CRII: CPS: Safe Cyber-Physical Systems Upgrades

CRII：CPS：安全网络物理系统升级

• 批准号: 1713253
• 负责人: Taylor Johnson
• 金额: $ 12.41万
• 依托单位: Vanderbilt University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-08-16 至 2018-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1713253&HistoricalAwards=false
• 关键词: CRII; CPS; Safe; Cyber; Physical

Cyber-physical systems (CPS) encompass the next generation of computerized control for countless aspects of the physical world and interactions thereof. The typical engineering process for CPS reuses existing designs, models, components, and software from one version to the next. For example, in automotive engineering, it is common to reuse significant portions of existing model-year vehicle designs when developing the next model-year vehicle, and such practices are common across CPS industries, from aerospace to biomedical. While reuse drastically enhances efficiency and productivity, it leads to the possibility of introducing unintended mismatches between subcomponents' specifications. For example, a 2011 US National Highway Traffic Safety Administration (NHTSA) recall of over 1.5 million model-year 2005-2010 vehicles was due to the upgrade of a physical transmission component that was not appropriately addressed in software. A mismatch between cyber and physical specifications may occur when a software or hardware upgrade (in effect, a cyber or physical specification change) is not addressed by an update (in effect, a matching specification change) in the other domain. This research will develop new techniques and software tools to detect automatically if cyber-physical specification mismatches exist, and then mitigate the effects of such mismatches at runtime, with the overall goal to yield more reliable and safer CPS upon which society increasingly depends. The detection and mitigation methods developed will be evaluated in an energy CPS testbed. While the evaluation testbed is in the energy domain, the methods are applicable to other CPS domains such as automotive, aerospace, and biomedical. The educational goals will bridge gaps between computer science and electrical engineering, preparing a diverse set of next-generation CPS engineers by developing education platforms to enhance CPS engineering design and verification skills.The proposed research is to develop new techniques and tools to automatically identify and mitigate the effects of cyber-physical specification mismatches. There are three major research objectives. The first objective is to identify cyber-physical specification mismatches. To identify mismatches, a detection problem will be formalized using the framework of hybrid input/output automata (HIOA). Offline algorithms will be designed to find candidate specifications from models and implementations using static and dynamic analyses, and then identify candidate mismatches. The second objective is to monitor and assure safe CPS upgrades. As modern CPS designs are complex, it may be infeasible to determine all specifications and mismatches between all subcomponents at design time. Runtime monitoring and verification methods will be developed for inferred specifications to detect mismatches at runtime. When they are identified, a runtime assurance framework building on supervisory control and the Simplex architecture will assure safe CPS runtime operation. The third objective is to evaluate safe CPS upgrades in an example CPS. The results of the other objectives and their ability to ensure safe CPS upgrades will be evaluated in an energy CPS testbed, namely an AC electrical distribution microgrid that interfaces DC-producing renewables like photovoltaics to AC.

信息物理系统（CPS）包含了对物理世界的无数方面及其相互作用的下一代计算机控制。典型的CPS工程流程从一个版本到下一个版本重用现有的设计、模型、组件和软件。例如，在汽车工程中，在开发下一款车型时，重用现有车型年车辆设计的重要部分是很常见的，这种做法在CPS行业（从航空航天到生物医学）中很常见。虽然重用极大地提高了效率和生产力，但它可能会在子组件的规范之间引入意想不到的不匹配。例如，2011年，美国国家公路交通安全管理局（NHTSA）召回了150多万辆2005-2010年款的汽车，原因是物理传输组件的升级没有在软件中得到适当解决。当软件或硬件升级（实际上是网络或物理规范更改）没有通过其他领域的更新（实际上是匹配规范更改）解决时，可能会出现网络和物理规范之间的不匹配。这项研究将开发新的技术和软件工具来自动检测是否存在网络物理规范不匹配，然后在运行时减轻这种不匹配的影响，其总体目标是产生更可靠、更安全的CPS，这是社会日益依赖的。开发的检测和缓解方法将在能源CPS试验台进行评估。虽然评估测试平台在能源领域，但该方法适用于其他CPS领域，如汽车，航空航天和生物医学。教育目标将弥合计算机科学和电气工程之间的差距，通过开发教育平台来提高CPS工程设计和验证技能，培养多样化的下一代CPS工程师。提出的研究是开发新的技术和工具来自动识别和减轻网络物理规范不匹配的影响。有三个主要的研究目标。第一个目标是识别网络物理规范不匹配。为了识别不匹配，将使用混合输入/输出自动机（HIOA）框架形式化检测问题。离线算法将被设计为使用静态和动态分析从模型和实现中找到候选规范，然后识别候选不匹配。第二个目标是监控和确保安全的CPS升级。由于现代CPS设计是复杂的，在设计时确定所有子组件之间的所有规格和不匹配可能是不可行的。将为推断的规范开发运行时监控和验证方法，以在运行时检测不匹配。当它们被识别出来后，基于监督控制和Simplex架构的运行时保证框架将确保安全的CPS运行时操作。第三个目标是评估示例CPS中的安全CPS升级。其他目标的结果及其确保安全CPS升级的能力将在能源CPS测试平台上进行评估，即交流配电微电网，该微电网将产生直流的可再生能源（如光伏）连接到交流。