Machine against machine: towards a better understanding of future cyber physical system security

该项目旨在解决保护网络物理系统免受复杂网络攻击的问题。 网络物理系统（CPS）将联合收割机计算机和通信技术与感测物理世界并与物理世界交互的设备相结合，以实现期望的物理效果。它们涵盖广泛的系统，包括工业控制系统（ICS），关键基础设施，自动驾驶汽车和消费物联网（IoT）设备。 这些系统由集中式或自主式控制算法控制，使系统的物理部分以期望的方式运行。 该提案解决了更复杂的网络攻击所带来的问题，这些网络攻击通过向这些控制算法提供虚假信息或损害系统的关键组件来精确地针对这些控制算法。由于攻击很可能是通过自动化流程进行的，因此针对它们部署的防御机制也必须是自主的。 这与传统的信息技术（IT）安全非常不同，在传统的IT安全中，防御过程主要是人为驱动的，并且需要新的理论框架来描述这些机器对抗机器的情况将如何随着时间的推移而演变，由于防御和进攻过程相互优化，并且由于赛博物理系统的作战环境发生重大变化，同时受到进化压力的影响他们在努力防守和进攻拟议项目的目标是双重的。 首先，我们将尝试建立混合人工智能（AI）为基础的防御机制，结合联合收割机的优势，基于规则的推理专家系统和最近的机器学习方法。 要做到这一点，我们将使用本体论，一个完善的知识表示工具，构建高层次的概念模型的CPS的网络和物理组件的启发，他们试图控制的物理世界的法律和规则。 为了测试和评估这样的防御过程中，我们将扩大实验CPS仿真方法，我们已经开发了一些特定的应用领域，如电力网络和空中交通管制系统，并适用于新的领域，以验证的灵活性和一般的生存能力的本体的使用。 其次，我们将尝试开发一个理论框架，用于描述CPS背景下机器对机器军备竞赛中的协同优化和协同进化现象，通过应用博弈论和数学优化的概念和数学结构，以便我们能够更好地理解，建模和预测此类军备竞赛的最终结果。

This project proposes to address the problem of protecting Cyber Physical Systems against sophisticated cyber attacks. Cyber physical systems (CPS) combine computer and communications technology with devices that sense and interact with the physical world in order to achieve a desired physical effect. They encompass a wide array of systems including Industrial Control Systems (ICS), critical infrastructure, autonomous vehicles, and consumer Internet of Things (IoT) devices. These systems are controlled by centralized or autonomous control algorithms that make the physical portions of the system behave in a desired manner. This proposal addresses the problem posed by the more sophisticated cyber attacks that target precisely these control algorithms by providing them with false information or compromising key components of the system. Since attacks will most likely be conducted by automated processes, the defense mechanisms deployed against them will also have to be autonomous. This is a very different situation from traditional Information Technology (IT) security where defensive processes are mostly human-driven, and required new theoretical frameworks to describe how these machine-against-machine situations will evolve over time, as both defensive and offensive processes optimize against each other and are simultaneously subject to evolutionary pressures due to significant changes in the operational environments of the cyber physical systems they are trying to defend and attack.******The goal of the proposed project is two-fold. First, we will attempt to build hybrid Artificial Intelligence (AI) based defensive mechanisms that combine the advantages of rule-based reasoning expert systems and more recent machine-learning approaches. To do so, we will use ontologies, a well-established knowledge representation tool, to construct high level conceptual models of the cyber and physical components of CPS inspired by the laws and rules of the physical world they are trying to control. To test and evaluate such defensive process we will expand on the experimental CPS emulation approach we have developed for a few specific application domains, such as electrical networks and Air Traffic Control systems, and apply to new domains, in order to validate the flexibility and general viability of the of use of ontologies. Second, we will attempt to develop a theoretical framework for describing the phenomena of co-optimisation and co-evolution in the machine-against-machine arms-race in the context of CPS, by applying concepts and mathematical constructs from Game Theory and mathematical optimization, so that we can better understand, model and predict the eventual outcome of such arms races.