CAREER: Practical Control Engineering Principles to Improve the Security and Privacy of Cyber-Physical Systems

该项目的重点是通过整合信息安全界的理论和最佳做法以及控制理论界的实际方法来解决网络物理系统的安全和隐私问题。该项目的第一部分侧重于电网、供水网络和交通网络等网络物理关键基础设施的安全和保护，以防止可能导致服务中断、基础设施损坏甚至生命损失的中断。该项目的第二部分关注CPS的隐私，并提出了新的算法来处理人类身体活动前所未有的数据收集粒度。这两个部分的工作重点是将实用的控制理论概念整合到计算机安全解决方案中。特别是，在过去的十年中，控制理论界提出了在CPS安全方面取得根本性进展；同时，计算机安全界在CPS安全和隐私的实际实施方面也取得了重大进展。虽然这两个领域各自独立地取得了重大进展，但这两个领域之间仍然存在巨大的语言和概念障碍，因此，计算机安全专家从控制理论研究人员那里制定了一项平行和独立的研究议程。为了设计未来的CPS安全和隐私机制，这两个社区需要更紧密地联系在一起，并利用各自开发的见解。该项目试图通过在两个研究问题中利用系统受控的物理特性来促进这两个群体的集成：(1)基于物理的CPS安全；(2)基于物理的CPS保密。基于物理的CPS安全利用来自传感器和控制信号的时间序列来检测与预期操作的偏差。在安全和控制理论领域，这是一个不断增长的研究领域，尽管在这个领域存在几个开放的问题。这一建议解决了一些公开的问题，包括定义新的评估指标以捕捉控制系统独特的操作特性，对不同的模型和异常检测测试建议进行一致的评估，以及开发新的工业控制协议解析器。基于物理的CPS隐私侧重于如何引导一般隐私建议在网络物理系统中的实施，例如公平信息实践原则，利用这些物理系统通常有一个目标要实现的事实，而这个目标取决于运营商的数据处理策略。该项目的重点是调查隐私和控制性能之间的权衡，并开发工具来指导如何实施数据最小化、数据延迟和数据保留。

This project focuses on tackling the security and privacy of Cyber-Physical Systems (CPS) by integrating the theory and best practices from the information security community as well as practical approaches from the control theory community. The first part of the project focuses on security and protection of cyber-physical critical infrastructures such as the power grid, water distribution networks, and transportation networks against computer attacks in order to prevent disruptions that may cause loss of service, infrastructure damage or even loss of life. The second part of the project focuses on privacy of CPS and proposes new algorithms to deal with the unprecedented levels of data collection granularity of physical human activity. The work in these two parts focuses on the integration of practical control theory concepts into computer security solutions. In particular, in the last decade, the control theory community has proposed fundamental advances in CPS security; in parallel, the computer security community has also achieved significant advances in practical implementation aspects for CPS security and privacy. While both of these fields have made significant progress independently, there is still a large language and conceptual barrier between the two fields, and as a result, computer security experts have developed a parallel and independent research agenda from control theory researchers. In order to design future CPS security and privacy mechanisms, the two communities need to come closer together and leverage the insights that each has developed. This project attempts to facilitate the integration of these two communities by leveraging the physical properties of the system under control in two research problems: (1) Physics-based CPS security; and (2) Physics-based CPS privacy.Physics-based CPS security leverages the time series from sensor and control signals to detect deviations from expected operation. This is a growing area of research in both security and control theory venues, although there are several open problems in this space. This proposal tackles some of these open problems including the definition of new evaluation metrics that capture the unique operational properties of control systems, the consistent evaluation of different proposals for models and anomaly detection tests, and the development of new industrial control protocol parsers. Physics-based CPS privacy focuses on how to guide the implementation of general privacy recommendations like the Fair Information Practice principles into cyber-physical systems, leveraging the fact that these physical systems often have an objective to achieve, and this objective depends on the data-handling policies of the operator. The project focuses on investigating the trade-off between privacy and control performance and developing tools to guide how data minimization, data delays, and data retention should be implemented.