Abstract:Smart manufacturing (SM) systems utilize run-time data to improve productivity via intelligent decision-making and analysis mechanisms on both machine and system levels. The increased adoption of cyber-physical systems in SM leads to the comprehensive framework of cyber-physical manufacturing systems (CPMS) where data-enabled decision-making mechanisms are coupled with cyber-physical resources on the plant floor. Due to their cyber-physical nature, CPMS are susceptible to cyber-attacks that may cause harm to the manufacturing system, products, or even the human workers involved in this context. Therefore, detecting cyber-attacks efficiently and timely is a crucial step toward implementing and securing high-performance CPMS in practice. This paper addresses two key challenges to CPMS cyber-attack detection. The first challenge is distinguishing expected anomalies in the system from cyber-attacks. The second challenge is the identification of cyber-attacks during the transient response of CPMS due to closed-loop controllers. Digital twin (DT) technology emerges as a promising solution for providing additional insights into the physical process (twin) by leveraging run-time data, models, and analytics. In this work, we propose a DT framework for detecting cyber-attacks in CPMS during controlled transient behavior as well as expected anomalies of the physical process. We present a DT framework and provide details on structuring the architecture to support cyber-attack detection. Additionally, we present an experimental case study on off-the-shelf 3D printers to detect cyber-attacks utilizing the proposed DT framework to illustrate the effectiveness of our proposed approach. Note to Practitioners—This work is motivated by developing a general-purpose and extensible digital twin-enabled cyber-attack detection framework for manufacturing systems. Existing works in the field consider specialized attack scenarios and models that may not be extensible in practical manufacturing scenarios. We utilize digital twin (DT) technology as a key enabler to develop a systematic and extensible framework where we identify the abnormality of a resource and detect if the abnormality is due to an attack or an expected anomaly. We provide several remarks on how our proposed framework can extend existing industrial control systems (ICS) and can accommodate further extensions. The presented DTs utilize data-driven machine learning models, physics-based models, and subject matter expert knowledge to perform detection and differentiation tasks in the context of expected anomalies and model-based controllers that control the manufacturing process between multiple setpoints. We utilize a model predictive controller on an off-the-shelf 3D printer to run the process, and stage anomalies and cyber-attacks that are successfully detected by the proposed framework.

Cyber-Physical Taint Analysis in Multi-stage Manufacturing Systems (MMS): A Case Study

An integrated system theoretic process analysis with multilevel flow modeling for the identification of cyber‐physical hazards in a process industry

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

A Petrinet-Based Approach For Supporting Traceability In Cyber-Physical Manufacturing Systems

TaintSQL: Dynamically Tracking Fine-Grained Implicit Flows for SQL Statements

Detecting Cyber-Attacks Against Cyber-Physical Manufacturing System: A Machining Process Invariant Approach

HardTaint: Production-Run Dynamic Taint Analysis via Selective Hardware Tracing

TMAP: A Threat Modeling and Attack Path Analysis Framework for Industrial IoT Systems (A Case Study of IoM and IoP)

MMTD: Multi-stage Moving Target Defense for Security-enhanced D-FACTS Operation

Inference Attack and Privacy Security of Data-driven Industrial Process Monitoring Systems

Multi-stage Moving Target Defense: A Security-enhanced D-FACTS Implementation Approach

Moving Target Defense Approach to Detecting Stuxnet-Like Attacks

Reliability Assessment of Data Storage in Cyber Physical Systems

TaintStream: Fine-Grained Taint Tracking for Big Data Platforms Through Dynamic Code Translation

A Double-Benefit Moving Target Defense Against Cyber–Physical Attacks in Smart Grid

A dynamic taint tracking optimized fuzz testing method based on multi-modal sensor data fusion

Digital Twin-Based Cyber-Attack Detection Framework for Cyber-Physical Manufacturing Systems

Scaling static taint analysis to industrial SOA applications: a case study at Alibaba

Generalized Taint Propagation Model for Access Control in Operation Systems

Sensor Data Protection through Integration of Blockchain and Camouflaged Encryption in Cyber-physical Manufacturing Systems

CPMTD: Cyber-physical moving target defense for hardening the security of power system against false data injected attack