Abstract:Cyberspace intrusions targeting modern industrial cyber-physical systems (ICPSs) are considered highly persistent and stealthy penetration processes that can result in catastrophic consequences for industrial infrastructures. Existing studies predominantly concentrated on detection and defense strategies for specific stages of intrusions without much knowledge of underlying system operational mechanisms, characteristics and evolutionary patterns. In this paper, we present a novel approach that integrates statistical knowledge and game theory to establish a comprehensive security model covering various aspects, including anomaly detection, behavioral analysis, strategy generation and impact assessment. Specifically, a statistical model, i.e. Poisson intrusion model (PIM), is developed to characterize the probabilistic properties of intrusions by leveraging knowledge of their occurrence patterns and frequencies. A Bayesian inference-based model is proposed to analyze the intrusion behaviors for anomaly detection. Then, by integrating statistical knowledge of intrusions and detections, a Markov game model is formulated to characterize the interactive actions and strategies between attackers and defenders throughout the intrusion process. Further, the cross-layer impact is assessed by quantifying the potential consequences under corresponding cyber security conditions in terms of production performance degradation and unintended incident losses. Finally, the proposed approach is validated through extensive experiments for power plant operational scenarios.

A Game-Theoretic Approach to Cross-Layer Security Decision-Making in Industrial Cyber-Physical Systems.

A Game-Theoretic Method for Cross-Layer Stochastic Resilient Control Design in CPS.

A Game-Theoretic Method for Resilient Control Design in Industrial Multi-Agent CPSs with Markovian and Coupled Dynamics

Stackelberg Interdependent Security Game in Distributed and Hierarchical Cyber-Physical Systems

Cross‐layer Security Design for Encrypted CPS Based on Modified Security Signalling Game

Bayesian and Stochastic Game Joint Approach for Cross-Layer Optimal Defensive Decision-Making in Industrial Cyber-Physical Systems

Game Theoretical Dynamic Cybersecurity Defense Strategy for Electrical Cyber Physical Systems

Game-Theoretic Model for Optimal Cyber-Attack Defensive Decision-Making in Cyber-Physical Power Systems

A Risk-Based Dynamic Decision-Making Approach for Cybersecurity Protection in Industrial Control Systems

Statistical Knowledge and Game-Theoretic Integrated Model for Cross-Layer Impact Assessment in Industrial Cyber-Physical Systems

Game-Theoretic Methods for Robustness, Security, and Resilience of Cyberphysical Control Systems: Games-in-Games Principle for Optimal Cross-Layer Resilient Control Systems

A Game-Theoretic Model On Coalitional Attacks In Smart Grid

Cyber-Attacks on Remote State Estimation in Industrial Control System: A Game-Based Framework

Quantitative Cyber-Physical Security Analysis Methodology for Industrial Control Systems Based on Incomplete Information Bayesian Game

Game-Theoretic Analysis of Attack and Defense in Cyber-Physical Network Infrastructures

Cyber-Physical System Defense Decision-Making Based on Priori Knowledge of Traffic Anomaly Detection

Optimal Attack Strategy Selection of an Autonomous Cyber-Physical Micro-Grid Based on Attack-Defense Game Model

A Game-Theoretic Approach of Cyberattack Resilient Constraint-Following Control for Cyber–physical Systems

A Parallel Game Model-Based Intrusion Response System for Cross-Layer Security in Industrial Internet of Things

A Hybrid Game Theory and Reinforcement Learning Approach for Cyber-Physical Systems Security

A Game-Theoretic Approach to Secure Estimation and Control for Cyber-Physical Systems with a Digital Twin