Abstract:Cyber-physical systems (CPSs) are increasingly threatened by stealthy false data injection (SFDI) attacks, which compromise system integrity by manipulating control signals and introducing false sensor data. These attacks are particularly challenging due to their diversity and often indistinguishable nature. In response to this issue, our work uncovers the fundamental causes behind SFDI attacks in linear time-invariant (LTI) systems and elucidates the principles enabling their stealth. We present a novel virtual extended system framework designed to eliminate strictly stealthy attacks within the entire CPS. Utilizing deep reinforcement learning (DRL) methodologies, we pioneer the use of detection results for real-time SFDI attack classification. Through numerical simulations, we validate our proposed method’s effectiveness, demonstrating a classification accuracy of no less than 95%. Notably, even in scenarios where attackers manage to breach the framework partially, our method continues to provide a reliable success rate in SFDI attack detection and classification, showcasing its robustness and efficacy. Note to Practitioners—Cyber-physical systems (CPSs), a critical component of modern industries, are becoming increasingly susceptible to stealthy false data injection (SFDI) attacks. These attacks compromise system integrity by subtly manipulating control signals and feeding false sensor data, making them challenging to detect. Our research presents an innovative framework that uses deep reinforcement learning techniques to detect and classify these elusive attacks, achieving a classification accuracy of over 95%. The information on SFDI attack categories, ascertained by this method, lays the groundwork for the development of subsequent defence strategies. For professionals working in sectors reliant on CPSs, such as manufacturing, healthcare, and transportation, this framework offers a promising tool to enhance system security. Even in scenarios where the system has been partially compromised, our method continues to provide reliable detection and classification, underscoring its robustness and practical utility. The system remains effective despite full breach attempts on specific attack types, ensuring resilience against a broad range of SFDI attacks. In conclusion, our research offers a substantial advancement in protecting CPSs against cyber threats.

TICPS: A trustworthy collaborative intrusion detection framework for industrial cyber–physical systems

Insights on Cooperative Defense for Multiple Industrial Security Technologies

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Real-Time Intrusion Detection Based on Decision Fusion in Industrial Control Systems

Toward security monitoring of industrial Cyber-Physical systems via hierarchically distributed intrusion detection

DeepFed: Federated Deep Learning for Intrusion Detection in Industrial Cyber–Physical Systems

Stealthy False Data Injection Attacks Detection and Classification in Cyber-Physical Systems Using Deep Reinforcement Learning

Leveraging Data Fitting and Trust Assessment to Improve the Security of Industrial Networks

CyberDefender: an integrated intelligent defense framework for digital-twin-based industrial cyber-physical systems

Assessment of Cyber-Physical Intrusion Detection and Classification for Industrial Control Systems

Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning

A Deep Learning-based Framework for Conducting Stealthy Attacks in Industrial Control Systems

Optimizing intrusion detection in industrial cyber-physical systems through transfer learning approaches

Privacy-Preserving Federated Learning-Based Intrusion Detection Technique for Cyber-Physical Systems

Generative AI and Cognitive Computing-Driven Intrusion Detection System in Industrial CPS

A Diffusion Model Based on Network Intrusion Detection Method for Industrial Cyber-Physical Systems

Anomaly-Based Intrusion Detection System for Cyber-Physical System Security

Towards Low-Barrier Cybersecurity Research and Education for Industrial Control Systems

An Analytics Framework for Heuristic Inference Attacks against Industrial Control Systems

On Feasibility of Coordinated Time-Delay and False Data Injection Attacks on Cyber–Physical Systems

A Security Framework in Digital Twins for Cloud-based Industrial Control Systems: Intrusion Detection and Mitigation