A Multilayered Framework for Process Mining in Industrial IoT Security

The Internet of Things (IoT) has emerged as one of the most prominent technologies in the world in recent years. In general, IoT refers to a connection of physical devices or objects with sensors, software and other technologies that collect, transmit and share data. Industrial IoT (IIoT) is a subset of IoT that utilises these devices to enhance manufacturing and industrial processes. The role of IoT/IIoT is to improve efficiency, productivity, business operations, and customer satisfaction while at the same time reducing business, operational and labour costs. As industrial operations become increasingly prevalent in the form of complex processes, process mining (PM) can be utilised in diverse domains such as manufacturing, healthcare, education, and energy to further enhance IIoT system benefits. However, there is a lack of research on PM usage for enhancing cybersecurity in IIoT environments. This paper, therefore, focuses on the implementation of PM for IoT security. It demonstrates how existing IIoT logs can be used to offer PM-based services to various organisations by constructing a generic framework. In addition, a case study relating the developed generic framework to a real industrial process is presented.