Abstract:Modern industrial automation supported by Cyber–Physical Systems (CPSs) requires high flexibility, which is achieved through increased interconnection between modules. This interconnection introduces a layer of symmetry into the design and operation of CPSs, balancing the distribution of tasks and resources across the system and streamlining the flow of information. However, this adaptability also exposes control systems to security threats, particularly through novel communication links that are vulnerable to cyberattacks. Traditional strategies may have limitations in these applications. This research proposes a design approach for control applications supported by CPSs that incorporates cyberattack detection and tolerance strategies. Using a modular and adaptive approach, the system is partitioned into microservices for scalability and resilience, allowing structural symmetry to be maintained. Schedulability assessments ensure that critical timing constraints are met, improving overall system symmetry and performance. Advanced cyberattack detection and isolation systems generate alarms and facilitate rapid response with replicas of affected components. These replicas enable the system to recover from and tolerate cyberattacks, maintaining uninterrupted operation and preserving the balanced structure of the system. In conclusion, the proposed approach addresses the security challenges in CPS-based control applications and provides an integrated and robust approach to protect industrial automation systems from cyber threats. A case study conducted at a juice production facility in Colima, México, demonstrated how the architecture can be applied to complex processes such as pH control, from simulation to industrial implementation. The study highlighted a plug-and-play approach, starting with component definitions and relationships, and extending to technology integration, thereby reinforcing symmetry and efficiency within the system.

Integrating Cyber-Attack Defense Techniques into Real-Time Cyber-Physical Systems

DoS Attacks in Electrical Cyber-Physical Systems: A Case Study Using TrueTime Simulation Tool

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Real-Time Attack-Recovery for Cyber-Physical Systems Using Linear Approximations

ROP Defense Using Trie Graph for System Security.

Risk Assessment and Defense Resource Allocation of Cyber-Physical Distribution Systems under Denial-of-Service Attacks

HRPDF: A Software-Based Heterogeneous Redundant Proactive Defense Framework for Programmable Logic Controller.

Constructing Cyber-Physical System Testing Suites Using Active Sensor Fuzzing

Design Procedure for Real-Time Cyber–Physical Systems Tolerant to Cyberattacks

Active Security Control Approach Against DoS Attacks in Cyber-Physical Systems

On Feasibility of Coordinated Time-Delay and False Data Injection Attacks on Cyber–Physical Systems

You Can't Always Check What You Wanted: Selective Checking and Trusted Execution to Prevent False Actuations in Cyber-Physical Systems

Resilient Control of Cyber-Physical Systems Against Denial-of-Service Attacks

Research on Dual Security Control for a Non-Linear CPS with Multi-Objective Constraints under DoS Attack and Actuator Fault: An Active-Passive Attack-Tolerant Approach

A Moving Target Defense Control Framework for Cyber-Physical Systems

Adaptive Resilient Control of Cyber-Physical Systems Under Actuator and Sensor Attacks

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

Event-triggered resilient control for cyber-physical system under denial-of-service attacks

Defending Cyber-physical Systems through Reverse Engineering Based Memory Sanity Check

Event-triggered prescribed performance adaptive secure control for nonlinear cyber physical systems under denial-of-service attacks

Runtime Protection of Real-time Critical Control Applications against Known Threats