SaTC: CORE: Small: Socio-Technical Approaches for Securing Cyber-Physical Systems from False Claim Attacks

网络空间的脆弱性和易受攻击性使社会面临破坏的风险，并造成严重后果。虽然使用病毒和勒索软件等工具对网络空间的直接攻击已经得到了广泛的研究，但很少有人关注如何应对一种新兴的超视距威胁：通过改变不知情用户的消费行为来间接攻击网络物理系统（CPS）的对手。该项目正在探索将社会科学与系统工程相结合的社会技术方法，以保护和捍卫CPS免受部署此类间接攻击的对手的有害行为。该想法由两层表示：（i）由社交媒体和其他社交互动形成的信息层，以及（ii）表示联网CPS的物理组件的物理层（例如，关键基础设施网络，物联网）。这项工作设想了一种通过信息层的攻击，这种攻击会引起人类的紧急反应，从而对物理层的性能产生不利影响。本提案的研究目标是了解虚假声明在暴露和加剧CPS及其性能的脆弱性和脆弱性方面的影响。为了打击此类攻击并确保网络物理系统的安全性和可信性，该项目正在开发四个研究组成部分的知识，这些组成部分可以（i）通过调查驱动的基于代理的模型，模拟和控制信息层虚假声明对人类影响的传播，㈡将这种扩散与物理层的性能和脆弱性联系起来，并制定保护-拦截措施，跨层的反应优化模型，（iii）用在社交网络上传播的虚假信息及其对电力网络的影响的具体示例来测试和评估模型，以及（iv）提供一个将研究与课堂学习和外展相结合的计划。该项目由SATC和促进竞争性研究的既定计划（EPSCoR）共同资助该奖项反映了NSF的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

The fragility and vulnerability of cyberspace has exposed society to risks of disruption with severe consequences. Although direct attacks on cyberspace with tools such as viruses and ransomware have been extensively examined, much less attention has been focused on preparing for an emerging, over-the-horizon threat: adversaries who attack cyber-physical systems (CPS) indirectly by altering consumption behavior of unwitting users influenced through false claims such as of traffic jams or gasoline shortages. This project is exploring socio-technical approaches that integrate social science with systems engineering to protect and defend CPS against harmful actions by adversaries who deploy such indirect attacks.This idea is represented with two layers: (i) an information layer being formed from social media and other social interactions, and (ii) a physical layer representing the physical components of a networked CPS (e.g., critical infrastructure network, Internet of Things). This work imagines an attack through the information layer that causes emergent human responses that adversely alter performance in the physical layer. The research objective of this proposal is to understand the effects of false claims in exposing and exacerbating the fragility and vulnerability of CPS and their performance. To combat such attacks and ensure the security and trustworthiness of cyber-physical systems, this project is developing knowledge across four research components that can (i) model and control the spread of influence on humans by false claims in the information layer through survey-driven agent-based models, (ii) relate this spread to the performance and vulnerabilities of the physical layer and develop protection-interdiction-reaction optimization models across layers, (iii) test and evaluate the model with a concrete example of false information spread on social networks and its effects on power networks, and (iv) offer a plan for the integration of research with classroom learning and outreach.This project is jointly funded by SaTC and the Established Program to Stimulate Competitive Research (EPSCoR).This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.