A schedule randomization policy to mitigate timing attacks in WirelessHART networks

  • PDF / 4,278,980 Bytes
  • 38 Pages / 439.37 x 666.142 pts Page_size
  • 116 Downloads / 182 Views

DOWNLOAD

REPORT


A schedule randomization policy to mitigate timing attacks in WirelessHART networks Ankita Samaddar1   · Arvind Easwaran1 · Rui Tan1

© Springer Science+Business Media, LLC, part of Springer Nature 2020

Abstract Industrial control systems consist of large-scale wireless sensor-actuator networks (WSAN) that control the physical plant. The communications between the sensors and the actuators need to be reliable and guaranteed within strict deadlines for safe operation of all the system components in industrial setups. WirelessHART is the most suitable and widely adopted WSAN standard that serves as the medium of communication in industries. To satisfy deadlines of real-time flows in WirelessHART networks, the centralized network manager decides the communication schedule during network initialization. The same schedule repeats every hyperperiod. The repetitive nature of the communication slots over every hyperperiod makes the system vulnerable to timing attacks which can eventually disrupt the safety of the system. To mitigate such attacks, we propose SlotSwapper, a moving target defense mechanism that randomizes the communication slots over a hyperperiod schedule without violating the feasibility constraints of real-time flows in WirelessHART networks. We show that SlotSwapper is optimal for single-channel WirelessHART network with real-time harmonic flows. We extensively evaluated our algorithm with 4800 flow sets over 100 Tmote sky motes in Cooja simulator. We use Prediction Probability of slots of a schedule to measure the security provided by SlotSwapper. We use Kullback–Leibler divergence to measure the divergence of our solution w.r.t. a truly random solution. Keywords  Schedule · Randomization · Security · WirelessHART​

* Ankita Samaddar [email protected] Arvind Easwaran [email protected] Rui Tan [email protected] 1



School of Computer Science and Engineering, Nanyang Technological University, Singapore, Singapore

13

Vol.:(0123456789)



Real-Time Systems

1 Introduction Cyber-physical systems (CPS) cover a large spectrum of today’s life. A large class of CPS are governed by strict timing requirements and are referred to as real-time CPS. One such real-time CPS is the industrial control systems that monitor and control the production lines in the manufacturing plants. Rapid advancement of technology and application of automation in these industrial setups have resulted in constant increase in the number of devices. To support more devices and to cope up with frequent changes in the network topology due to addition (removal) of devices to (from) the network, the communication infrastructure in these setups are switching from wired to wireless communication. Among the existing wireless sensor network (WSN) standards, WirelessHART is best suited for the industrial control systems due to its reliable TDMA-based schedule, centralized architecture, multi-channel support, channel hopping, redundancy in routes, and spatial re-use of channels  (Chenyang et  al. 2016). As a result, WirelessHART standard has