Cybersecurity in ICT Supply Chains: Key Challenges and a Relevant Architecture.

Area of Science:

• Computer Science
• Cybersecurity
• Network Engineering

Background:

• Modern supply chains rely on complex Internet of Things (IoT) systems.
• These systems operate on distributed, dynamic, and potentially insecure Information and Communication Technology (ICT) infrastructures.
• Ensuring cyber resilience and trusted supply chains is a critical challenge.

Purpose of the Study:

• To propose a coordinated framework for cyber resilience provisioning in IoT-driven supply chains.
• To address security and privacy across the entire supply chain, from IoT devices to connecting infrastructure.
• To present FISHY, a preliminary architecture for orchestrating security services.

Main Methods:

• Designing a framework to manage risks, vulnerabilities, accountability, and mitigation strategies.
• Leveraging programmable networks and IT infrastructure for seamless security service orchestration.
• Developing real-time and proactive security service instantiation.

Main Results:

• FISHY architecture is presented as a solution to orchestrate existing and advanced security appliances.
• The architecture integrates security and privacy functionalities, including metrics and assurance.
• A business analysis and use cases demonstrate the potential benefits of FISHY adoption.

Conclusions:

• FISHY offers a novel approach to enhance cyber resilience in complex ICT supply chains.
• The architecture facilitates the integration and orchestration of diverse security services.
• FISHY adoption promises significant technical and business advantages for trusted supply chains.