Abstract:This article considers the design and analysis of multiple moving target defenses for recognizing and isolating attacks on cyber-physical systems. We consider attackers who perform integrity attacks on some set of sensors and actuators in a control system. In such cases, it has been shown that a model aware adversary can carefully design attack vectors to bypass bad data detection and identification filters while causing damage to the control system. To counter such an attacker, we propose the moving target defense which introduces stochastic, time-varying parameters in the control system. The underlying random dynamics of the system limit an attacker's knowledge of the model and inhibit his or her ability to construct stealthy attack sequences. Moreover, the time-varying nature of the dynamics thwarts adaptive adversaries. We explore three main designs. First, we consider a hybrid system where parameters within the existing plant are switched among multiple modes. We demonstrate how such an approach can enable both the detection and identification of malicious nodes. Next, we investigate the addition of an extended system with dynamics that are coupled to the original plant but do not affect the system performance. Here, an attack on the original system will affect the authenticating subsystem and in turn be revealed by a set of sensors measuring the extended plant. Finally, we propose the use of sensor nonlinearities to enhance the effectiveness of the moving target defense. The nonlinear dynamics act to conceal normal operational behavior from an attacker who has tampered with the system state, further hindering an attacker's ability to glean information about the time-varying dynamics. In all cases mechanisms for analysis and design are proposed. Finally, we analyze attack detectability for each moving target defense by investigating expected lower bounds on the detection statistic. Our contributions are also tested via simulation.

On the Performance Degradation of Cyber-Physical Systems under Stealthy Integrity Attacks.

Stealthy Actuator Signal Attacks in Stochastic Control Systems: Performance and Limitations.

Secure Estimation And Event-Triggered Control For Cyber-Physical Systems Based On Intermediate Estimator

Integrity Attacks On Cyber-Physical Systems

The Vulnerability of Cyber-Physical System under Stealthy Attacks.

Performance Analysis for Cyber–physical Systems under Two Types of Stealthy Deception Attacks

Optimal Strictly Stealthy Attack Design on Cyber-Physical Systems: A Data-Driven Approach.

Prescribed Performance Fuzzy Resilient Control for Nonlinear Systems under DoS Attacks

Online Optimization of LTI Systems Under Persistent Attacks: Stability, Tracking, and Robustness

Robust T‐S fuzzy‐model‐based nonfragile sampled‐data control for cyber‐physical systems with stochastic delay and cyber‐attacks

Attacks on Perception-Based Control Systems: Modeling and Fundamental Limits

A Moving Target Defense for Securing Cyber-Physical Systems

Vulnerability Analysis of Nonlinear Control Systems to Stealthy False Data Injection Attacks

An Online Kullback-Leibler Divergence-Based Stealthy Attack Against Cyber-Physical Systems

Optimized Adaptive Fuzzy Security Control of Nonlinear Systems with Prescribed Tracking Performance

Security in Cyber-Physical Systems: Controller Design Against Known-Plaintext Attack

Stabilization of Networked Control Systems with Hybrid-Driven Mechanism and Probabilistic Cyber Attacks.

Application of the unified control and detection framework to detecting stealthy integrity cyber-attacks on feedback control systems

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

An Adaptive Secure Control Scheme for T–S Fuzzy Systems Against Simultaneous Stealthy Sensor and Actuator Attacks

A Zero-stealthy Attack for Sampled-data Control Systems via Input Redundancy