Abstract:<p>Resilience is a critical criterion to evaluate a networked system including discrete-event systems (DESs). This research touches upon the supervisory control problem of a DES modeled with labeled Petri nets under malicious attacks. Attacks on a system can be categorized into actuator attacks and sensor attacks. The former may cause an actuator to fail to execute the commands issued from a supervisor that enforces a specification. The latter may attack a sensor to corrupt an observation (i.e., a sequence of observable transition labels) by different types of attacks such as insertion, removal, and replacement of transition labels. For actuator attacks, if we can detect them and disable some particular controllable transition labels before reaching a state that does not satisfy the specification, then we can find a modified supervisor to enforce the specification. For sensor attacks, we assume that, once a time, only one attack can be carried out, i.e., the attacker does not change the attack during an observation corruption. Given a specification, we consider in a plant model any two feasible transition sequences that share the same corrupted observation under attacks. It is shown that there exists a supervisor to enforce the specification if the one-step controllable extensions of the two transition sequences either satisfy or violate the specification simultaneously. To this end, a novel structure, namely a product observation reachability graph constructed from a plant and its specification, is proposed to decide the existence of such a supervisor by checking whether each state in the graph satisfies a particular condition. The application of the reported methods is demonstrated through examples.</p>

Monitors under Attack: Preliminary Results on Robustness Analysis and Synthesis

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

A Dynamic Event-Triggered Secure Monitoring and Control for a Class of Discrete-Time Markovian Jump Systems: A Plug-and-Play Architecture

SoK: A Minimalist Approach to Formalizing Analog Sensor Security.

Network Security Situation Awareness for Industrial Control System under Integrity Attacks

Supervisor Synthesis to Thwart Cyber Attack with Bounded Sensor Reading Alterations

Stealthy Actuator Signal Attacks in Stochastic Control Systems: Performance and Limitations.

Synthesis of Successful Actuator Attackers on Supervisors

Supervisory control of discrete-event systems under external attacks

Detection and Mitigation of Classes of Attacks in Supervisory Control Systems

Sensor Deception Attacks Against Initial-State Privacy in Supervisory Control Systems

Synthesis of Covert Sensor Attacks in Networked Discrete-Event Systems with Non-FIFO Channels

Attack-Resilient Supervisory Control of Discrete-Event Systems: A Finite-State Transducer Approach

Attacks on Data-Driven Process Monitoring Systems: Subspace Transfer Networks

Resilient Observer-Based Event-Triggered Control for Cyber-Physical Systems under Asynchronous Denial-of-service Attacks

Adaptive Event-Driven Control for Continuous Positive Stochastic Jump Models with Cyber Attacks

Detecting Integrity Attacks on Control Systems Using Robust Physical Watermarking.

A Method to Enhance SCADA Systems Survivability with Exogenous Monitors

Supervisor Obfuscation Against Actuator Enablement Attack

Cyber-Physical Attacks in Power Networks: Models, Fundamental Limitations and Monitor Design

Mismatched Control and Monitoring Frequencies: Vulnerability, Attack, and Mitigation