Breakthrough: Collaborative: Secure Algorithms for Cyber-Physical Systems

智能电网等现代系统由必须协同工作的网络和物理组件组成;这些称为网络物理系统，或CPS。 保护这些系统不仅仅是网络安全或物理安全，而是网络物理安全。 虽然CPS内的威胁成倍增加，但物理方面也可以减少威胁空间。与纯粹的网络系统（如互联网）不同，CPS基于物理现实。 在这个项目中，这个物理现实被用来限制攻击者的能力，通过限制他/她的能力，他/她的行为撒谎破坏系统;如果攻击者是不符合物理现实，他/她的行为是可检测的，并损害他/她的声誉，为未来的互动与系统。这项工作的影响是深远的，因为它为开发固有安全的CPS奠定了基础，不仅适用于智能电网，还适用于先进的交通和建筑环境系统。 新一代跨学科的科学家和工程师正在通过这项研究进行培训。该项目制定了一种新的方法，将网络和物理领域的知识纳入分布式算法，并确保组成系统的可靠性，从而确保安全性。 安全性的验证也是派生的，并依赖于表示正确性的逻辑不变量。不变量检查本地操作的有效性或远程数据的准确性。它们可以被用来作为防范一个动作，或者可以被纳入一个动态的信誉为基础的algorithm.As一个试验台，电力网络上的多边能源系统将被研究。对该系统的初步研究已经产生了在单个算法的上下文中隔离恶意节点的算法，该算法使用将网络信息流与物理上可测量的信号进行比较的声誉度量。 该工作将扩展到其他算法和其他相关的电力系统，将开发一个可推广的框架，并将导出更完整的度量。 它开发了基于网络和物理系统方面保护关键基础设施的新方法。 该项目还包括研究生和本科生参与网络物理系统的研究和设计，通过参与测试台和密苏里州科学和技术太阳能房屋团队，设计和建造房屋，在美国能源部太阳能十项全能比赛。

Modern systems such as the electric smart grid consist of both cyber and physical components that must work together; these are called cyber-physical systems, or CPS. Securing such systems goes beyond just cyber security or physical security into cyber-physical security. While the threats multiply within a CPS, physical aspects also can reduce the threat space. Unlike purely cyber systems, such as the internet, CPS are grounded in physical reality. In this project, this physical reality is used to limit an attacker's ability to disrupt the system by limiting his/her ability to lie about his/her actions; if an attacker is inconsistent with physical reality, his/her actions are detectable and damage his/her reputation for future interactions with the system. The impacts of this work are far-reaching, as it creates a basis for developing inherently security CPS for not only the electric smart grid, but also advanced transportation and building environmental systems. A new generation of interdisciplinary scientists and engineers are being trained through this research.This project formulates a novel methodology that incorporates knowledge from both the cyber and physical domains into a distributed algorithm and ensures the trustworthiness, thus security, of the composed system. Metrics for security are also derived and rest on logical invariants that express correctness. The invariants either check the validity of a local action or the accuracy of remote data. They may be used as guards against an action, or may be incorporated into a dynamic reputation-based algorithm.As a testbed, a multilateral energy system on an electrical network will be studied. Preliminary studies of this system have resulted in algorithms that isolate malicious nodes within the context of a single algorithm, using a reputation metric that compares cyber information flows to physically measurable signals. The work will be extended to other algorithms and other related power systems, a generalizable framework will be developed, and more complete metrics will be derived.The project has important broader impact. It develops new approaches for securing critical infrastructure based on both and cyber and physical system aspects. The project also includes graduate and undergraduate involvement in cyber-physical systems research and design through involvement with testbeds and the Missouri Science and Technology Solar House team which designs and constructs houses for competition in the US Department of Energy Solar Decathlon.