Abstract:This article considers the design and analysis of multiple moving target defenses for recognizing and isolating attacks on cyber-physical systems. We consider attackers who perform integrity attacks on some set of sensors and actuators in a control system. In such cases, it has been shown that a model aware adversary can carefully design attack vectors to bypass bad data detection and identification filters while causing damage to the control system. To counter such an attacker, we propose the moving target defense which introduces stochastic, time-varying parameters in the control system. The underlying random dynamics of the system limit an attacker's knowledge of the model and inhibit his or her ability to construct stealthy attack sequences. Moreover, the time-varying nature of the dynamics thwarts adaptive adversaries. We explore three main designs. First, we consider a hybrid system where parameters within the existing plant are switched among multiple modes. We demonstrate how such an approach can enable both the detection and identification of malicious nodes. Next, we investigate the addition of an extended system with dynamics that are coupled to the original plant but do not affect the system performance. Here, an attack on the original system will affect the authenticating subsystem and in turn be revealed by a set of sensors measuring the extended plant. Finally, we propose the use of sensor nonlinearities to enhance the effectiveness of the moving target defense. The nonlinear dynamics act to conceal normal operational behavior from an attacker who has tampered with the system state, further hindering an attacker's ability to glean information about the time-varying dynamics. In all cases mechanisms for analysis and design are proposed. Finally, we analyze attack detectability for each moving target defense by investigating expected lower bounds on the detection statistic. Our contributions are also tested via simulation.

An Analysis of the Kill Chain for Time-Critical Strike

Research on System Concept and Key Technologies of Space-based Anti-satellite Kinetic Missile

Technical Aspects of Cyber Kill Chain

Speed Kills: Analyzing the Deployment of Conventional Ballistic Missiles

Optimization of Anti-Air Defense Missile System Based on Kill Chain

Standard Target Materials for Autonomous Precision Strike Weapons

A Moving Target Defense for Securing Cyber-Physical Systems

A New Approach for Target Capability Assessment and Selection in Complex Situations

Defender-Attacker Decision Tree Analysis to Combat Terrorism

A Novel Two-Staged Decision Support based Threat Evaluation and Weapon Assignment Algorithm, Asset-based Dynamic Weapon Scheduling using Artificial Intelligence Techinques

Moving Target Defense for Service-oriented Mission-critical Networks

Firing Command Generation for Close-In Weapon System to Intercept High-Speed Targets

Defender Policy Evaluation and Resource Allocation Using MITRE ATT&CK Evaluations Data

SIMULATION MODEL OF A MISSILE STRIKE

Tecnicas Avanzadas de Ciberseguridad: Integracion y Evolucion de la Kill Chain en Diversos Escenarios

Development of a System Vulnerability Analysis Tool for Assessment of Complex Mission Critical Systems

Modeling Attack, Defense and Threat Trees and the Cyber Kill Chain, ATT&CK and STRIDE Frameworks as Blackboard Architecture Networks

Strategy alternatives for homeland air and cruise missile defense

Dynamic Weapon-Target Assignment for Active Protection of Aircraft

A Moving Target Defense Control Framework for Cyber-Physical Systems

Understanding and Assessment of Mission-Centric Key Cyber Terrains for joint Military Operations