Safety envelope for security
Safety envelope for security
复制标题
确保安全的安全信封
DOI：
10.1145/2566468.2566483
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
S. Seshia
中科院分区：
文献类型：
--
作者：
A. Tiwari;B. Dutertre;Dejan Jovanovic;Thomas de Candia;P. Lincoln;J. Rushby;Dorsa Sadigh;S. Seshia
我们提出了一种检测网络物理系统上传感器欺骗攻击的方法。我们的方法包括两个步骤。在第一步中，我们构造了系统的安全包络。在名义条件下（即没有攻击时），系统始终保持在其安全信封内。在第二步中，我们构建一个攻击检测器：一个与系统同步执行的监视器，每当系统状态超出安全范围时，它就会发出警报。我们使用改进的机器学习程序合成安全信封，该程序应用于从系统收集的数据，当系统未受到攻击时。我们给出的实验结果显示了我们的方法的有效性，并验证了我们在学习过程中引入的几个新特征。
We present an approach for detecting sensor spoofing attacks on a cyber-physical system. Our approach consists of two steps. In the first step, we construct a safety envelope of the system. Under nominal conditions (that is, when there are no attacks), the system always stays inside its safety envelope. In the second step, we build an attack detector: a monitor that executes synchronously with the system and raises an alarm whenever the system state falls outside the safety envelope. We synthesize safety envelopes using a modifed machine learning procedure applied on data collected from the system when it is not under attack. We present experimental results that show effectiveness of our approach, and also validate the several novel features that we introduced in our learning procedure.