Breakthrough: Collaborative: Secure Algorithms for Cyber-Physical Systems

智能电网等现代系统由必须协同工作的网络和物理组件组成；这些系统被称为网络物理系统，简称CPS。保护这样的系统不仅仅是网络安全或物理安全，而是网络-物理安全。虽然威胁在CPS内成倍增加，但物理方面也可以减少威胁空间。与互联网等纯粹的网络系统不同，CPS以物理现实为基础。在这个项目中，这种物理现实被用来限制攻击者通过限制他/她对他/她的行为撒谎的能力来破坏系统的能力；如果攻击者与物理现实不一致，他/她的行为是可检测的，并且损害了他/她将来与系统交互的声誉。这项工作的影响是深远的，因为它为不仅为智能电网，而且为先进的交通和建筑环境系统开发固有安全CPS奠定了基础。新一代的跨学科科学家和工程师正在通过这项研究得到培训。该项目制定了一种新的方法，将来自网络和物理领域的知识整合到分布式算法中，并确保组合系统的可信性，从而确保安全性。安全性度量也是派生出来的，并且依赖于表示正确性的逻辑不变量。不变量检查本地操作的有效性或远程数据的准确性。它们可以用作对某个行为的防护，或者可以合并到一个动态的基于声誉的算法中。作为试验平台，将研究电网上的多边能源系统。对该系统的初步研究已经产生了在单一算法环境中隔离恶意节点的算法，使用将网络信息流与物理可测量信号进行比较的声誉度量。这项工作将扩展到其他算法和其他相关的电力系统，将开发一个可推广的框架，并将推导出更完整的度量。该项目具有重要的更广泛的影响。它开发了基于网络和物理系统方面保护关键基础设施的新方法。该项目还包括研究生和本科生参与网络物理系统的研究和设计，通过参与试验台和密苏里科技太阳能屋团队，该团队为美国能源部太阳能十项竞赛设计和建造房屋。

Modern systems such as the electric smart grid consist of both cyber and physical components that must work together; these are called cyber-physical systems, or CPS. Securing such systems goes beyond just cyber security or physical security into cyber-physical security. While the threats multiply within a CPS, physical aspects also can reduce the threat space. Unlike purely cyber systems, such as the internet, CPS are grounded in physical reality. In this project, this physical reality is used to limit an attacker's ability to disrupt the system by limiting his/her ability to lie about his/her actions; if an attacker is inconsistent with physical reality, his/her actions are detectable and damage his/her reputation for future interactions with the system. The impacts of this work are far-reaching, as it creates a basis for developing inherently security CPS for not only the electric smart grid, but also advanced transportation and building environmental systems. A new generation of interdisciplinary scientists and engineers are being trained through this research.This project formulates a novel methodology that incorporates knowledge from both the cyber and physical domains into a distributed algorithm and ensures the trustworthiness, thus security, of the composed system. Metrics for security are also derived and rest on logical invariants that express correctness. The invariants either check the validity of a local action or the accuracy of remote data. They may be used as guards against an action, or may be incorporated into a dynamic reputation-based algorithm.As a testbed, a multilateral energy system on an electrical network will be studied. Preliminary studies of this system have resulted in algorithms that isolate malicious nodes within the context of a single algorithm, using a reputation metric that compares cyber information flows to physically measurable signals. The work will be extended to other algorithms and other related power systems, a generalizable framework will be developed, and more complete metrics will be derived.The project has important broader impact. It develops new approaches for securing critical infrastructure based on both and cyber and physical system aspects. The project also includes graduate and undergraduate involvement in cyber-physical systems research and design through involvement with testbeds and the Missouri Science and Technology Solar House team which designs and constructs houses for competition in the US Department of Energy Solar Decathlon.