Abstract:Closed-loop control systems employ continuous sensing and actuation to maintain controlled variables within preset bounds and achieve the desired system output. Intentional disturbances in the system, such as in the case of cyberattacks, can compromise reachability of control goals, and in several cases jeopardize safety. The increasing connectivity and exposure of networked control to external networks has enabled attackers to compromise these systems by exploiting security vulnerabilities. Attacks against safety-critical control loops can not only drive the system over a trajectory different from the desired, but also cause fatal consequences to humans. In this paper we present a physics-based Intrusion Detection System (IDS) aimed at increasing the security in control systems. In addition to conventional process state estimation for intrusion detection, since the controller cannot be trusted, we introduce a controller state estimator. Additionally, we make our detector context-aware by utilizing sensor measurements from other control loops, which allows to distinguish and characterize disturbances from attacks. We introduce adaptive thresholding and adaptive filtering as means to achieve context-awareness. Together, these methodologies allow detection and localization of attacks in closed-loop controls. Finally, we demonstrate feasibility of the approach by mounting a series of attacks against a networked Direct Current (DC) motor closed-loop speed control deployed on an ECU testbed, as well as on a simulated automated lane keeping system. Among other application domains, this set of approaches is key to support security in automotive systems, and ultimately increase road and passenger safety.

A code-driven tutorial on encrypted control: From pioneering realizations to modern implementations

Privacy and Security of Cyberphysical Systems

Demo Abstract: an Industrial Control System Testbed for the Encrypted Controller

Comparison of encrypted control approaches and tutorial on dynamic systems using Learning With Errors-based homomorphic encryption

Optimizing encrypted control algorithms for real-time secure control

A Software-Defined Architecture for Control of IoT Cyberphysical Systems

Privacy-Enabled Secure Iterative Learning Control of Networked Systems subject to Disclosure Attacks

Comparison of encrypted control approaches and tutorial on dynamic systems using LWE-based homomorphic encryption

Skip to Secure: Securing Cyber-physical Control Loops with Intentionally Skipped Executions

Security of networked control systems subject to deception attacks: a survey

A Tutorial on Detecting Security Attacks on Cyber-Physical Systems

Security Solutions for Local Wireless Networks in Control Applications based on Physical Layer Security

Hardware-Assisted Security in Electronic Control Units: Secure Automotive Communications by Utilizing One-Time-Programmable Network on Chip and Firewalls

A Brief Survey of Recent Advances and Methodologies for the Security Control of Complex Cyber-Physical Networks

Strategies for Integrating Controls Flows in Software-Defined In-Vehicle Networks and Their Impact on Network Security

Towards Provably Secure Encrypted Control Using Homomorphic Encryption

I Can Read Your Mind: Control Mechanism Secrecy of Networked Dynamical Systems under Inference Attacks

Resilient Control of Cyber-Physical Systems Against Denial-of-Service Attacks

The Trade-off Between Security and Performance of Encrypted Networked Control Systems.

A Verifiable Computing Scheme for Encrypted Control Systems

Intrusion Detection and Localization for Networked Embedded Control Systems