Abstract:The increasing autonomy and connectivity in cyber-physical systems (CPS) come with new security vulnerabilities that are easily exploitable by malicious attackers to spoof a system to perform dangerous actions. While the vast majority of existing works focus on attack prevention and detection, the key question is "what to do after detecting an attack?". This problem attracts fairly rare attention though its significance is emphasized by the need to mitigate or even eliminate attack impacts on a system. In this article, we study this attack response problem and propose novel real-time recovery for securing CPS. First, this work's core component is a recovery control calculator using a Linear-Quadratic Regulator (LQR) with timing and safety constraints. This component can smoothly steer back a physical system under control to a target state set before a safe deadline and maintain the system state in the set once it is driven to it. We further propose an Alternating Direction Method of Multipliers (ADMM) based algorithm that can fast solve the LQR-based recovery problem. Second, supporting components for the attack recovery computation include a checkpointer, a state reconstructor, and a deadline estimator. To realize these components respectively, we propose (i) a sliding-windowbased checkpointing protocol that governs sufficient trustworthy data, (ii) a state reconstruction approach that uses the checkpointed data to estimate the current system state, and (iii) a reachability-based approach to conservatively estimate a safe deadline. Finally, we implement our approach and demonstrate its effectiveness in dealing with totally 15 experimental scenarios which are designed based on 5 CPS simulators and 3 types of sensor attacks.

Optimal Linear Attack in Cyber-Physical Systems with Periodic Detection

Filter-based Detection and Location of Dynamic Load Altering Attack in Power Cyber-Physical Systems

Stealthy Actuator Signal Attacks in Stochastic Control Systems: Performance and Limitations.

Optimal Attack Strategies Subject to Detection Constraints Against Cyber-Physical Systems

Optimal Strictly Stealthy Attack Design on Cyber-Physical Systems: A Data-Driven Approach.

Optimal Stealthy Attack to Remote Estimator for Estimation Error Regulation.

Covert Attack Detection Based on H /H∞ Optimization for Cyber-Physical Systems

Output Feedback Adaptive Fuzzy Inverse Optimal Security Control Against Sensor and Actuator Attacks for Nonlinear Cyber-Physical Systems

Optimal Stealthy Attacks With Energy Constraint Against Remote State Estimation

Real-Time Attack-Recovery for Cyber-Physical Systems Using Linear Approximations

Integrity Attacks On Cyber-Physical Systems

Optimal Attack Strategy Against Fault Detectors for Linear Cyber-Physical Systems

Periodic and dynamic periodic event-triggered control for nonlinear cyber-physical systems under DoS attacks via a hybrid system approach

Resilient Observer-Based Event-Triggered Control for Cyber-Physical Systems under Asynchronous Denial-of-service Attacks

Optimal DoS Attack Policy Against Remote State Estimation

Secure Control for Cyber–Physical Systems Subject to Aperiodic DoS Attacks

An Event-Based Stealthy Attack on Remote State Estimation

Secure state estimation for cyber physical systems with state delay and sparse sensor attacks

Output feedback secure control for cyber-physical systems against sparse sensor attacks

Research on co-design of dual security control and communication for nonlinear CPS with actuator fault and FDI attacks

Dynamic output feedback control for CPSs under transmission delays and sparse malicious attacks