CPS: Medium: Collaborative Research: Against Coordinated Cyber and Physical Attacks: Unified Theory and Technologies

协调的网络物理攻击（CCPA）多年来一直被吹捧为严重的威胁，其中“协调”意味着攻击者完全了解物理设备和状态，有时甚至可以创建物理缺陷，以协助网络攻击，反之亦然。 近年来，这些攻击已经从理论走向现实，对车辆、电网和工业工厂的攻击有可能在数字世界之外造成破坏甚至死亡。 CCPA在网络物理系统（CPS）安全方面提出了独特的挑战。 从历史上看，防御网络攻击和物理攻击的技术是在不同的假设和模型下分别开发的。 例如，网络安全技术通常需要物理动态的完整配置文件和系统状态的观察，当存在物理缺陷时，可能无法获得。类似地，现有的系统控制技术可以有效地补偿物理损坏，但假设是控制软件和传感器数据不受损害。 对CCPA缺乏统一的方法。 基于这一观察，本项目的重点是开发统一的模型，这些模型具有连贯的假设集，并得到集成技术的支持，从而可以更有效地防御CCPA。为了建立弹性CPS架构的理论基础和工程原理，本项目将研究统一的模型和平台，这些模型和平台代表了对CCPA的弹性CPS的科学理解。 CPS的工程将通过开发和集成复杂性降低的软件架构沿着设计原则来解决，这将导致具有更高水平的系统弹性的可验证和可认证的架构。CPS技术将通过设计新的攻击检测、隔离和恢复工具以及定时和控制技术来解决，以确保对CCPA做出适当的响应。 拟议的固有跨学科研究将确保弹性CPS的可预测性能，通过利用以下学科的进步：（i）鲁棒容错控制系统的设计和评估，在高度不可预测的环境中显着提高安全水平;（ii）复杂性降低架构的设计和实施，将验证时间从数小时大幅减少到数秒;（iii）开发多速率采样数据控制和基于可达性的鲁棒攻击检测技术，确保传感器数据可靠;（iv）开发网络物理协同适应，优化控制性能和计算任务调度，以保证系统安全和从CCPA有效恢复。 该项目的目标应用是无人机（UAV）。 研究结果将在三个不同的测试平台上进行评估：无人机测试平台，通用运输模型（GTM）飞机和电力系统虚拟测试平台（VTB）。 该项目的技术进步将为当今CPS面临的安全性和可靠性问题提供解决方案，并提供可靠的CPS，这些CPS适用于复杂和潜在的恶劣网络环境，而不会牺牲功能或可访问性。该项目的成果将在档案期刊出版物、会议场所和各种讲习班和讲座中传播，并将在不同的学术层面上加以整合。

Coordinated cyber-physical attacks (CCPA) have been touted as a serious threat for several years, where "coordinated" means that attackers have complete knowledge of the physical plant and status, and sometimes can even create physical defects, to assist cyber attacks, and vice versa. In recent years, these attacks have crept from theory to reality, with attacks on vehicles, electrical grids, and industrial plants, which have the potential to cause destruction and even death outside of the digital world. CCPA raise a unique challenge with respect to cyber-physical systems (CPS) safety. Historically, technologies to defend cyber attacks and physical attacks are developed separately under different assumptions and models. For instance, cyber security technologies often require the complete profile of the physical dynamics and the observation of the system state, which may not be available when physical defects exist. Similarly, existing system control techniques may efficiently compensate for the physical damage, but under the assumption that the control software and the sensor data are not compromised. There is a lack of unified approaches against CCPA. With this observation, this project focuses on the development of unified models with coherent set of assumptions, supported by integrated technologies, upon which CCPA can be defended much more effectively.To establish theoretical foundations and engineering principles for resilient CPS architectures, this project will investigate unified models and platforms that represent the scientific understanding of resilient CPS against CCPA. Engineering of CPS will be addressed through the development and integration of complexity-reduced software architectures, along with their design principles, which lead to verifiable and certifiable architectures with higher level of system resilience. Technology of CPS will be addressed through the design of new attack detection, isolation, and recovery tools as well as timing and control techniques to ensure appropriate responses to CCPA. The proposed inherently interdisciplinary research will ensure predictable performance for resilient CPS, by leveraging the disciplinary advances in (i) the design and evaluation of robust fault-tolerant control systems yielding significantly enhanced levels of safety in highly unpredictable environments; (ii) the design and implementation of complexity reduction architecture yielding a significant reduction in the verification time from hours to seconds; (iii) the development of multi-rate sampled-data control and robust reachability-based attack detection techniques ensuring that the sensor data is reliable; and (iv) the development of cyber-physical co-adaptation that optimizes control performance and computation task scheduling to guarantee system safety and efficient recovery from CCPA. The target application of this project is unmanned aerial vehicles (UAVs). The research results will be evaluated in three different testbeds: UAV testbed, generic transportation model (GTM) aircraft, and power system virtual testbed (VTB). The technological advancement from this project will provide solutions for the safety and reliability issues faced by today's CPS and deliver dependable CPS that are applicable without sacrificing functionality or accessibility in complex and potentially hostile networked environment. The results of this project will be communicated in archival journal publications, conference venues and various workshops and lectures, and will be integrated at different academic levels.