Breakthrough: CPS-Security: Towards Provably Correct Distributed Attack-Resilient Control of Unmanned-Vehicle-Operator Networks

突破：CPS 安全：实现无人驾驶车辆运营商网络的可证明正确的分布式抗攻击控制

• 批准号: 1505664
• 负责人: Minghui Zhu
• 金额: $ 50万
• 依托单位: Pennsylvania State Univ University Park
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-07-15 至 2019-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1505664&HistoricalAwards=false
• 关键词: Breakthrough; CPS; Security; Towards; Provably

Inherent vulnerabilities of information and communication technology systems to cyber-attacks (e.g., malware) impose significant security risks to Cyber-Physical Systems (CPS). This is evidenced by a number of recent accidents. Noticeably, current distributed control of CPS is not really attack-resilient (ensuring task completion despite attacks). Although provable resilience would significantly lift the trustworthiness of CPS, existing defenses are rather ad-hoc and mainly focus on attack detection. In addition, while network attacks have been extensively studied, resilient-to-malware distributed control has been rarely investigated.This project aims to bridge the gap. It aims to investigate provably correct distributed attack-resilient control of CPS. The project will focus on a representative class of CPS, namely unmanned-vehicle-operator networks, and its four main research thrusts are: (1) The development of a distributed attack-resilient control framework to ensure task completion of multiple vehicles despite network attacks and malware attacks, (2) The synthesis of novel distributed attack-resilient control algorithms to deal with network attacks, (3) The design of estimation algorithms to detect malware attacks on vehicles, and computationally efficient algorithms which allow clean vehicles to avoid the collision with the vehicles compromised by malware, and (4) The validation of the cost-effectiveness of the proposed distributed attack-resilient control framework via a principled systematic evaluation plan.The research findings profoundly impact CPS security of a variety of engineering disciplines beyond unmanned-vehicle-operator networks, including smart grid, smart buildings and intelligent transportation systems. The proposed research is interdisciplinary and involves interactions among security, control, distributed algorithms and robotics. This will lead to educational and training opportunities that cross traditional disciplinary boundaries for high-school, undergraduate and graduate students in STEM.

信息和通信技术系统对网络攻击（如恶意软件）的固有漏洞给网络物理系统（CPS）带来了重大的安全风险。最近发生的一些事故就证明了这一点。值得注意的是，当前的分布式CPS控制并不是真正具有攻击弹性（即使受到攻击也能确保任务完成）。虽然可证明的弹性将大大提高CPS的可信度，但现有的防御措施相当临时，主要集中在攻击检测上。此外，虽然网络攻击已经被广泛研究，但对恶意软件的弹性分布式控制却很少进行研究。该项目旨在弥补这一差距。目的是研究可证明正确的分布式防攻击控制。该项目将专注于CPS的一个代表性类别，即无人驾驶车辆运营商网络，其四个主要研究重点是：(1)开发分布式攻击弹性控制框架，确保多辆车在网络攻击和恶意软件攻击的情况下完成任务；(2)综合新型分布式攻击弹性控制算法来处理网络攻击；(3)设计检测车辆恶意软件攻击的估计算法，以及计算效率高的算法，使干净的车辆避免与受恶意软件攻击的车辆发生碰撞；(4)通过原则性的系统评估计划验证所提出的分布式攻击弹性控制框架的成本效益。研究结果深刻影响了无人驾驶车辆运营商网络以外的各种工程学科的CPS安全，包括智能电网、智能建筑和智能交通系统。建议的研究是跨学科的，涉及安全，控制，分布式算法和机器人之间的相互作用。这将为STEM领域的高中生、本科生和研究生带来跨越传统学科界限的教育和培训机会。