Industrial Cyber Shield: Protecting Industrial Networks in the Age of Industry 4.0

Abstract

The transition toward Industry 4.0 exposes SCADA systems to significant cyber-physical risks due to increased remote connectivity. The Industrial Cyber Shield (ICS) project, funded by the National Institute for Insurance against Accidents at Work (INAIL), responds to this challenge through an intrusion response system that is composed of two main modules: a centralized Orchestrator and multiple distributed Shield modules. The Shields are deployed inline to protect Programmable Logic Controllers (PLCs), employing Snort for real-time network analysis and recurrent neural networks for physical process anomaly monitoring. Detected events are transmitted via a Kafka broker to the Orchestrator, which provides automated response instructions in real-time. Experimental validation on a water distribution testbed demonstrates that the architecture introduces negligible latency (less than 1 ms) and maintains limited hardware resource consumption. The system successfully neutralizes simulated attacks while preserving the stringent timing requirements of industrial communications, ensuring both operational transparency and plant safety.