CPS: Breakthrough: A Meta-Game Theoretic Approach to Cyber-Physical Co-Design of Secure and Resilient Control Systems

对计算机和通信技术的日益依赖使控制系统面临网络安全威胁。物理系统现在可以通过网络空间进行攻击。新兴的复杂攻击可以利用零日漏洞，在系统中持续很长一段时间，并悄悄地推进以实现攻击目标。保护和预防此类攻击并非总是可能的，强调控制系统弹性的范式转变是保护控制系统以保护国家关键基础设施的总体目标。设计安全、弹性的网络物理控制系统面临的主要挑战是缺乏科学基础和定量方法来为大规模网络物理交互提供系统的指导。为此，该项目旨在建立一个元游戏系统理论，并为网络物理协同设计问题开发计算和设计方法。博弈论工具是将多个领域的系统连接到一个单一框架中的适当方法，以解决高度集成的CPS的安全性和弹性问题。这个项目研究了一个元游戏框架，作为一个新的范式来组成异构系统组件，设计它们的交互，以实现功能安全和弹性属性。通过开发安全感知控制器和影响感知的主动网络防御机制，本项目创建了基于元游戏框架的系统协同设计范式，该范式在单一框架中捕获了系统的鲁棒性、安全性和弹性属性，并提供了表征其权衡的基本原则。分析框架将导致网络物理机制设计理论的发展，为实现控制系统的最佳网络物理集成提供坚实的基础。开发的分析和设计工具将允许预测系统集成的意外结果，减轻网络攻击对控制系统的影响，以及具有成本效益的操作和弹性CPS的设计。

The increasing reliance on computer and communication technologies exposes control systems to cyber security threats. The physical systems can now be attacked through cyberspace. Emerging sophisticated attacks can exploit zero-day vulnerabilities, persist in the system for long periods of time, and advance stealthily to achieve their attack goals. Protection and prevention against such attacks are not always possible, and a paradigm shift to emphasize resilience of a control system is the overarching objective for safeguarding control systems to protect nation's critical infrastructures. The major challenge for designing secure and resilient cyber-physical control system is the lack of scientific foundations, and quantitative methods to provide a systematic guideline for large-scale cyber-physical interactions. To this end, the project aims to establish a meta-game system theory, and develop computational and design methodologies for cyber-physical co-design problems.Game-theoretic tools serve as an appropriate way to interconnect systems from multiple domains into one single framework to address security and resilience issues of highly integrated CPS. This project investigates a meta-game framework as a new paradigm to compose heterogeneous system components to design their interactions to achieve functional security and resiliency properties. Through developing security-aware controllers and impact-aware proactive cyber defense mechanism, this project creates a system co-design paradigm based on the meta-game framework, which captures the system properties of robustness, security, and resilience in one single framework, and provides fundamental principles to characterize their tradeoffs. The analytical framework will lead to the development of a cyber-physical mechanism design theory to provide a solid foundation for achieving optimal cyber-physical integration for control systems. The developed analytical and design tools will allow the prediction of unexpected outcomes of system integrations, the mitigation of the impact of cyber attacks on control systems, and the cost-effective operation and design of resilient CPS.