CPS:Medium:Foundations of Secure Cyber Physical Systems

管理电网和供水网络等关键基础设施的网络物理系统越来越多地分布在地理上，需要远程传感器、执行器和控制器之间进行通信。网络计算和物理子系统的结合导致了新的安全漏洞，攻击者可以利用这些漏洞造成毁灭性的后果。对相互依赖的网络组件和物理设备的同步攻击可能会产生复杂的新的安全漏洞，而这些漏洞不能通过单独保护组成系统来解决。该项目通过一个统一的概念框架，利用物理系统的属性来设计新的网络物理系统安全协议和体系结构，使用物理系统和通信/计算网络的模型来定义精确的攻击模型和漏洞。这些数学模型用于设计具有可证明的操作安全保证的算法和协议，从而能够设计更可靠的体系结构和组件。算法、协议和体系结构在针对建筑、汽车和智能电网应用的CPS试验台上进行了验证。此外，通过创建结合基础控制、信息论、密码学和嵌入式系统概念的新课程，这项研究正在被整合到课程中。通过改善对关键网络物理基础设施的保护，使其免受新出现的威胁，这项研究预计将提供从单个组织到全国范围的直接社会经济效益。该项目的跨学科团队将把教学和课程开发与研究结合起来，为培养精通可靠的网络物理系统设计的新一代工程师做出贡献。

Cyber-physical systems regulating critical infrastructures, such as electrical grids and water networks, are increasingly geographically distributed, necessitating communication between remote sensors, actuators and controllers. The combination of networked computational and physical subsystems leads to new security vulnerabilities that adversaries can exploit with devastating consequences. A synchronized attack on the interdependent network components and physical plants can create complex and new security vulnerabilities that cannot be addressed by securing the constituent systems individually.This project takes a holistic view by utilizing the properties of physical systems to design new secure protocols and architectures for cyber-physical systems (CPS) through a unified conceptual framework, which uses models for the physical system and the communication/computation network to define precise attack models and vulnerabilities. These mathematical models are used to design algorithms and protocols with provable operational security guarantees, thus enabling the design of more trustworthy architectures and components. The algorithms, protocols, and architectures are validated on CPS testbeds targeting building, automobile, and smart-grid applications. Additionally, the research is being integrated into the curriculum via the creation of novel coursework combining the underlying control, information theory, cryptography, and embedded system concepts.By improving the protection of critical cyber-physical infrastructure against emerging threats, this research is expected to provide direct socio-economic benefits, ranging from individual organizations to a national scale. The inter-disciplinary team of this project will integrate teaching and curriculum development with the research, contributing to the training of a new generation of engineers well versed in the design of trustworthy cyber-physical systems.