Abstract:This article considers the design and analysis of multiple moving target defenses for recognizing and isolating attacks on cyber-physical systems. We consider attackers who perform integrity attacks on some set of sensors and actuators in a control system. In such cases, it has been shown that a model aware adversary can carefully design attack vectors to bypass bad data detection and identification filters while causing damage to the control system. To counter such an attacker, we propose the moving target defense which introduces stochastic, time-varying parameters in the control system. The underlying random dynamics of the system limit an attacker's knowledge of the model and inhibit his or her ability to construct stealthy attack sequences. Moreover, the time-varying nature of the dynamics thwarts adaptive adversaries. We explore three main designs. First, we consider a hybrid system where parameters within the existing plant are switched among multiple modes. We demonstrate how such an approach can enable both the detection and identification of malicious nodes. Next, we investigate the addition of an extended system with dynamics that are coupled to the original plant but do not affect the system performance. Here, an attack on the original system will affect the authenticating subsystem and in turn be revealed by a set of sensors measuring the extended plant. Finally, we propose the use of sensor nonlinearities to enhance the effectiveness of the moving target defense. The nonlinear dynamics act to conceal normal operational behavior from an attacker who has tampered with the system state, further hindering an attacker's ability to glean information about the time-varying dynamics. In all cases mechanisms for analysis and design are proposed. Finally, we analyze attack detectability for each moving target defense by investigating expected lower bounds on the detection statistic. Our contributions are also tested via simulation.

Digital Twins for Moving Target Defense Validation in AC Microgrids

Moving Target Defense for Robust Monitoring of Electric Grid Transformers in Adversarial Environments

Enhancing Cyber-Physical Resiliency of Microgrid Control under Denial-of-Service Attack with Digital Twins

Moving-Target Defense for Detecting Coordinated Cyber-Physical Attacks in Power Grids

A Double-Benefit Moving Target Defense Against Cyber–Physical Attacks in Smart Grid

Moving-Target Defense Against Cyber-Physical Attacks in Power Grids via Game Theory

Stealth Attacks Against Moving Target Defense for Smart Grid

Improvise, Adapt, Overcome: Dynamic Resiliency Against Unknown Attack Vectors in Microgrid Cybersecurity Games

Robust Moving Target Defence Against False Data Injection Attacks in Power Grids

A FDI Attack-Resilient Distributed Secondary Control Strategy for Islanded Microgrids

Converter-Based Moving Target Defense Against Deception Attacks in DC Microgrids

Resilient Synchronization Strategy for AC Microgrids under Cyber Attacks

Constrained-Differential-Evolution-Based Stealthy Sparse Cyber-Attack and Countermeasure in an AC Smart Grid

A Moving Target Defense for Securing Cyber-Physical Systems

PDDL: Proactive Distributed Detection and Localization Against Stealthy Deception Attacks in DC Microgrids

Survey of Moving Target Defense in Power Grids: Design Principles, Tradeoffs, and Future Directions

Trust-Based Detection and Mitigation of Cyber Attacks in Distributed Cooperative Control of Islanded AC Microgrids

A Decentralized Fault-Tolerant Control for DC Microgrids Against Disturbances and Actuator Faults

Enhanced Hidden Moving Target Defense in Smart Grids

Secondary Defense Strategies of AC Microgrids Against Generally Unbounded Attacks