Security Against Communication Network Attacks of Cyber-Physical Systems

  • PDF / 1,451,099 Bytes
  • 11 Pages / 595.276 x 790.866 pts Page_size
  • 106 Downloads / 228 Views

DOWNLOAD

REPORT


Security Against Communication Network Attacks of Cyber-Physical Systems Públio Macedo Lima1 · Marcos Vinícius Silva Alves1 · Lilian Kawakami Carvalho1 · Marcos Vicente Moreira1 Received: 3 July 2018 / Revised: 30 August 2018 / Accepted: 3 September 2018 / Published online: 11 September 2018 © Brazilian Society for Automatics–SBA 2018

Abstract Communication networks are commonly used to connect sensors, actuators, and controllers to monitor and control cyberphysical systems (CPS). The use of communication networks increases the vulnerability of the CPS to cyber attacks that can drive the system to reach unsafe states. One of the most powerful cyber attacks is the so-called man-in-the-middle attack, where the intruder can observe, hide, create or replace information in the attacked network channel. In a previous paper, we have introduced the definition of NA-Safe controllability, that is related with the capability of detecting intrusions and preventing damages caused by man-in-the-middle attacks in the sensor and/or control communication channels in supervisory control systems. In this paper, we extend our previous work as follows: (i) we prove the correctness of the NA-Safe controllability verification algorithm; (ii) we show how to implement the security module against cyber attacks; (iii) we show that NA-Safe controllability is a necessary and sufficient condition for the existence of the security module; and (iv) we present a practical example to illustrate the results of the paper. Keywords Cyber-physical systems · Security · Cyber attacks · Discrete-event systems · Automata

1 Introduction Systems that integrate computing and communication capabilities to monitor and control physical processes are known as cyber-physical systems (CPSs) (Baheti and Gill 2011). The increase in the use of communication networks for monitoring and control of physical systems also increases the vulnerability of CPSs to attacks in the network, which shows that the implementation of defense strategies is crucial for the reliable use of networked controlled systems. Several works in the literature present strategies to detect and prevent the effects of cyber attacks considering different approaches (Mo and Sinopoli 2010; Goes et al 2017; Sundaram and Hadjicostis 2011; Pasqualetti et al 2013; Fawzi et al 2014). In the majority of these works, the system is modeled as a continuous-variable dynamic system, and the problem of stealthy deception attacks that interfere with the system state estimation is addressed.

B 1

Marcos Vicente Moreira [email protected] COPPE - Electrical Engineering Program, Universidade Federal do Rio de Janeiro, Cidade Universitária, Ilha do Fundão, Rio de Janeiro, RJ 21.945-970, Brazil

Intrusion detection and prevention of damages caused by attacks in the context of supervisory control of discrete-event systems (DESs) are addressed in Thorsley and Teneketzis (2006) and Su (2018). The main objective of the work proposed in Thorsley and Teneketzis (2006) is to design a supervisor that achieves the specifica