Securing Cyber-physical Systems with Organic Computing Techniques(CYPHOC)

计算机物理系统(CPS)连接了两个完全不同的世界，嵌入式系统的世界(具有实时要求、传感器和执行器、可靠性、确定性行为等)。数字网络世界(具有全球可用的服务、数据云、多模式人机界面等)。CP面临不同的安全威胁，其中许多在CP设计时是未知的。通常，CPS的物理环境可能会受到威胁，但CPS的组件或空间分布组件之间的通信也可能受到威胁。在CYPHOC项目中，我们通过有机计算(OC)技术来解决这些安全问题。OC专注于适应性技术系统，通常具有学习能力，以解决复杂的问题。自我学习、自我适应、自我协调、自我组织或自我修复等属性发挥着重要作用。在CYPHOC中，“设计安全”得到了“运行时安全”的补充，也就是说，CPS的组件能够集体检测新类型的安全威胁并做出相应的反应。特别是，解决这一问题涉及到三个重要的研究课题，这些课题在CYPHOC项目(使用有机计算技术保护网络物理系统)中得到解决：基于有效和高效的通信机制对威胁情况进行协作检测和建模(WICK教授组)，检测CPS组件之间的依赖关系并在这种情况下做出适当反应的机制(Hähner教授组)，以及针对CPS受攻击组件的保证保护，包括对上述机制的保护(Wacker教授组)。该项目包括三个案例研究，以演示所提出的技术的适用性(分布式入侵检测、智能摄像机网络和工业4.0场景)。

Cyber-Physical Systems (CPS) connect two quite different worlds, the world of embedded systems (with real-time requirements, sensors and actuators, dependability, deterministic behavior, etc.) with the world of digital networks (with globally available services, data clouds, multi-modal man-machine interfaces, etc.). CPS are exposed to different security threats, many are not known at the design-time of a CPS. In general, the physical surrounding of the CPS may be endangered, but also the components of the CPS or the communication between spatially distributed components, for instance. In the CYPHOC project, we address these security problems by means of Organic Computing (OC) techniques. OC focuses on adaptive technical systems, typically empowered with learning abilities, to solve complex problems. Properties such as self-learning, self-adaptation, self-coordination, self-organization, or self-healing play an important role. In CYPHOC, "security-by-design" is complemented by "security-at-runtime", that is, the components of a CPS are enabled to detect new kinds of security threats collectively and to react accordingly. In particular, solving this involves three important research topics that are addressed in the CYPHOC project (Securing Cyber-physical Systems with Organic Computing Techniques): collaborative detection and modeling of threatening situations based on effective and efficient communication mechanisms (group of Prof. Sick), mechanisms to detect dependencies between components of the CPS and to react appropriately in such situations (group of Prof. Hähner), and guaranteed protection against compromised components of the CPS including protection of the above mechanisms (group of Prof. Wacker). The project includes three case studies to demonstrate the applicability of the proposed techniques (distributed intrusion detection, smart camera network, and an industry 4.0 scenario).