Hardware Security Modules for Secure Communications in the Industrial Internet of Things

作者：Shahid Latif, Djamel Djenouri, Zeba Idrees, Jawad Ahmad, Qurat-ul-ain Mastoi, Zhuo Zou · 发表于：IEEE Communications Surveys & Tutorials · 年份：2025 · DOI：10.1109/comst.2025.3600161 · 被引用次数：7 · 研究领域：Physical Unclonable Functions (PUFs) and Hardware Security、Cybersecurity and Information Systems、Advanced Malware Detection Techniques

The Industrial Internet of Things (IIoT) offers transformative potential but introduces critical security risks, including unauthorized access, data breaches, and privacy compromise. Hardware Security Modules (HSMs) have emerged as robust solutions to protect IIoT ecosystems by enabling secure cryptographic operations, providing tamperresistant hardware and creating trusted execution environments. This work presents the first comprehensive review of HSMs tailored for secure IIoT communications, addressing their architectural foundations, operational mechanisms, and deployment scenarios. It first outlines the IIoT security landscape and HSM deployment architectures, including cloud-based, edge-integrated, and distributed models. Next, cutting-edge HSM implementations are analyzed, emphasizing their effectiveness in authentication, secure communication protocols, and physical tamper resistance. It then explores attack surfaces and vulnerabilities, such as firmware exploits, logical flaws, and network-based threats, along with mitigation strategies. Case studies from smart manufacturing, energy grids, and logistics demonstrate practical HSM applications, while a comparative evaluation assesses commercial and open-source solutions based on performance, compliance, and scalability. Emerging trends such as AI-driven threat detection, post-quantum cryptography, and decentralized HSMs are also discussed. Finally, key challenges are highlighted, including latency in real-time systems,...