CPS: Breakthrough: Towards a Science of Attack Composition, Mitigation, and Verification in Cyber-Physical Systems: A Passivity-Based Framework

该项目侧重于建模和减轻网络物理系统（CPS）的网络攻击，这些攻击在医疗保健、能源和交通等社会各个方面越来越普遍。对CPS的网络组件发起的攻击可以远程进行，经济成本很低，但由于网络和物理组件之间的紧密耦合，攻击会显著降低CPS的安全性和性能。该项目开发了一个基于被动的框架，用于对CPS进行建模、组合和减轻多种攻击。无源性是一种能量耗散特性，它为分析和组成互联系统提供了基本规律。除了被动对手模型和组合规则之外，该项目还将研究将组合攻击模型分解为基本原语的技术，这将导致开发新的缓解策略。将引入近似双仿真技术来验证开发的对手模型和缓解策略。建议的方法是通用的，将适用于缓解包括交通、能源、制造业和其他行业在内的多个行业出现的CPS安全挑战。该项目的目标如下：(a)研究和开发多种攻击的被动动态模型，以及承认被动表示的攻击类别的特征；(b)调查和制定基于被动性的构成和分解规则，从而能够识别新的攻击变体和相关的缓解战略；(c)研究和开发用于验证组合对手模型和缓解战略的近似技术；(d)通过实验测试平台对所提出的模型进行验证和原型设计。

This project focuses on modeling and mitigating cyber attacks on Cyber-Physical Systems (CPS), which are increasingly prevalent in all aspects of society such as health care, energy, and transportation. Attacks initiated on the cyber components of CPS can be mounted remotely at little economic cost and can significantly degrade the safety and performance of CPS due to the tight coupling between cyber and physical components. This project develops a passivity-based framework for modeling, composing, and mitigating multiple attacks on CPS. Passivity is an energy dissipation property that provides basic rules for analyzing and composing interconnected systems. In addition to passive adversary models and composition rules, this project will investigate techniques for decomposition of composed attack models into basic primitives which will lead to development of new mitigation strategies. Approximate bi-simulation techniques will be introduced to verify the developed adversary models and mitigation strategies. The proposed approach is general and will be applicable to mitigate CPS security challenges arising in multiple sectors including transportation, energy, manufacturing, and others.The goals of the project are as follows: (a) research and development of passive dynamical models of multiple attacks, as well as characterization of the class of attacks that admit a passive representation; (b) investigation and development of passivity-based composition and decomposition rules, enabling identification of new attack variants and associated mitigation strategies; (c) research and development of approximate techniques for verification of composed adversary models and mitigation strategies; and (d) validation and prototyping of the proposed models through an experimental testbed.