CAREER: Going Beyond Linear Models for Attack Detection and Defense in Control Systems

职业：超越控制系统中攻击检测和防御的线性模型

• 批准号: 2143485
• 负责人: Justin Ruths
• 金额: $ 50.54万
• 依托单位: University of Texas at Dallas
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2022
• 资助国家: 美国
• 起止时间: 2022-05-01 至 2027-04-30
• 项目状态: 未结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=2143485&HistoricalAwards=false
• 关键词: CAREER; Going; Beyond; Linear; Models

This Faculty Early Career Development (CAREER) project will contribute new knowledge related to the security of automation and control systems. Modern control systems enable automation across industries, from manufacturing to chemical processing, and regulate and monitor critical infrastructure, such as power, water, fuel, and transportation. However, these systems are susceptible to cyber-based attacks that target the computers that operate them. Cyber-based attacks could damage physical infrastructure, compromise safety, and harm the environment. Attack mitigation techniques rely on detecting discrepancies between the reported behavior of a physical process and the behavior predicted based on a model, or digital twin, of the process. However, existing models are often insufficient to capture the complex behavior of real-world applications. This award supports fundamental research for the development of detectors that aptly recognize, deter, and mitigate attacks. It will thus benefit the U.S. economy and society through increased resilience to cyber-attacks. Further, to enable a diversified and integrated workforce capable of meeting the security needs of the nation, this award will develop connections between university and community college students. It will support outreach activities and live demonstrations at local schools and community events to positively impact engineering education and to broaden participation of underrepresented groups in technical fields of study. The sensitivity of model-based detectors is intimately connected with the quality of the model used. To date, work has focused on linear dynamical models, which do not capture the complex behavior of real-world applications. To fill this gap, this award will develop a systematic framework for the security analysis of systems with uncertainty and of switched dynamical models. This research will mathematically characterize the relationship between different sources of uncertainty and detector sensitivity. It will parameterize the impact of a potential attack in terms of the system and detector uncertainty, establishing a vulnerability index based on system and uncertainty characteristics. The research team will act as both attacker and defender to develop new attack vectors that leverage the uncertainty present in systems that switch between different modes of operation.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

该教师早期职业发展（CAREER）项目将贡献与自动化和控制系统安全相关的新知识。现代控制系统可实现从制造到化学加工等各个行业的自动化，并调节和监控电力、水、燃料和运输等关键基础设施。 然而，这些系统很容易受到针对运行它们的计算机的网络攻击。基于网络的攻击可能会损坏物理基础设施、危及安全并危害环境。 攻击缓解技术依赖于检测物理过程报告的行为与基于过程模型或数字孪生预测的行为之间的差异。然而，现有模型通常不足以捕获现实应用程序的复杂行为。该奖项支持开发能够适当识别、阻止和减轻攻击的探测器的基础研究。因此，它将通过增强对网络攻击的抵御能力使美国经济和社会受益。 此外，为了建立一支能够满足国家安全需求的多元化和综合性劳动力队伍，该奖项将发展大学和社区学院学生之间的联系。它将支持当地学校和社区活动的外展活动和现场演示，以积极影响工程教育并扩大代表性不足群体在技术研究领域的参与。基于模型的检测器的灵敏度与所用模型的质量密切相关。 迄今为止，工作主要集中在线性动态模型上，该模型无法捕获现实应用程序的复杂行为。 为了填补这一空白，该奖项将开发一个系统框架，用于不确定性系统和切换动态模型的安全分析。 这项研究将从数学角度描述不同不确定性来源与探测器灵敏度之间的关系。 它将根据系统和探测器的不确定性来参数化潜在攻击的影响，建立基于系统和不确定性特征的脆弱性指数。 研究团队将同时充当攻击者和防御者的角色，开发新的攻击向量，利用在不同操作模式之间切换的系统中存在的不确定性。该奖项反映了 NSF 的法定使命，并通过使用基金会的智力优点和更广泛的影响审查标准进行评估，被认为值得支持。

项目成果

Co-Design for Resilience and Performance

弹性和性能的协同设计

• DOI: 10.1109/tcns.2022.3229774
• 发表时间: 2022
• 期刊: IEEE Transactions on Control of Network Systems
• 影响因子: 4.2
• 作者: Hashemi, Navid;Ruths, Justin
• 通讯作者: Ruths, Justin