Invariant-driven intrusion detection system (IDS) for cyber-physical systems

点击翻译按钮获取中文摘要

Cyber-physical systems (CPS) are computer systems that closely interact with their physical environments. Due**to their interconnected nature and relative lack of protection, CPS have been subject to security attacks by**malicious attackers. For example, automobiles, smart grids and insulin pumps are examples of CPSes that have**been attacked successfully. In our prior work, we developed ARTINALI, an invariant-based Intrusion**Detection System (IDS) for detecting attacks on CPS using an automated approach. We demonstrated**ARTINALI on two small CPS systems, and showed that it outperformed previous IDS in terms of both false**positives and false negatives. In this project, we plan to extend ARTINALI to large-scale CPS systems**comprising thousands of signals and events, and to systems with real-time operating constraints, which are of**interest to our partner, General Dynamics Land Systems (GDLS), Canada.