CPS: Breakthrough: A Meta-Game Theoretic Approach to Cyber-Physical Co-Design of Secure and Resilient Control Systems

CPS：突破：安全和弹性控制系统的网络物理协同设计的元博弈论方法

• 批准号: 1544782
• 负责人: Quanyan Zhu
• 金额: $ 28.15万
• 依托单位: New York University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-15 至 2021-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1544782&HistoricalAwards=false
• 关键词: CPS; Breakthrough; Meta; Game; Theoretic

The increasing reliance on computer and communication technologies exposes control systems to cyber security threats. The physical systems can now be attacked through cyberspace. Emerging sophisticated attacks can exploit zero-day vulnerabilities, persist in the system for long periods of time, and advance stealthily to achieve their attack goals. Protection and prevention against such attacks are not always possible, and a paradigm shift to emphasize resilience of a control system is the overarching objective for safeguarding control systems to protect nation's critical infrastructures. The major challenge for designing secure and resilient cyber-physical control system is the lack of scientific foundations, and quantitative methods to provide a systematic guideline for large-scale cyber-physical interactions. To this end, the project aims to establish a meta-game system theory, and develop computational and design methodologies for cyber-physical co-design problems.Game-theoretic tools serve as an appropriate way to interconnect systems from multiple domains into one single framework to address security and resilience issues of highly integrated CPS. This project investigates a meta-game framework as a new paradigm to compose heterogeneous system components to design their interactions to achieve functional security and resiliency properties. Through developing security-aware controllers and impact-aware proactive cyber defense mechanism, this project creates a system co-design paradigm based on the meta-game framework, which captures the system properties of robustness, security, and resilience in one single framework, and provides fundamental principles to characterize their tradeoffs. The analytical framework will lead to the development of a cyber-physical mechanism design theory to provide a solid foundation for achieving optimal cyber-physical integration for control systems. The developed analytical and design tools will allow the prediction of unexpected outcomes of system integrations, the mitigation of the impact of cyber attacks on control systems, and the cost-effective operation and design of resilient CPS.

对计算机和通信技术的日益依赖使控制系统面临网络安全威胁。物理系统现在可以通过网络空间受到攻击。新兴的复杂攻击可以利用零日漏洞，在系统中持续很长一段时间，并悄悄地推进以实现其攻击目标。针对这种攻击的保护和预防并不总是可能的，并且强调控制系统的弹性的范式转变是保护控制系统以保护国家的关键基础设施的首要目标。设计安全和有弹性的网络物理控制系统的主要挑战是缺乏科学基础，以及为大规模网络物理交互提供系统指导的定量方法。为此，该项目旨在建立一个元博弈系统理论，并为网络物理协同设计问题开发计算和设计方法。博弈论工具作为一种适当的方式，将多个域的系统互连到一个单一的框架中，以解决高度集成的CPS的安全性和弹性问题。本项目研究了一个元游戏框架作为一个新的范例，组成异构系统组件，设计他们的相互作用，以实现功能的安全性和弹性属性。通过开发安全感知控制器和影响感知主动网络防御机制，该项目创建了一个基于元博弈框架的系统协同设计范式，该框架在一个单一的框架中捕获系统的鲁棒性，安全性和弹性属性，并提供基本原则来表征它们的权衡。该分析框架将导致信息物理机制设计理论的发展，为实现控制系统的最佳信息物理集成提供坚实的基础。开发的分析和设计工具将允许预测系统集成的意外结果，减轻网络攻击对控制系统的影响，以及弹性CPS的成本效益操作和设计。