权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

TWC: Small: Intrusion Detection and Resilience Against Attacks in Cyber and Cyber-Physical Control Systems

TWC：小型：网络和网络物理控制系统中的入侵检测和攻击恢复能力

基本信息

批准号：
1421122
负责人：
Stephane Lafortune
金额：
$ 49.98万
依托单位：
Regents of the University of Michigan - Ann Arbor
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2014
资助国家：
美国
起止时间：
2014-09-01 至 2018-08-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1421122&HistoricalAwards=false
关键词：
TWC Small Intrusion Detection Resilience

项目摘要

This project develops a novel methodology for designing secure cyber and cyber-physical systems that can detect attackers and protect against malicious behavior after the system has been compromised. Networked control systems contain actuators and sensors that can be compromised by a malicious attacker intent on altering the system behavior by corrupting sensor values or actuator commands, thereby enabling or forcing the execution of unsafe behavior. The PIs investigate the intrusions that resulted in compromised system components (sensors or actuators) and design remedial control strategies that not only combat malicious attackers upon detection of intrusion but are also resilient to potential intrusions, thereby preventing damage from being inflicted upon the system. The technical approach has its foundations in the theories of diagnosability, opacity, and supervisory control of discrete-state event-driven dynamic systems. The research plan to the problems of intrusion detection and resilience against attacks contains a creative blend of these theories with game-theoretic approaches to reactive synthesis problems, in order to capture the dynamic game between the control system (acting as the defender) and the attacker. The goal of the defender is to optimize its trade-off between functionality and vulnerability. Given the prevalence of feedback control loops in cyber and cyber-physical systems, the methodology being developed will impact a large class of technological systems that are of great societal importance.

该项目开发了一种新的方法，用于设计安全的网络和网络物理系统，可以检测攻击者并在系统受到危害后防止恶意行为。网络控制系统包含执行器和传感器，这些执行器和传感器可能被恶意攻击者破坏，恶意攻击者意图通过破坏传感器值或执行器命令来改变系统行为，从而启用或强制执行不安全行为。PI调查导致系统组件（传感器或执行器）受损的入侵，并设计补救控制策略，不仅在检测到入侵时打击恶意攻击者，而且还对潜在的入侵具有弹性，从而防止对系统造成损害。该技术方法的基础是离散状态事件驱动动态系统的可诊断性、不透明性和监督控制理论。入侵检测和抵御攻击问题的研究计划包含了这些理论与反应合成问题的博弈论方法的创造性融合，以捕捉控制系统（充当防御者）和攻击者之间的动态博弈。防御者的目标是优化其功能和脆弱性之间的权衡。鉴于反馈控制回路在网络和网络物理系统中的普遍存在，正在开发的方法将影响具有重大社会意义的一大类技术系统。