Abstract:This article considers the design and analysis of multiple moving target defenses for recognizing and isolating attacks on cyber-physical systems. We consider attackers who perform integrity attacks on some set of sensors and actuators in a control system. In such cases, it has been shown that a model aware adversary can carefully design attack vectors to bypass bad data detection and identification filters while causing damage to the control system. To counter such an attacker, we propose the moving target defense which introduces stochastic, time-varying parameters in the control system. The underlying random dynamics of the system limit an attacker's knowledge of the model and inhibit his or her ability to construct stealthy attack sequences. Moreover, the time-varying nature of the dynamics thwarts adaptive adversaries. We explore three main designs. First, we consider a hybrid system where parameters within the existing plant are switched among multiple modes. We demonstrate how such an approach can enable both the detection and identification of malicious nodes. Next, we investigate the addition of an extended system with dynamics that are coupled to the original plant but do not affect the system performance. Here, an attack on the original system will affect the authenticating subsystem and in turn be revealed by a set of sensors measuring the extended plant. Finally, we propose the use of sensor nonlinearities to enhance the effectiveness of the moving target defense. The nonlinear dynamics act to conceal normal operational behavior from an attacker who has tampered with the system state, further hindering an attacker's ability to glean information about the time-varying dynamics. In all cases mechanisms for analysis and design are proposed. Finally, we analyze attack detectability for each moving target defense by investigating expected lower bounds on the detection statistic. Our contributions are also tested via simulation.

A Bayesian Nash Equilibrium-Based Moving Target Defense Against Stealthy Sensor Attacks

Think That Attackers Think: Using First-Order Theory of Mind in Intrusion Response System.

A Moving Target Defense for Securing Cyber-Physical Systems

Spatial-Temporal Moving Target Defense: A Markov Stackelberg Game Model

A Dynamic Games Approach to Proactive Defense Strategies against Advanced Persistent Threats in Cyber-Physical Systems

Adaptive Strategic Cyber Defense for Advanced Persistent Threats in Critical Infrastructure Networks

Bayesian hypergame approach to equilibrium stability and robustness in moving target defense

A Moving Target Defense Control Framework for Cyber-Physical Systems

A Factored MDP Approach To Moving Target Defense With Dynamic Threat Modeling and Cost Efficiency

Single Controller Stochastic Games for Optimized Moving Target Defense

Moving Target Defense for Web Applications using Bayesian Stackelberg Games

Game-Theoretic Neyman-Pearson Detection to Combat Strategic Evasion

Asymptotic Security using Bayesian Defense Mechanism with Application to Cyber Deception

Research on Optimal Defense Strategy of Moving Targets Based on Game Theory

Learning Effective Strategies for Moving Target Defense with Switching Costs

Experimental evaluation of sensor attacks and defense mechanisms in feedback systems

Towards a Theory of Moving Target Defense

Strategy Selection for Moving Target Defense in Incomplete Information Game

Real‐time game‐theoretic model predictive control for differential game of target defense

NMPC-Based Cooperative Strategy For A Target Pair To Lure Two Attackers Into Collision

Network Inspection Using Heterogeneous Sensors for Detecting Strategic Attacks