CPS:Medium:Foundations of Secure Cyber Physical Systems

监管电网和供水网络等关键基础设施的网络物理系统在地理上的分布越来越广，因此需要在遥感器、执行器和控制器之间进行通信。 网络计算和物理子系统的结合导致了新的安全漏洞，对手可以利用这些漏洞带来毁灭性的后果。 对相互依赖的网络组件和物理设备的同步攻击可能会产生复杂的新安全漏洞，这些漏洞无法通过单独保护组成系统来解决。本项目采用整体观点，利用物理系统的特性，通过统一的概念框架为网络物理系统（CPS）设计新的安全协议和架构，它使用物理系统和通信/计算网络的模型来定义精确的攻击模型和漏洞。这些数学模型用于设计具有可证明的操作安全保证的算法和协议，从而能够设计更值得信赖的架构和组件。的算法，协议和架构进行了验证CPS测试平台，针对建筑，汽车和智能电网的应用。此外，该研究正在通过创建结合基础控制，信息理论，密码学和嵌入式系统概念的新颖课程来整合到课程中。通过改善对新兴威胁的关键网络物理基础设施的保护，这项研究预计将提供直接的社会经济效益，从单个组织到国家规模。该项目的跨学科团队将把教学和课程开发与研究结合起来，为培养新一代精通可靠的网络物理系统设计的工程师做出贡献。

Cyber-physical systems regulating critical infrastructures, such as electrical grids and water networks, are increasingly geographically distributed, necessitating communication between remote sensors, actuators and controllers. The combination of networked computational and physical subsystems leads to new security vulnerabilities that adversaries can exploit with devastating consequences. A synchronized attack on the interdependent network components and physical plants can create complex and new security vulnerabilities that cannot be addressed by securing the constituent systems individually.This project takes a holistic view by utilizing the properties of physical systems to design new secure protocols and architectures for cyber-physical systems (CPS) through a unified conceptual framework, which uses models for the physical system and the communication/computation network to define precise attack models and vulnerabilities. These mathematical models are used to design algorithms and protocols with provable operational security guarantees, thus enabling the design of more trustworthy architectures and components. The algorithms, protocols, and architectures are validated on CPS testbeds targeting building, automobile, and smart-grid applications. Additionally, the research is being integrated into the curriculum via the creation of novel coursework combining the underlying control, information theory, cryptography, and embedded system concepts.By improving the protection of critical cyber-physical infrastructure against emerging threats, this research is expected to provide direct socio-economic benefits, ranging from individual organizations to a national scale. The inter-disciplinary team of this project will integrate teaching and curriculum development with the research, contributing to the training of a new generation of engineers well versed in the design of trustworthy cyber-physical systems.