersecurity with SIEMs (Security Information and Event Management), for private 5G networks. This investigation will include possible problems encountered between the usage of old, none secure industrial protocol stacks and the continuous increase of cyber-attacks at the Radio Acess Network level. To validate our results, we examine in detail how the new generation of SIEMs can be deployed for an efficient detection and pre-emptive problem resolution at the EDGE level. For this study, a test bed has been developed relying on sovereign private cloud infrastructure to reproduce life-like scenarios and traffic. Furthermore, this study tackles the academic standpoint, but also gives an industrial analysis through the possible solutions currently available for N6 interface monitoring needs.