FORENSIC: Fast and Autonomous Platform Anomalies detections in Cyber Physical Systems

FORENSIC：网络物理系统中的快速自主平台异常检测

• 批准号: 10077013
• 金额: $ 4.08万
• 依托单位: UNIVERSITY OF ESSEX
• 依托单位国家: 英国
• 项目类别: Collaborative R&D
• 财政年份: 2023
• 资助国家: 英国
• 起止时间: 2023 至 无数据
• 项目状态: 已结题
• 来源: https://gtr.ukri.org/projects?ref=10077013
• 关键词: FORENSIC; Fast; Autonomous; Platform; Anomalies

Market Need:Critical systems, such as the power grid, autonomous transportation, process control, and IoT systems, are examples of cyber-physical systems (CPS). Such CPS are liable to be attacked by malicious agents who can compromise the sensor measurements used to control them. Nevertheless, industries still rely on traditional software-based security mechanisms to tackle attack scenarios. A recent survey found that the current cybersecurity strategy would likely be outdated in two years because the mitigation actions generated are usually generic and difficult to put into context for mission-critical CPS.Solution:FORENSIC is a hardware-based solution that rapidly and autonomously monitors the health of the systems by collecting hardware data that are hard to compromise for threat detection. It utilises innovative technology to raise an alert for anomalies, if it observes deviations in the system's health. In addition, it is quicker, cheaper, and less power-consuming than its rivals. The system detects any operational changes in the systems iteratively and autonomously when an attacker might reach the critical component of the system by comparing the runtime collected data with "known good" baseline data.Target Markets:UK-based smart manufacturers and critical infrastructure providersAutomotive and healthcareSecurity solution providers within Industry 4.0

市场需求：电网、自主运输、流程控制和物联网系统等关键系统是网络物理系统(CP)的示例。这类CP很容易受到恶意代理的攻击，恶意代理可以破坏用于控制它们的传感器测量。然而，行业仍然依赖传统的基于软件的安全机制来应对攻击场景。最近的一项调查发现，当前的网络安全战略可能会在两年内过时，因为生成的缓解操作通常是通用的，很难放到任务关键型CP的上下文中。解决方案：取证是一种基于硬件的解决方案，通过收集难以危害威胁检测的硬件数据来快速自主地监控系统的健康状况。它利用创新技术，如果观察到系统健康状况出现偏差，就会发出异常警报。此外，它比竞争对手更快、更便宜、更省电。当攻击者可能到达系统的关键组件时，系统通过将运行时收集的数据与“已知良好”的基准数据进行比较，以迭代和自主的方式检测系统中的任何操作更改。目标市场：英国的智能制造商和关键基础设施提供商Industry 4.0中的汽车和医疗保健安全解决方案提供商