International Journal of Electrical and Computer Engineering (IJECE) Vol. 15, No. 1, February 2025, pp. 1089~1098 ISSN: 2088-8708, DOI: 10.11591/ijece.v15i1.pp1089-1098 1089 Journal homepage: http://ijece.iaescore.com Fortifying industrial cybersecurity: a novel industrial internet of things architecture enhanced by honeypot integration Oumaima El Kouari 1 , Saiida Lazaar 1 , Tarik Achoughi 3 1 Mathematics, Computer Science and Applications Team, National School of Applied Sciences-ENSA of Tangier, Abdelmalek Essaadi University, Tetouan, Morocco 2 National Institute of Applied Sciences, Lyon University, Lyon, France Article Info ABSTRACT Article history: Received Apr 17, 2024 Revised Aug 25, 2024 Accepted Sep 3, 2024 The industrial internet of things (IIoT) has significantly transformed the industrial sectors by connecting devices, machines, and systems to enhance automation, efficiency, and decision-making. However, the increased interconnectivity also poses significant security challenges because IIoT devices control critical infrastructures and processes. Our work presents an implementation of a robust industrial cybersecurity strategy with a segmented network architecture, collaborative efforts between information technology (IT) and operational technology (OT) teams for enhanced resilience and effectiveness, and vertical honeypots across all Industry 4.0 levels integrated with Wazuh for log transmission and proactive threat response, alongside Snort intrusion detection system (IDS) monitoring network traffic. Additionally, we reinforce our architecture by Wazuh with Elasticsearch and Kibana as a security information and event management solution, facilitating data analysis and compliance enforcement through custom rulesets and cybersecurity threat intelligence (CTI) integration, with automatic updates for continuous adaptation against emerging threats. Keywords: Cyber-attacks Honeypot Industrial internet of things Industry 4.0 Intrusion detection system Threat intelligence This is an open access article under the CC BY-SA license. Corresponding Author: Oumaima El Kouari Mathematics, Computer Science and Applications Team, National School of Applied Sciences-ENSA of Tangier, Abdelmalek Essaadi University Tetouan, Morocco Email: oumaima.elkouari@gmail.com 1. INTRODUCTION Industrial internet of things (IIoT), refers to the network of interconnected devices, sensors, machines, and systems within industrial environments such as manufacturing plants, power plants, and logistics facilities [1]. IIoT leverages the power of internet connectivity to enable the exchange of data and communication between these devices, leading to increased automation, operational efficiency, and better decision-making. In addition to this, IIoT specifically focuses on the application of internet of things (IoT) technologies in industrial sectors such as manufacturing, energy, transportation, and agriculture. IIoT aims to improve industrial processes, efficiency, and productivity by leveraging IoT technologies. It involves connecting machines, equipment, sensors, and other industrial devices to the internet to gather data, monitor performance, enable predictive maintenance, optimize operations, and facilitate intelligent decision-making in industrial settings. IIoT combines a collection of smart devices and sensors that are embedded within industrial equipment, capturing data such as temperature, pressure, vibration, energy consumption, and more. The IIoT relies on robust and secure communication networks, encompassing wired connections, wireless protocols (such as Wi-Fi, Bluetooth, Zigbee, or cellular networks), and specialized industrial communication protocols (like Modbus or OPC-UA), to facilitate seamless data exchange between devices, sensors, and backend systems.