Breakthrough: Collaborative: Secure Algorithms for Cyber-Physical Systems

现代系统，如智能电网，由必须协同工作的网络组件和物理组件组成；这些组件被称为网络物理系统，简称CPS。保护这类系统的安全不仅仅是网络安全或物理安全，而是网络物理安全。虽然威胁在CPS内成倍增加，但物理方面也可以减少威胁空间。与互联网等纯粹的网络系统不同，CP以物理现实为基础。在本项目中，此物理现实用于通过限制攻击者对其行为撒谎的能力来限制他/她破坏系统的能力；如果攻击者与物理现实不一致，则他/她的行为可被检测到，并损害他/她未来与系统交互的声誉。这项工作的影响是深远的，因为它为开发本质上安全的CPS奠定了基础，不仅适用于电力智能电网，也适用于先进的交通和建筑环境系统。通过这项研究培养了新一代跨学科的科学家和工程师。该项目制定了一种新的方法，将来自网络和物理领域的知识整合到一个分布式算法中，并确保组成系统的可信性，从而确保系统的安全性。安全度量也是派生出来的，并依赖于表示正确性的逻辑不变量。不变量检查本地操作的有效性或远程数据的准确性。它们可以被用来预防行动，或者可以被结合到一个动态的基于声誉的算法中。作为一个试验床，我们将研究电力网络上的多边能源系统。对该系统的初步研究已经产生了在单个算法的上下文中隔离恶意节点的算法，该算法使用将网络信息流与物理上可测量的信号进行比较的信誉度量。这项工作将扩展到其他算法和其他相关的电力系统，开发一个可推广的框架，并推导出更完整的指标，该项目具有重要的更广泛的影响。它开发了基于网络和物理系统两个方面的保护关键基础设施的新方法。该项目还包括研究生和本科生通过参与试验台和密苏里科技太阳能屋团队参与网络物理系统的研究和设计，该团队为美国能源部太阳能十项全能比赛设计和建造房屋。

Modern systems such as the electric smart grid consist of both cyber and physical components that must work together; these are called cyber-physical systems, or CPS. Securing such systems goes beyond just cyber security or physical security into cyber-physical security. While the threats multiply within a CPS, physical aspects also can reduce the threat space. Unlike purely cyber systems, such as the internet, CPS are grounded in physical reality. In this project, this physical reality is used to limit an attacker's ability to disrupt the system by limiting his/her ability to lie about his/her actions; if an attacker is inconsistent with physical reality, his/her actions are detectable and damage his/her reputation for future interactions with the system. The impacts of this work are far-reaching, as it creates a basis for developing inherently security CPS for not only the electric smart grid, but also advanced transportation and building environmental systems. A new generation of interdisciplinary scientists and engineers are being trained through this research.This project formulates a novel methodology that incorporates knowledge from both the cyber and physical domains into a distributed algorithm and ensures the trustworthiness, thus security, of the composed system. Metrics for security are also derived and rest on logical invariants that express correctness. The invariants either check the validity of a local action or the accuracy of remote data. They may be used as guards against an action, or may be incorporated into a dynamic reputation-based algorithm.As a testbed, a multilateral energy system on an electrical network will be studied. Preliminary studies of this system have resulted in algorithms that isolate malicious nodes within the context of a single algorithm, using a reputation metric that compares cyber information flows to physically measurable signals. The work will be extended to other algorithms and other related power systems, a generalizable framework will be developed, and more complete metrics will be derived.The project has important broader impact. It develops new approaches for securing critical infrastructure based on both and cyber and physical system aspects. The project also includes graduate and undergraduate involvement in cyber-physical systems research and design through involvement with testbeds and the Missouri Science and Technology Solar House team which designs and constructs houses for competition in the US Department of Energy Solar Decathlon.