SURE: A Modeling and Simulation Integration Platform for Evaluation of Secure and Resilient Cyber–Physical Systems
SURE: A Modeling and Simulation Integration Platform for Evaluation of Secure and Resilient Cyber–Physical Systems
复制标题
DOI：
10.1109/jproc.2017.2731741
复制
发表时间：
2018
影响因子：
20.6
通讯作者：
X. Koutsoukos;G. Karsai;Aron Laszka;H. Neema;Bradley Potteiger;P. Völgyesi;Yevgeniy Vorobeychik;J. Sztipanovits
中科院分区：
文献类型：
--
作者：
X. Koutsoukos;G. Karsai;Aron Laszka;H. Neema;Bradley Potteiger;P. Völgyesi;Yevgeniy Vorobeychik;J. Sztipanovits
信息和通信技术的指数级增长引起了人类工程系统方式的深刻转变，导致了涉及物理和网络组件的强集成和协调的闭环系统的出现，通常称为网络物理系统（CPS）。由于这些颠覆性变化，物理系统现在可以通过网络空间受到攻击，网络空间也可以通过物理手段受到攻击。本文将安全性和弹性视为系统动力学和计算架构交叉产生的系统属性。以智能交通系统为应用领域，提出了一个用于弹性 CPS 实验和评估的建模和仿真集成平台。弹性评估基于使用足够保真度模拟的攻击者-防御者博弈。该平台集成了 1）网络和物理组件及其交互的现实模型； 2）网络攻击模型，重点关注攻击对CPS行为和操作的影响； 3）可用于评估网络安全风险的操作场景。通过三个案例研究来展示该平台的优势：1）交通网络对交通信号篡改的脆弱性分析； 2）用于预测交通流量的弹性传感器选择； 3) 存在拒绝服务攻击时的弹性交通信号控制。
The exponential growth of information and communication technologies have caused a profound shift in the way humans engineer systems leading to the emergence of closed-loop systems involving strong integration and coordination of physical and cyber components, often referred to as cyber–physical systems (CPSs). Because of these disruptive changes, physical systems can now be attacked through cyberspace and cyberspace can be attacked through physical means. The paper considers security and resilience as system properties emerging from the intersection of system dynamics and the computing architecture. A modeling and simulation integration platform for experimentation and evaluation of resilient CPSs is presented using smart transportation systems as the application domain. Evaluation of resilience is based on attacker–defender games using simulations of sufficient fidelity. The platform integrates 1) realistic models of cyber and physical components and their interactions; 2) cyber attack models that focus on the impact of attacks to CPS behavior and operation; and 3) operational scenarios that can be used for evaluation of cybersecurity risks. Three case studies are presented to demonstrate the advantages of the platform: 1) vulnerability analysis of transportation networks to traffic signal tampering; 2) resilient sensor selection for forecasting traffic flow; and 3) resilient traffic signal control in the presence of denial-of-service attacks.