CPS: TTP Option: Synergy: Collaborative Research: Threat Assessment Tools for Management-Coupled Cyber- and Physical- Infrastructures

CPS：TTP 选项：协同：协作研究：管理耦合网络和物理基础设施的威胁评估工具

• 批准号: 1545050
• 负责人: Sajal Das
• 金额: $ 17万
• 依托单位: Missouri University of Science and Technology
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2015
• 资助国家: 美国
• 起止时间: 2015-09-15 至 2020-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1545050&HistoricalAwards=false
• 关键词: CPS; TTP; Option; Synergy; Collaborative

Strategic decision-making for physical-world infrastructures is rapidly transitioning toward a pervasively cyber-enabled paradigm, in which human stakeholders and automation leverage the cyber-infrastructure at large (including on-line data sources, cloud computing, and handheld devices). This changing paradigm is leading to tight coupling of the cyber- infrastructure with multiple physical- world infrastructures, including air transportation and electric power systems. These management-coupled cyber- and physical- infrastructures (MCCPIs) are subject to complex threats from natural and sentient adversaries, which can enact complex propagative impacts across networked physical-, cyber-, and human elements. We propose here to develop a modeling framework and tool suite for threat assessment for MCCPIs. The proposed modeling framework for MCCPIs has three aspects: 1) a tractable moment-linear modeling paradigm for the hybrid, stochastic, and multi-layer dynamics of MCCPIs; 2) models for sentient and natural adversaries, that capture their measurement and actuation capabilities in the cyber- and physical- worlds, intelligence, and trust-level; and 3) formal definitions for information security and vulnerability. The attendant tool suite will provide situational awareness of the propagative impacts of threats. Specifically, three functionalities termed Target, Feature, and Defend will be developed, which exploit topological characteristics of an MCCPI to evaluate and mitigate threat impacts. We will then pursue analyses that tie special infrastructure-network features to security/vulnerability. As a central case study, the framework and tools will be used for threat assessment and risk analysis of strategic air traffic management. Three canonical types of threats will be addressed: environmental-to-physical threats, cyber-physical co-threats, and human-in-the-loop threats. This case study will include development and deployment of software decision aids for managing man-made disturbances to the air traffic system.

物理世界基础设施的战略决策正在迅速转向普遍的网络驱动范式，其中人类利益相关者和自动化利用整个网络基础设施（包括在线数据源、云计算和手持设备）。 这种不断变化的范式导致网络基础设施与多个物理世界基础设施（包括航空运输和电力系统）紧密耦合。 这些管理耦合的网络和物理基础设施（MCCPI）受到来自自然和有感知的对手的复杂威胁，这些威胁可以跨网络物理、网络和人类元素产生复杂的传播影响。 我们在此建议开发一个用于 MCCPI 威胁评估的建模框架和工具套件。 所提出的 MCCPI 建模框架具有三个方面：1）针对 MCCPI 的混合、随机和多层动力学的易于处理的矩线性建模范式； 2）有感知力和自然对手的模型，捕获他们在网络和物理世界、情报和信任级别中的测量和驱动能力； 3) 信息安全和脆弱性的正式定义。附带的工具套件将提供威胁传播影响的态势感知。具体来说，将开发称为“目标”、“特征”和“防御”的三种功能，它们利用 MCCPI 的拓扑特征来评估和减轻威胁影响。然后，我们将进行将特殊基础设施网络功能与安全/漏洞联系起来的分析。 作为中心案例研究，该框架和工具将用于战略空中交通管理的威胁评估和风险分析。 将解决三种典型类型的威胁：环境到物理威胁、网络物理协同威胁和人机交互威胁。该案例研究将包括开发和部署用于管理空中交通系统人为干扰的软件决策辅助工具。