Abstract:Internet of Things (IoT) technologies enable development of reconfigurable manufacturing systems—a new generation of modularized industrial equipment suitable for highly customized manufacturing. Sequential control in these systems is largely based on discrete events, whereas their formal execution semantics is specified as control interpreted Petri nets (CIPN). Despite industry-wide use of programming languages based on the CIPN formalism, formal verification of such control applications in the presence of adversarial activity is not supported. Consequently, in this article, we introduce security-aware modeling and verification techniques for CIPN-based sequential control applications. Specifically, we show how CIPN models of networked industrial IoT controllers can be transformed into time Petri net (TPN)-based models and composed with plant and security-aware channel models in order to enable system-level verification of safety properties in the presence of network-based attacks. Additionally, we introduce realistic channel-specific attack models that capture adversarial behavior using nondeterminism. Moreover, we show how verification results can be utilized to introduce security patches and facilitate design of attack detectors that improve system resiliency and enable satisfaction of critical safety properties. Finally, we evaluate our framework on an industrial case study. Note to Practitioners—Our main goal is to provide formal security guarantees for distributed sequential controllers. Specifically, we target smart automation controllers geared toward Industrial IoT applications that are typically programed in C/C++ and are running applications originally designed in, for example, GRAFCET (IEC 60848)/SFC (IEC 61131-3) automation programming languages. Since existing tools for the design of distributed automation do not support system-level verification of relevant safety properties- we show how security-aware transceiver and communication models can be developed and composed with distributed controller models. Then, we show how existing tools for verification of time Petri nets can be used to verify relevant properties including safety and liveness of the distributed automation system in the presence of network-based attacks. To provide an end-to-end analysis as well as security patching, results of our analysis can be used to deploy suitable firmware updates during the stage when executable code for target controllers (e.g., in C/C++) is generated based on GRAFCET/SFC control models. We also show that security guarantees can be improved as the relevant safety/liveness properties can be verified after corresponding security patches are deployed. Finally, we show applicability of our framework on a realistic distributed pneumatic manipulator.

Run Time Assurance for Safety-Critical Systems: An Introduction to Safety Filtering Approaches for Complex Control Systems

Run Time Assurance for Autonomous Spacecraft Inspection

Searching for Optimal Runtime Assurance via Reachability and Reinforcement Learning

Runtime Safety Assurance Using Reinforcement Learning

Run Time Assurance for Simultaneous Constraint Satisfaction During Spacecraft Attitude Maneuvering

A Universal Framework for Generalized Run Time Assurance with JAX Automatic Differentiation

Comparing Run Time Assurance Approaches for Safe Spacecraft Docking

Increasing dependability by means of model-based acceptance test inside RTOS

Bridging the Gap: Applying Assurance Arguments to MIL-HDBK-516C Certification of a Neural Network Control System with ASIF Run Time Assurance Architecture

Systems Theoretic Process Analysis of a Run Time Assured Neural Network Control System

Safe and Stable Adaptive Control for a Class of Dynamic Systems

Online Model Checking for Dependable Real-Time Systems

The Safety Filter: A Unified View of Safety-Critical Control in Autonomous Systems

Set-Based Adaptive Safety Control

Certified Control: An Architecture for Verifiable Safety of Autonomous Vehicles

Technical-Report: Automating Recoverability Proofs for Cyber-Physical Systems with Runtime Assurance Architectures

Event-Triggered Control for Safety-Critical Systems With Unknown Dynamics

Security Analysis for Distributed IoT-Based Industrial Automation

Safe Reinforcement Learning via Formal Methods: Toward Safe Control Through Proof and Learning

Synthesis and verification of robust-adaptive safe controllers

Statistical verification of autonomous system controllers under timing uncertainties