Abstract:A fundamental problem at the intersection of process control and operations is the design of detection schemes monitoring a process for cyberattacks using operational data. Multiplicative false data injection (FDI) attacks modify operational data with a multiplicative factor and could be designed to be detection evading without in-depth process knowledge. In a prior work, we presented a control mode switching strategy that enhances the detection of multiplicative FDI attacks in processes operating at steady state (when process states evolve within a small neighborhood of the steady state). Control mode switching on the attack-free process at steady-state may induce transients and generate false alarms in the detection scheme. To minimize false alarms, we subsequently developed a control mode switch-scheduling condition for processes with an invertible output matrix. In the current work, we utilize a reachable set-based detection scheme and use randomized control mode switches to augment attack detection capabilities. The detection scheme eliminates potential false alarms occurring from control mode switching, even for processes with a non-invertible output matrix, while the randomized switching helps bolster the confidentiality of the switching schedule, preventing the design of a detection-evading "smart" attack. We present two simulation examples to illustrate attack detection without false alarms, and the merits of randomized switching (compared with scheduled switching) for the detection of a smart attack.

Two-Channel False Data Injection Attacks Against Output Tracking Control of Networked Systems

Detection of stealthy false data injection attacks against networked control systems via active data modification

Analysis of Stealthy False Data Injection Attacks Against Networked Control Systems: Three Case Studies

Model-free False Data Injection Attack in Networked Control Systems: A Feedback Optimization Approach

Data-driven Control Against False Data Injection Attacks

Detection‐based resilient control for cyber‐physical systems against two‐channel false data injection attacks

Improved Stealthy False Data Injection Attacks in Networked Control Systems

False Data Injection Attacks in Control Systems

Adaptive sliding-mode tracking control of networked control systems with false data injection attacks

Stealthy FDI attacks on modified Kalman filtering in complex networks with non-Gaussian-Lévy noise

Model-free predictive control of nonlinear systems under False Data Injection attacks

Event-based secure control for cyber-physical systems against false data injection attacks

Model-Free Adaptive Control for a Class of MIMO Nonlinear Cyberphysical Systems Under False Data Injection Attacks

Fuzzy Adaptive Finite-Time Resilient Control Against Unknown False Data Injection Attacks for MIMO Nonlinear Switched Systems With Unknown Dead Zone

Finite-Time Attack Detection for Nonlinear Complex Cyber-Physical Networks under False Data Injection Attacks

State Estimation under Joint False Data Injection Attacks: Dealing with Constraints and Insecurity

Attacks Detection and Security Control for Cyber-Physical Systems under False Data Injection Attacks

Detection of Multiplicative False Data Injection Cyberattacks on Process Control Systems via Randomized Control Mode Switching

A Resilient Distributed Kalman Filtering Under Bidirectional Stealthy Attack

Fuzzy adaptive resilient decentralized control of nonlinear interconnected cyber-physical systems under false data injection attacks

Event-Based Optimal Stealthy False Data-Injection Attacks Against Remote State Estimation Systems