Abstract:This paper studies novel attack and defense strategies, based on a class of stealthy attacks, namely the zero-dynamics attack (ZDA), for multi-agent control systems. ZDA poses a formidable security challenge since its attack signal is hidden in the null-space of the state-space representation of the control system and hence it can evade conventional detection methods. An intuitive defense strategy builds on changing the aforementioned representation via switching through a set of carefully crafted topologies. In this paper, we propose realistic ZDA variations where the attacker is aware of this topology-switching strategy, and hence employs the following policies to avoid detection: (i) pause, update and resume ZDA according to the knowledge of switching topologies; (ii) cooperate with a concurrent stealthy topology attack that alters network topology at switching times, such that the original ZDA is feasible under the corrupted topology. We first systematically study the proposed ZDA variations, and then develop defense strategies against them under the realistic assumption that the defender has no knowledge of attack starting, pausing, and resuming times and the number of misbehaving agents. Particularly, we characterize conditions for detectability of the proposed ZDA variations, in terms of the network topologies to be maintained, the set of agents to be monitored, and the measurements of the monitored agents that should be extracted, while simultaneously preserving the privacy of the states of the non-monitored agents. We then propose an attack detection algorithm based on the Luenberger observer, using the characterized detectability conditions. We provide numerical simulation results to demonstrate our theoretical findings.

Robust Optimal Network Topology Switching for Zero Dynamics Attacks

Novel Stealthy Attack and Defense Strategies for Networked Control Systems

Stochastic Stability Analysis of Networked Control Systems with Random Cryptographic Protection under Random Zero-Measurement Attacks

Security Control for Networked Control Systems with Randomly Occurring Integrity Check Protection Subject to Randomly Occurring Zero-Value Attacks

Novel Defense Strategy Against Zero-Dynamics Attack in Multi-Agent Systems

Strategic Topology Switching for Security-Part II: Detection & Switching Topologies

Strategic Topology Switching for Security-Part I: Consensus & Switching Times

On Zero Dynamics and Controllable Cyber-Attacks in Cyber-Physical Systems and Dynamic Coding Schemes as Their Countermeasures

Zero-dynamics Attack, Variations, and Countermeasures

Regret-Optimal Defense Against Stealthy Adversaries: A System Level Approach

Distributed Finite-Time ADP-Based Optimal Secure Control for Complex Interconnected Systems Under Topology Attacks

Model-free Event-Triggered Resilient Control for Discrete-Time Nonlinear Systems under Sparse Actuator Attacks Via GrHDP

Quantized Zero Dynamics Attacks against Sampled-data Control Systems

Zero-Sum Game-Based Optimal Secure Control under Actuator Attacks

A Novel Topology Link-Controlling Approach for Active Defense of a Node in a Network

Optimal Joint Control and Triggering Strategies Against Denial of Service Attacks: A Zero-Sum Game

The system dynamics analysis, resilient and fault-tolerant control for cyber-physical systems

Dynamic Output Feedback Control of Cyber-Physical Systems Under DoS Attacks

Nonzero-Dynamics Stealthy Attack And Its Impacts Analysis In Dc Microgrids

Security switching control of cyber-physical system with incremental quadratic constraints under denial-of-service attack

Online Optimization of LTI Systems Under Persistent Attacks: Stability, Tracking, and Robustness