Double layer blockchain-assisted trusted data flow model for industrial control systems

Xiangzhen Peng, Chengliang Zheng, Yidi Wang, Xiaohui Cui and Zhidong Shen

Reliability Engineering and System Safety, 2025, vol. 260, issue C

Abstract: With the development of information technology (IT), the blurred network boundary between the Operational Technology (OT) network and the IT network poses a higher risk of cyber-attacks on the flow of data in Industrial Control System (ICS). Deep isolation of ICS, enhanced data access control in ICS, and proactive defense against cyber-attacks in ICS can help achieve the secure flow of highly sensitive data in ICS. This article proposes a dual-layer blockchain-assisted data flow protection framework for ICS, driven by blockchain, and conducts simulation and analysis. Firstly, OT-blockchain and IT-blockchain were designed to redefine the network boundary of ICS. Secondly, an identity-assisted authentication mechanism based on Bloom filters and trusted databases was designed to rapidly identify dishonest nodes. Then, an ICS-RBAC zero-trust access control mechanism based on RBAC was designed to ensure the security of the OT blockchain and achieve zero-trust data exchange between the IT-blockchain and ICS physical devices. And, an active defense mechanism for ICS was designed based on the principle of the heartbeat mechanism. Finally, model analysis and simulation verification are conducted. The results indicate that this study can achieve trusted data flow in ICS and fine-grained zero-trust access control, providing security guarantees.

Keywords: Industrial control system; Blockchain; Zero-trust access control strategy; Active defense; Cyber-attack defense (search for similar items in EconPapers)
Date: 2025
References: Add references at CitEc
Citations:

Downloads: (external link)
http://www.sciencedirect.com/science/article/pii/S0951832025002145
Full text for ScienceDirect subscribers only

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eee:reensy:v:260:y:2025:i:c:s0951832025002145

DOI: 10.1016/j.ress.2025.111013

Access Statistics for this article

Reliability Engineering and System Safety is currently edited by Carlos Guedes Soares

More articles in Reliability Engineering and System Safety from Elsevier
Bibliographic data for series maintained by Catherine Liu ().