Abstract:Cyberphysical systems (CPSs) refer to the embedding of widespread sensing, networking, computation, and control into physical spaces with the goal of making them safer, more efficient, and reliable. Driven by the miniaturization and integration of sensing, communication, and computation in cost-efficient devices, CPSs are bound to transform industries such as aerospace, transportation, built environments, energy, health care, and manufacturing, to name a few. This great opportunity, unfortunately, is matched by even greater challenges. Taming the complexity of design and analysis of these systems poses a fundamental problem as a new paradigm is needed to bridge various scientific domains, which, through the years, have developed significantly different formalisms and methodologies. In addition, while the use of dedicated communication networks has so far sheltered systems from the outside world, use of off-the-shelf networking and computing, combined with the unattended operation of a plethora of devices, provides several opportunities for malicious entities to inject attacks on CPSs. A wide variety of motivations exists for launching an attack on CPSs, ranging from economic reasons, such as obtaining a financial gain, all the way to terrorism, for instance, threatening an entire population by manipulating life-critical resources. Any attack on safety-critical CPSs may significantly hamper the economy and lead to the loss of human lives. While the threat of attacks on CPSs tends to be underplayed at times, the Stuxnet worm provided a clear example of the possible future to come. This malware, targeting a uranium enriching facility in Iran, managed to reach the supervisory control and data acquisition (SCADA) system controlling the centrifuges used in the enrichment process. Stuxnet modified the control system, increasing pressure in the centrifuges in a first version of the worm and spinning centrifuges in an erratic fashion in a second version. As a result, Stuxnet caused significant damage to the plant [1]. For details, see "The Stuxnet Attack".

S3A: Secure System Simplex Architecture for Enhanced Security of Cyber-Physical Systems

Analysis of Malware-Induced Cyber Attacks in Cyber-Physical Power Systems

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Physical Authentication of Control Systems Designing Watermarked Control Inputs to Detect Counterfeit Sensor Outputs

Control Behavior Integrity for Distributed Cyber-Physical Systems

TICS: Trusted Industry Control System Based on Hardware Security Module

Cyber-physical System Security for Networked Industrial Processes.

Cybersafety: A System-theoretic Approach to Identify Cyber-vulnerabilities & Mitigation Requirements in Industrial Control Systems

You Can't Always Check What You Wanted: Selective Checking and Trusted Execution to Prevent False Actuations in Cyber-Physical Systems

Software Enabled Security Architecture for Counteracting Attacks in Control Systems

Moving Target Defense Approach to Detecting Stuxnet-Like Attacks

A Data-Driven Safety Preserving Control Architecture for Constrained Cyber-Physical Systems

Examining Cybersecurity of Cyberphysical Systems for Critical Infrastructures Through Work Domain Analysis

Automated Malware Design for Cyber Physical Systems

Restart-Based Security Mechanisms for Safety-Critical Embedded Systems

A Unified Architectural Approach for Cyberattack-Resilient Industrial Control Systems

Secure Control for Cyber-Physical Systems under Malicious Attacks

A data‐driven safety preserving control architecture for constrained cyber‐physical systems

A Partition-Driven Integrated Security Architecture for Cyber-Physical Systems

Security Control of Cyber–Physical Systems under Cyber Attacks: A Survey

The Vulnerability of Cyber-Physical System under Stealthy Attacks.