Abstract:Cyber-physical systems (CPSs) automating critical public infrastructure face a pervasive threat of attack, motivating research into different types of countermeasures. Assessing the effectiveness of these countermeasures is challenging, however, as benchmarks are difficult to construct manually, existing automated testing solutions often make unrealistic assumptions, and blindly fuzzing is ineffective at finding attacks due to the enormous search spaces and resource requirements. In this work, we propose active sensor fuzzing , a fully automated approach for building test suites without requiring any a prior knowledge about a CPS. Our approach employs active learning techniques. Applied to a real-world water treatment system, our approach manages to find attacks that drive the system into 15 different unsafe states involving water flow, pressure, and tank levels, including nine that were not covered by an established attack benchmark. Furthermore, we successfully generate targeted multi-point attacks which have been long suspected to be possible. We reveal that active sensor fuzzing successfully extends the attack benchmarks generated by our previous work, an ML-guided fuzzing tool, with two more kinds of attacks. Finally, we investigate the impact of active learning on models and the reason that the model trained with active learning is able to discover more attacks.

Multiple Attacks Detection in Cyber-Physical Systems Using Random Finite Set Theory.

A Labeled RFS-Based Framework for Multiple Integrity Attackers Detection and Identification in Cyber-Physical Systems

A Crowdsensing-based Cyber-physical System for Drone Surveillance Using Random Finite Set Theory

Filter-based Detection and Location of Dynamic Load Altering Attack in Power Cyber-Physical Systems

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

An Ensemble Learning-Based Cyber-Attacks Detection Method of Cyber-Physical Power Systems

Secure Particle Filtering for Cyber-Physical Systems With Binary Sensors Under Multiple Attacks

Constructing Cyber-Physical System Testing Suites Using Active Sensor Fuzzing

Attack Detection In Cyber-Physical Systems Using Particle Filter:An Illustration On Three-Tank System

Data-Driven Attack Detection and Identification for Cyber-Physical Systems under Sparse Sensor Attacks

Resilient Observer-Based Event-Triggered Control for Cyber-Physical Systems under Asynchronous Denial-of-service Attacks

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

An Analysis on Optimal Attack Schedule Based on Channel Hopping Scheme in Cyber-Physical Systems

Attack Detection and Secure State Estimation of Collectively Observable Cyber-Physical Systems Under False Data Injection Attacks

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Optimal Attack Strategies Subject to Detection Constraints Against Cyber-Physical Systems

Observer-Based Dynamic Event-Triggered Control for CPSs Under Multiple Cyber-Attacks

A novel probabilistic modeling for multilateral random attacks in cyber‐physical system reliability analysis

Attack Detection for Cyber-Physical Systems: A Zonotopic Approach

Secure state estimation for cyber physical systems with state delay and sparse sensor attacks

Sparse Undetectable Sensor Attacks Against Cyber-Physical Systems: A Subspace Approach