Abstract:Control and communication technologies are key building blocks of cyber-physical systems (CPSes) that can improve the efficiency of the physical processes. However, they also make a CPS vulnerable to cyberattacks that can cause disruptions or even severe damage. This article focuses on one particular type of CPS cyberattack, namely the time delay attack (TDA), which exploits vulnerabilities in the communication channels to cause potentially serious harm to the system. Much work proposed for TDA detection is tested offline only and under strong assumptions. In order to construct a practical solution to deal with real-world scenarios, we propose a deep learning-based method to detect and characterize TDA. Specifically, we design a hierarchical long short-term memory model to process raw data streams from relevant CPS sensors online and continually monitor embedded signals in the data to detect and characterize the attack. Moreover, various strategies of interpreting the outputs of the model are proposed, which allow the user to tune the performance based on different objectives. We evaluate our model on two representative types of CPS, namely power plant control system (PPCS) and automatic generation control (AGC).Code and dataset can be found at: https://github.com/prakharg24/tda For TDA detection, our solution achieves an accuracy of 92% in PPCS, compared with 81% by random forests (RFs) and 72% by k-nearest neighbours (kNNs). For AGC, our solution achieves 98% accuracy, compared with 74% by RFs and 71% by kNNs. It also reduces the mean absolute error in the delay value characterization from about six to two seconds in the PPCS, and from about three seconds to half a second in the AGC, with about 3x to 4x shorter reaction latency in both systems.

TFDPM: Attack Detection for Cyber-Physical Systems with Diffusion Probabilistic Models

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Multiple Attacks Detection in Cyber-Physical Systems Using Random Finite Set Theory.

Learning-Based Simultaneous Detection and Characterization of Time Delay Attack in Cyber-Physical Systems

Differential Evolution-Based Three Stage Dynamic Cyber-Attack of Cyber-Physical Power Systems

On Feasibility of Coordinated Time-Delay and False Data Injection Attacks on Cyber–Physical Systems

CPMTD: Cyber-physical moving target defense for hardening the security of power system against false data injected attack

Coordinated Cyber-Attack Detection Model of Cyber-Physical Power System Based on the Operating State Data Link

Temporal false data injection attack and detection on cyber‐physical power system based on deep reinforcement learning

Real-time Cyber-Physical Security Solution Leveraging an Integrated Learning-Based Approach

Data-Driven Measurement Tampering Detection Considering Spatial-Temporal Correlations

A Diffusion Model Based on Network Intrusion Detection Method for Industrial Cyber-Physical Systems

Detection of Cyber-Attacks in a Discrete Event System Based on Deep Learning

Fast Attack Detection for Cyber-Physical Systems Using Dynamic Data Encryption

Practical Cyber Attack Detection With Continuous Temporal Graph in Dynamic Network System

Attack Detection In Cyber-Physical Systems Using Particle Filter:An Illustration On Three-Tank System

Energy Balance Based Attack Detection for Cyber Physical Systems

Real-Time Detection of Cyber-Physical False Data Injection Attacks on Power Systems

Challenge Collapsar (CC) Attack Traffic Detection Based on Packet Field Differentiated Preprocessing and Deep Neural Network

Improved Detection of Four Attacks Based on Particle Method.

Attack Intention Oriented Dynamic Risk Propagation of Cyberattacks on Cyber-Physical Power Systems