CAREER: Foundations for Secure Control of Cyber-Physical Systems

越来越多的功能、网络互操作性和系统设计复杂性已经在网络物理系统（CPS）中引入了安全漏洞。正如最近所展示的那样，远程攻击者可以破坏汽车的运行，使车辆瘫痪或劫持它。其他CPS领域的高调安全事件包括对乌克兰电网的大规模攻击和对工业系统的StuxNet攻击，而RQ-170哨兵无人机捕获表明，即使是安全关键的军事CPS也可能受到损害。信息技术和物理组件的紧密集成使得CPS容易受到远远超出标准网络攻击的攻击向量。此外，深度组件嵌入和较长的预计系统寿命限制了标准网络安全解决方案的使用，这些解决方案会带来巨大的计算和通信开销。另一方面，与物理世界的安全关键交互使得对CPS的攻击非常危险，因为它们可能导致重大的物理损坏甚至生命损失。为了应对这些挑战，该项目将为CPS的安全控制设计开发科学基础，从而形成一个高保证的CPS设计框架，在这个框架中，攻击弹性控制、安全感知的人机交互、高效的控制器仪表和系统恢复的组合，即使在存在攻击的情况下也能提供安全和性能保证。该项目的目标是为安全关键CPS的安全感知建模、分析和设计提供基本的新方法，解决这些异构系统在存在攻击时的许多不同物理、功能和逻辑方面的问题。具体研究成果包括：1)利用物理和网络域之间的相互作用进行攻击检测和弹性控制的网络物理安全技术；2)人类cps安全控制框架，利用人类的归纳推理能力和提供上下文的能力，特别是在攻击期间，以提高整体安全保障；3)安全CPS控制器实现的平台支持，包括确保安全高效闭环恢复的设计技术和工具。提出的高保证设计框架将用于开发具有不同程度自治和人类监督的联网和自动驾驶汽车的安全感知汽车控制器。拟议研究的各个组成部分将直接在相关的汽车应用和架构上进行评估，这将有助于它们过渡到实践和直接的工业影响。此外，设计框架的一般性质为本研究在其他CPS领域产生重大影响提供了直接途径，从而导致设计安全和安全的CPS。该项目还包括广泛的教育和推广部分，包括为具有强大系统和多学科视角的高保证CPS开发课程，扩大本科生和研究生的动手研究机会，以及与工业界的合作。这些努力的强烈动机是工业需要为安全关键的CPS提供高保证，因此该项目的结果将直接影响这些系统的设计方式，以及支持安全可靠CPS发展所需的下一代劳动力的教育。

The increasing set of functionalities, network interoperability, and system design complexity have introduced security vulnerabilities in cyber-physical systems (CPS). As recently demonstrated, a remote attacker can disrupt the operation of a car to either disable the vehicle or hijack it. High-profile security incidents in other CPS domains include a large-scale attack on Ukraine's power-grid and the StuxNet attack on an industrial system, while the RQ-170 Sentinel drone capture has shown that even safety-critical military CPS can be compromised. The tight integration of information technology and physical components has made CPS vulnerable to attack vectors well beyond the standard cyber-attacks. In addition, deep component embedding and long projected system lifetime limit the use of standard cyber security solutions that impose a significant computation and communication overhead. On the other hand, the safety-critical interaction with the physical world has made attacks on CPS extremely dangerous as they could result in significant physical damage and even loss of life. To address these challenges, this project will develop scientific foundations for design of secure control of CPS, resulting in a high-assurance CPS design framework in which a mix of attack-resilient control, security-aware human-CPS interactions, efficient controller instrumentation and system recovery provides safety and performance guarantees even in the presence of attacks.The goal of this project is to provide fundamentally new methods for security-aware modeling, analysis and design of safety-critical CPS, addressing the many different physical, functional and logical aspects of these heterogeneous systems in the presence of attacks. Specific research products include: 1) Cyber-physical security techniques that exploit the interaction between physical and cyber domains for attack-detection and resilient control; 2) Framework for secure control of Human-CPS that harnesses the human power of inductive reasoning and the ability to provide context, particularly during an attack, to improve the overall security guarantees; 3) Platform support for implementation of secure CPS controllers including design techniques and tools ensuring safe and efficient closed-loop recovery. Proposed high-assurance design framework will be used to develop security-aware automotive controllers for connected and autonomous vehicles with varying levels of autonomy and human supervision. Various components of the proposed research will be directly evaluated on relevant automotive applications and architectures, which will facilitate their transition into practice and immediate industrial impact. Furthermore, the general nature of the design framework provides a direct path for this research to have significant impact in other CPS domains leading to design of secure and safety-preserving CPS. The project also has an extensive education and outreach component, including curriculum development for high-assurance CPS with a strong systems and multidisciplinary perspective, expansion of hands-on research opportunities for undergraduate and graduate students, and cooperation with industry. These efforts are strongly motivated by industrial need to provide high-assurance for safety-critical CPS, and thus the results of this project will directly impact the way these systems are designed as well as education of the next generation workforce necessary to support evolution of safe and secure CPS.