CPS: Medium: Collaborative Research: Against Coordinated Cyber and Physical Attacks: Unified Theory and Technologies

多年来，协同网络-物理攻击(CCPA)一直被吹捧为一种严重的威胁，其中“协同”意味着攻击者完全了解物理设备和状态，有时甚至可以制造物理缺陷，以帮助网络攻击，反之亦然。近年来，这些攻击已经从理论悄悄变成了现实，对车辆、电网和工业厂房的攻击，有可能在数字世界之外造成破坏甚至死亡。CCPA在网络物理系统(CPS)安全方面提出了一个独特的挑战。从历史上看，防御网络攻击和物理攻击的技术是在不同的假设和模型下单独开发的。例如，网络安全技术通常需要物理动态的完整概况和系统状态的观察，而当存在物理缺陷时，这可能是不可用的。同样，现有的系统控制技术可以有效地补偿物理损害，但前提是控制软件和传感器数据不会被破坏。针对《反海外腐败法》缺乏统一的方法。有了这样的观察，本项目致力于开发具有一致性假设集的统一模型，并在集成技术的支持下，在此基础上更有效地维护CCPA。为了建立弹性CPS架构的理论基础和工程原理，本项目将研究代表对弹性CPS相对于CCPA的科学理解的统一模型和平台。CPS的工程将通过开发和集成降低复杂性的软件体系结构及其设计原则来解决，这将导致具有更高水平的系统弹性的可验证和可认证的体系结构。CPS技术将通过设计新的攻击检测、隔离和恢复工具以及定时和控制技术来解决，以确保对CCPA做出适当的响应。拟议的跨学科研究将确保具有弹性的CP的可预测性能，方法是利用以下学科的进步：(I)设计和评估在高度不可预测的环境中可显著提高安全级别的健壮容错控制系统；(Ii)设计和实施复杂性降低架构，将验证时间从数小时大幅减少到数秒；(Iii)开发多速率采样数据控制和基于稳健可达性的攻击检测技术，确保传感器数据可靠；以及(Iv)开发网络-物理协同适应，优化控制性能和计算任务调度，以保证系统安全和从CCPA高效恢复。该项目的目标应用是无人机(UAVs)。研究成果将在三个不同的试验台上进行评估：无人机试验台、通用运输模型(GTM)飞机和电力系统虚拟试验台(VTB)。该项目的技术进步将为当今CPS面临的安全和可靠性问题提供解决方案，并提供适用的可靠CPS，而不会牺牲复杂和潜在恶意网络环境中的功能或可访问性。该项目的成果将在档案期刊出版物、会议场所和各种讲习班和讲座上进行交流，并将在不同的学术层面上加以整合。

Coordinated cyber-physical attacks (CCPA) have been touted as a serious threat for several years, where "coordinated" means that attackers have complete knowledge of the physical plant and status, and sometimes can even create physical defects, to assist cyber attacks, and vice versa. In recent years, these attacks have crept from theory to reality, with attacks on vehicles, electrical grids, and industrial plants, which have the potential to cause destruction and even death outside of the digital world. CCPA raise a unique challenge with respect to cyber-physical systems (CPS) safety. Historically, technologies to defend cyber attacks and physical attacks are developed separately under different assumptions and models. For instance, cyber security technologies often require the complete profile of the physical dynamics and the observation of the system state, which may not be available when physical defects exist. Similarly, existing system control techniques may efficiently compensate for the physical damage, but under the assumption that the control software and the sensor data are not compromised. There is a lack of unified approaches against CCPA. With this observation, this project focuses on the development of unified models with coherent set of assumptions, supported by integrated technologies, upon which CCPA can be defended much more effectively.To establish theoretical foundations and engineering principles for resilient CPS architectures, this project will investigate unified models and platforms that represent the scientific understanding of resilient CPS against CCPA. Engineering of CPS will be addressed through the development and integration of complexity-reduced software architectures, along with their design principles, which lead to verifiable and certifiable architectures with higher level of system resilience. Technology of CPS will be addressed through the design of new attack detection, isolation, and recovery tools as well as timing and control techniques to ensure appropriate responses to CCPA. The proposed inherently interdisciplinary research will ensure predictable performance for resilient CPS, by leveraging the disciplinary advances in (i) the design and evaluation of robust fault-tolerant control systems yielding significantly enhanced levels of safety in highly unpredictable environments; (ii) the design and implementation of complexity reduction architecture yielding a significant reduction in the verification time from hours to seconds; (iii) the development of multi-rate sampled-data control and robust reachability-based attack detection techniques ensuring that the sensor data is reliable; and (iv) the development of cyber-physical co-adaptation that optimizes control performance and computation task scheduling to guarantee system safety and efficient recovery from CCPA. The target application of this project is unmanned aerial vehicles (UAVs). The research results will be evaluated in three different testbeds: UAV testbed, generic transportation model (GTM) aircraft, and power system virtual testbed (VTB). The technological advancement from this project will provide solutions for the safety and reliability issues faced by today's CPS and deliver dependable CPS that are applicable without sacrificing functionality or accessibility in complex and potentially hostile networked environment. The results of this project will be communicated in archival journal publications, conference venues and various workshops and lectures, and will be integrated at different academic levels.