Abstract:This paper studies novel attack and defense strategies, based on a class of stealthy attacks, namely the zero-dynamics attack (ZDA), for multi-agent control systems. ZDA poses a formidable security challenge since its attack signal is hidden in the null-space of the state-space representation of the control system and hence it can evade conventional detection methods. An intuitive defense strategy builds on changing the aforementioned representation via switching through a set of carefully crafted topologies. In this paper, we propose realistic ZDA variations where the attacker is aware of this topology-switching strategy, and hence employs the following policies to avoid detection: (i) pause, update and resume ZDA according to the knowledge of switching topologies; (ii) cooperate with a concurrent stealthy topology attack that alters network topology at switching times, such that the original ZDA is feasible under the corrupted topology. We first systematically study the proposed ZDA variations, and then develop defense strategies against them under the realistic assumption that the defender has no knowledge of attack starting, pausing, and resuming times and the number of misbehaving agents. Particularly, we characterize conditions for detectability of the proposed ZDA variations, in terms of the network topologies to be maintained, the set of agents to be monitored, and the measurements of the monitored agents that should be extracted, while simultaneously preserving the privacy of the states of the non-monitored agents. We then propose an attack detection algorithm based on the Luenberger observer, using the characterized detectability conditions. We provide numerical simulation results to demonstrate our theoretical findings.

Detection of Deception Attacks on the Backward Channel of Networked Control Systems

Security of networked control systems subject to deception attacks: a survey

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Secure Networked Control Under Deception Attacks

Data-Driven Control for Nonlinear Networked Control Systems under Deception Attacks

Improved Stealthy False Data Injection Attacks in Networked Control Systems

Security Control of Networked Systems with Deception Attacks and Packet Dropouts: A Discrete-Time Approach

Event-Based Finite-Time Security Control for Networked Control Systems with Deception Attacks

Detection of stealthy false data injection attacks against networked control systems via active data modification

Secure Networked Predictive Control Under Deception Attacks

PDDL: Proactive Distributed Detection and Localization Against Stealthy Deception Attacks in DC Microgrids

A Secure Strategy for a Cyber Physical System with Multi-Sensor under Linear Deception Attack.

A Novel Set-Membership Estimation Approach for Preserving Security in Networked Control Systems under Deception Attacks

Security Tracking Control for Discrete-Time Stochastic Delayed Networked Systems with Cyber-Attacks by Dynamic Event-Triggered Approach

I Can Read Your Mind: Control Mechanism Secrecy of Networked Dynamical Systems under Inference Attacks

Novel Stealthy Attack and Defense Strategies for Networked Control Systems

Online Deception Attack Against Remote State Estimation

Dynamic Event‐triggered Networked Predictive Control for Discrete‐time NCSs under Deception Attacks

Application of the unified control and detection framework to detecting stealthy integrity cyber-attacks on feedback control systems

Attack Detection and Distributed Filtering for State-Saturated Systems Under Deception Attack

Adaptive Neural Security Control for Networked Singular Systems Under Deception Attacks