CPS: Breakthrough: Towards a Science of Attack Composition, Mitigation, and Verification in Cyber-Physical Systems: A Passivity-Based Framework

CPS：突破：迈向网络物理系统中攻击组合、缓解和验证的科学：基于被动性的框架

• 批准号: 1446866
• 负责人: Radha Poovendran
• 金额: $ 50万
• 依托单位: University of Washington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-10-01 至 2018-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1446866&HistoricalAwards=false
• 关键词: CPS; Breakthrough; Towards; Science; Attack

This project focuses on modeling and mitigating cyber attacks on Cyber-Physical Systems (CPS), which are increasingly prevalent in all aspects of society such as health care, energy, and transportation. Attacks initiated on the cyber components of CPS can be mounted remotely at little economic cost and can significantly degrade the safety and performance of CPS due to the tight coupling between cyber and physical components. This project develops a passivity-based framework for modeling, composing, and mitigating multiple attacks on CPS. Passivity is an energy dissipation property that provides basic rules for analyzing and composing interconnected systems. In addition to passive adversary models and composition rules, this project will investigate techniques for decomposition of composed attack models into basic primitives which will lead to development of new mitigation strategies. Approximate bi-simulation techniques will be introduced to verify the developed adversary models and mitigation strategies. The proposed approach is general and will be applicable to mitigate CPS security challenges arising in multiple sectors including transportation, energy, manufacturing, and others.The goals of the project are as follows: (a) research and development of passive dynamical models of multiple attacks, as well as characterization of the class of attacks that admit a passive representation; (b) investigation and development of passivity-based composition and decomposition rules, enabling identification of new attack variants and associated mitigation strategies; (c) research and development of approximate techniques for verification of composed adversary models and mitigation strategies; and (d) validation and prototyping of the proposed models through an experimental testbed.

该项目的重点是建模和减轻对网络物理系统（CPS）的网络攻击，这些攻击在医疗保健，能源和交通等社会的各个方面越来越普遍。 对CPS的网络组件发起的攻击可以以很小的经济成本远程安装，并且由于网络组件和物理组件之间的紧密耦合，可以显著降低CPS的安全性和性能。 该项目开发了一个基于被动性的框架，用于建模，合成和减轻对CPS的多种攻击。 无源性是一种能量耗散特性，它为分析和组合互连系统提供了基本规则。 除了被动的对手模型和组合规则，该项目将调查技术的组成攻击模型分解成基本的原语，这将导致新的缓解策略的发展。 近似双模拟技术将被引入到验证发达的对手模型和缓解策略。 该方法具有通用性，适用于缓解CPS在交通、能源、制造等多个领域面临的安全挑战。该项目的目标如下：（a）研究和开发多种攻击的被动动态模型，以及允许被动表示的攻击类别的特征;（B）研究和开发基于被动性的组合和分解规则，以便能够识别新的攻击变体和相关的缓解策略;（c）研究和开发用于验证组合的对手模型和缓解策略的近似技术;以及（d）通过实验测试平台验证所提出的模型并制作原型。