Abstract:This article considers the design and analysis of multiple moving target defenses for recognizing and isolating attacks on cyber-physical systems. We consider attackers who perform integrity attacks on some set of sensors and actuators in a control system. In such cases, it has been shown that a model aware adversary can carefully design attack vectors to bypass bad data detection and identification filters while causing damage to the control system. To counter such an attacker, we propose the moving target defense which introduces stochastic, time-varying parameters in the control system. The underlying random dynamics of the system limit an attacker's knowledge of the model and inhibit his or her ability to construct stealthy attack sequences. Moreover, the time-varying nature of the dynamics thwarts adaptive adversaries. We explore three main designs. First, we consider a hybrid system where parameters within the existing plant are switched among multiple modes. We demonstrate how such an approach can enable both the detection and identification of malicious nodes. Next, we investigate the addition of an extended system with dynamics that are coupled to the original plant but do not affect the system performance. Here, an attack on the original system will affect the authenticating subsystem and in turn be revealed by a set of sensors measuring the extended plant. Finally, we propose the use of sensor nonlinearities to enhance the effectiveness of the moving target defense. The nonlinear dynamics act to conceal normal operational behavior from an attacker who has tampered with the system state, further hindering an attacker's ability to glean information about the time-varying dynamics. In all cases mechanisms for analysis and design are proposed. Finally, we analyze attack detectability for each moving target defense by investigating expected lower bounds on the detection statistic. Our contributions are also tested via simulation.

Restart-Based Security Mechanisms for Safety-Critical Embedded Systems

Restart-Based Fault-Tolerance: System Design and Schedulability Analysis

Exploring the Vulnerability of Deep Reinforcement Learning-based Emergency Control for Low Carbon Power Systems

S3A: Secure System Simplex Architecture for Enhanced Security of Cyber-Physical Systems

FIRED: Frequent Inertial Resets with Diversification for Emerging Commodity Cyber-Physical Systems

A Data-Driven Approach To Preserve Safety and Reference Tracking for Constrained Cyber-Physical Systems Under Network Attacks

A Self-Healing Hardware Architecture for Safety-Critical Digital Embedded Devices

Safety Enhancement for Real-Time Parallel Applications in Distributed Automotive Embedded Systems: A Stable Stopping Approach.

Dynamic Security Management for Real-Time Embedded Applications in Industrial Networks

Failure Mechanism Traceability and Application in Human System Interface of Nuclear Power Plants using RESHA

Establishing Cyber Resilience in Embedded Systems for Securing Next-Generation Critical Infrastructure

Control-Flow Integrity for Real-Time Embedded Systems

Control Behavior Integrity for Distributed Cyber-Physical Systems

Software Enabled Security Architecture for Counteracting Attacks in Control Systems

A Data-Driven Safety Preserving Control Architecture for Constrained Cyber-Physical Systems

Intrusion Detection and Localization for Networked Embedded Control Systems

A data‐driven safety preserving control architecture for constrained cyber‐physical systems

A Moving Target Defense for Securing Cyber-Physical Systems

SAFCM: A Security-Aware Feedback Control Mechanism for Distributed Real-Time Embedded Systems

Realizing a fault-tolerant embedded controller on distributed real-time systems

A Model Based Framework for Testing Safety and Security in Operational Technology Environments