Network Scheduling for Secure Cyber-Physical Systems
Network Scheduling for Secure Cyber-Physical Systems
复制标题
DOI：
10.1109/rtss.2017.00012
复制
发表时间：
2017-12
期刊：
影响因子：
--
通讯作者：
Vuk Lesi;Ilija Jovanov;Miroslav Pajic
中科院分区：
文献类型：
--
作者：
Vuk Lesi;Ilija Jovanov;Miroslav Pajic
用于在网络物理系统（CPS）中提供针对基于网络的攻击的安全保证的现有设计技术是基于连续使用标准密码工具来确保数据完整性。这与这些系统中的共同资源限制产生了明显的冲突，例如，冗长的消息认证码（MAC）引入了显著的开销。我们提出了一个框架，以确保实时网络消息的时间保证和质量控制（QoC）在基于网络的攻击的存在。我们利用控制系统的物理特性，放松恒定的完整性执法要求，并展示了如何间歇性认证的实时消息的可行性测试的问题可以作为一个混合整数线性规划问题。除了调度一组实时消息与预定义的认证率从QoC的要求，我们展示了如何最佳地提高整个系统的QoC，同时确保所有的实时消息是可验证的。最后，我们介绍了一种有效的运行时带宽分配方法，基于机会调度，以提高QoC。我们评估我们的框架上设计的CAN总线的标准基准，并显示如何安排一个不可行的消息集具有强大的安全保证，如果被控系统的动态考虑到沿着与实时要求。
Existing design techniques for providing security guarantees against network-based attacks in cyber-physical systems (CPS) are based on continuous use of standard cryptographic tools to ensure data integrity. This creates an apparent conflict with common resource limitations in these systems, given that, for instance, lengthy message authentication codes (MAC) introduce significant overheads. We present a framework to ensure both timing guarantees for real-time network messages and Quality-of-Control (QoC) in the presence of network-based attacks. We exploit physical properties of controlled systems to relax constant integrity enforcement requirements, and show how the problem of feasibility testing of intermittently authenticated real-time messages can be cast as a mixed integer linear programming problem. Besides scheduling a set of real-time messages with predefined authentication rates obtained from QoC requirements, we show how to optimally increase the overall system QoC while ensuring that all real-time messages are schedulable. Finally, we introduce an efficient runtime bandwidth allocation method, based on opportunistic scheduling, in order to improve QoC. We evaluate our framework on a standard benchmark designed for CAN bus, and show how an infeasible message set with strong security guarantees can be scheduled if dynamics of controlled systems are taken into account along with real-time requirements.