CAREER: Securing Mobile Cyber-Physical Systems (CPSs) Against Stealthy Attacks

随着采用移动的节点的网络物理系统（CPS）不断融入物理世界，确保其安全性成为至关重要的目标。由于它们的移动性、实时性、能量和安全性约束，再加上它们对受到干扰和故意干扰的通信介质的依赖，移动的CPS中的预计复杂性将远远超过传统计算系统。这种复杂性的增加扩大了恶意攻击者的机会，并且许多组件一起交互，区分正常和异常行为变得非常具有挑战性。本项目的研究工作福尔斯沿着两个主要方向进行：（1）识别隐身攻击和（2）开发防御机制。沿着的第一个推力，一个统一的理论框架，发现攻击系统的方式，对手解决马尔可夫决策过程的问题，以确定最佳和次优的攻击策略。攻击的影响是通过不同的实例的损害和成本指标进行评估。沿着第二个方向，我们将开发新的随机化控制器和随机化感知异常检测机制，以防止、检测和减轻隐形攻击。CAREER项目的成果将最终为在机器人、自动驾驶汽车和智能交通系统领域构建更安全的系统提供坚实的基础。教育活动--例如课程开发和实验室实践经验--将为学生提供建立可靠和值得信赖的系统的基本技能，同时确保本科生、女性和代表性不足的少数族裔的参与。外展活动将使高中学生接触计算机科学教育和科学研究。

As Cyber-Physical Systems (CPSs) employing mobile nodes continue to integrate into the physical world, ensuring their safety and security become crucial goals. Due to their mobility, real-time, energy and safety constraints, coupled by their reliance on communication mediums that are subject to interference and intentional jamming, the projected complexities in Mobile CPSs will far exceed those of traditional computing systems. Such increase in complexity widens the malicious opportunities for adversaries and with many components interacting together, distinguishing between normal and abnormal behaviors becomes quite challenging.The research work in this project falls along two main thrusts: (1) identifying stealthy attacks and (2) developing defense mechanisms. Along the first thrust, a unifying theoretical framework is developed to uncover attacks in a systematic manner whereby an adversary solves Markovian Decision Processes problems to identify optimal and suboptimal attack policies. The effects of the attacks are assessed through different instantiations of damage and cost metrics. Along the second thrust, novel randomization controllers and randomization-aware anomaly detection mechanisms are developed to prevent, detect and mitigate stealthy attacks.The outcomes of this CAREER project will ultimately provide concrete foundations to build more secure systems in the areas of robotics, autonomous vehicles, and intelligent transportation systems. The educational activities--as in curriculum development and hands-on laboratory experiences--will provide students with the essential skills to build dependable and trustworthy systems, while ensuring the participation of undergraduates, women and underrepresented minorities. The outreach activities will expose high school students to Computer Science education and scientific research.