Abstract:Cyber-physical systems (CPS) play a pivotal role in numerous critical real-world applications that have stringent requirements for safety. To enhance the CPS resiliency against attacks, redundancy can be integrated in real-time controller implementations by designing strategies that switch among multiple controllers. However, existing switching strategies typically overlook remediation measures for compromised controllers, opting instead to simply exclude them. Such a solution reduces the CPS redundancy since only a subset of controllers are used. To address this gap, this work proposes a multi-controller switching strategy with periodic re-initialization to remove attacks. Controllers that finish re-initialization can be reused by the switching strategy, preserving the CPS redundancy and resiliency. The proposed switching strategy is designed to ensure that at each switching moment, a controller that has just completed re-initialization is available, minimizing the likelihood of compromise. Additionally, the controller's working period decreases with the number of involved controllers, reducing the controller's exposure time to attacks. An anomaly detector is used to detect CPS attacks during the controller's working period. Upon alarm activation, the current control signal is set to a predefined value, and a switch to an alternative controller occurs at the earliest switching moment. Our switching strategy is shown to be still effective even if the anomaly detector fails to detect (stealthy) attacks.

Exploring The Resilience of Control Execution Skips against False Data Injection Attacks

Skip to Secure: Securing Cyber-physical Control Loops with Intentionally Skipped Executions

Adaptive control for cyber-physical systems under man-in-the-middle attacks with false data injections

Data-driven Control Against False Data Injection Attacks

Detection‐based resilient control for cyber‐physical systems against two‐channel false data injection attacks

Online Data-driven Control Against False Data Injection Attacks

Adaptive Security Control against False Data Injection Attacks in Cyber-Physical Systems

Multi-Objective False Data Injection Attacks of Cyber–Physical Power Systems

Resilient Observer-Based Event-Triggered Control for Cyber-Physical Systems under Asynchronous Denial-of-service Attacks

On the Stability of Cyber-physical Systems Under False Data Injection Attacks

Event-based secure control for cyber-physical systems against false data injection attacks

Secure Control Against Multiplicative and Additive False Data Injection Attacks

Research on cyber-physical system control strategy under false data injection attack perception

Defense Optimization in Power Systems against False Data Injection Attacks

Adaptive security control of time-varying constraints nonlinear cyber-physical systems with false data injection attacks

A predefined-time resilient control for cyber-physical systems against false data injection attacks*

Event-Triggered Adaptive Fixed-Time Secure Control for Nonlinear Cyber-Physical System With False Data-Injection Attacks

Output-Based Secure Control under False Data Injection Attacks

Revisiting Dynamic Scheduling of Control Tasks: A Performance-Aware Fine-Grained Approach

Adaptive resilient control for cyber-physical systems against unknown injection attacks in sensor networks

Combining Switching Mechanism with Re-Initialization and Anomaly Detection for Resiliency of Cyber-Physical Systems