SaTC: CORE: Small: Data-driven Attack and Defense Modeling for Cyber-physical Systems

现代网络物理系统（CPS），如智能建筑或疫苗存储系统，涉及多个连接的设备（电话，传感器和控制器），可执行多个目标，包括温度或湿度控制。然而，诸如Stuxnet之类的攻击或最近对工业CPS的殖民地管道攻击暴露了重大漏洞，表明当前的安全技术不足以保证CPS的正常运行。本项目将开发一种有效的应对方法，通过主动建模和响应对复杂CPS的攻击，特别是在CPS中漏洞的有限数据的情况下，来持续应对智能攻击者。（物理）动力学是一种数据驱动的博弈论方法，用于保护CPS的网络和物理组件，是该项目的重点。三个紧密结合的研究重点将涵盖该项目的范围：（1）使用强化学习（RL）来表征攻击者意图的自动化策略;（2）使用博弈论，RL和贝叶斯优化的新颖组合来指导CPS安全策略的综合防御方法;以及（3）通过实际模拟进行评估和验证，模拟数据来自智能建筑的传感器和执行器。多种应用，包括保护关键基础设施和供应链，对公共安全的社会影响将受益于项目成果。将为一名博士生和多名本科生提供参加夏季研究项目的培训机会，特别是来自代表性不足的群体。一些K-12推广和教师培训活动，包括动手，互动游戏和防御者和攻击者之间的比赛将旨在激励K-12学生追求科学和工程。MSU非合作博弈论新研究生课程的课程将通过新的数据驱动方法来丰富解决游戏。已经创建了一个项目网站（https：//github.com/sandeepbanik/Data-Driven-Resilient-Systems），以提供对该项目所有数据的访问。每个出版物，论文或报告将与其中包含的数据图和表格的一组网页相关联。反过来，这些页面中的每一个都将指向包含数据本身、元数据以及重新生成数据所需的所有相关信息的文件。该网站将在奖项结束后至少3年内保持活跃，或与该奖项相关的数据的最后一次公开发布，以较晚者为准。该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

Modern cyber-physical systems (CPS) such as smart buildings or vaccine storage systems involve several connected devices (phones, sensors, and controllers) that perform multiple objectives including temperature or humidity control. However, attacks such as Stuxnet, or the recent Colonial pipeline attack on industrial CPS have exposed major vulnerabilities, demonstrating the inadequacy of current security techniques to guarantee proper functioning of a CPS. An effective response against smart attackers by pro-actively modeling and responding to attacks on a complex CPS at an ongoing basis, especially with limited data on vulnerabilities in the CPS will be developed in this project.Using the concept of hybrid attack graphs to capture discrete and domain-specific (physical) dynamics, a data-driven game-theoretic methodology for securing the cyber and physical components of a CPS is the focus of this project. Three closely integrated research thrusts will span the extent of this project: (1) automated strategies to characterize attacker intent using reinforcement learning (RL); (2) an integrated defense approach to guide the security strategies of the CPS using a novel combination of game theory, RL and Bayesian optimization; and (3) evaluation and validation via realistic simulations with emulated data from sensors and actuators of intelligent buildings.Multiple applications including securing critical infrastructure and supply chains with significant societal impact on public safety will benefit from the project outcomes. Training opportunities for one PhD student and multiple undergraduate students participating in summer research programs, especially from underrepresented groups will be created. Several K-12 outreach and teacher training activities, including hands-on, interactive games and contests between a defender and attacker will be designed to motivate K-12 students to pursue science and engineering. The curriculum of the new graduate course on non-cooperative game theory at MSU will be enriched with new data-driven methods for solving games. A project website has been created (https://github.com/sandeepbanik/Data-Driven-Resilient-Systems) to provide access to all data from this project. Each publication, thesis, or report will have associated with it a set of web pages for the data plots and tables contained therein. In turn, each of these pages will point to files containing the data itself, the metadata and, as relevant, all information needed to regenerate the data. This site will remain active for at least 3 years beyond the end of the award, or the last public release of data associated with the award, whichever is later.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.