Collaborative Research: CPS: Medium: Sensor Attack Detection and Recovery in Cyber-Physical Systems

随着新技术被集成到交互和控制物理系统中，网络物理系统（CPS）中出现了新的漏洞。除了软件和网络攻击之外，传感器攻击是CPS中的一个重要安全风险，攻击者会改变传感信息以对物理系统产生负面干扰。对恶意传感器信息采取行动可能会导致严重后果。虽然许多研究都致力于保护CPS免受传感器攻击，但仍有几个关键问题尚未解决。首先，现有的攻击检测工作倾向于同时最小化检测延迟和虚警；然而，由于两个度量标准之间的内在权衡，这个目标并不总是可以实现的。其次，在攻击检测方面已经做了很多工作，但一个关键问题仍然存在，即在检测到攻击后该怎么做。重要的是，CPS应该检测攻击并在无法挽回的后果发生之前从攻击中恢复过来。第三，检测和恢复之间的相互关系没有得到足够的重视：将检测和恢复技术结合起来可以更有效地防御传感器攻击。本项目旨在解决这些关键问题，并开发新的检测和恢复技术。该项目旨在通过解决CPS中的实时自适应攻击检测和恢复，实现对传感器攻击的及时和安全防御。首先，本项目探索了新的攻击检测技术，该技术可以以数据驱动的方式动态平衡检测延迟和误报率之间的权衡。这样，检测器将以可预测的延迟提供攻击检测，并保持检测方法的可用性。其次，该项目追求新的恢复技术，使系统在恢复截止日期之前恢复到安全状态，同时最大限度地减少系统对正在执行的任务的退化。第三，本项目研究了以协调的方式解决攻击检测和恢复的有效技术，以显着提高对攻击的响应。具体研究任务包括开发实时自适应传感器攻击检测技术、实时攻击恢复技术以及攻击检测与恢复协调技术。开发的技术将在多个CPS模拟器和自动驾驶汽车试验台上实施和评估。该奖项反映了美国国家科学基金会的法定使命，并通过使用基金会的知识价值和更广泛的影响审查标准进行评估，被认为值得支持。

New vulnerabilities arise in Cyber-Physical Systems (CPS) as new technologies are integrated to interact and control physical systems. In addition to software and network attacks, sensor attacks are a crucial security risk in CPS, where an attacker alters sensing information to negatively interfere with the physical system. Acting on malicious sensor information can cause serious consequences. While many research efforts have been devoted to protecting CPS from sensor attacks, several critical problems remain unresolved. First, existing attack detection works tend to minimize the detection delay and false alarms at the same time; this goal, however, is not always achievable due to the inherent trade-off between the two metrics. Second, there has been much work on attack detection, yet a key question remains concerning what to do after detecting an attack. Importantly, a CPS should detect an attack and recover from the attack before irreparable consequences occur. Third, the interrelation between detection and recovery has met with insufficient attention: Integrating detection and recovery techniques would result in more effective defenses against sensor attacks.This project aims to address these key problems and develop novel detection and recovery techniques. The project aims to achieve timely and safe defense against sensor attacks by addressing real-time adaptive-attack detection and recovery in CPS. First, this project explores new attack detection techniques that can dynamically balance the trade-off between the detection delay and the false-alarm rate in a data-driven fashion. In this way, the detector will deliver attack detection with predictable delay and maintain the usability of the detection approach. Second, this project pursues new recovery techniques that bring the system back to a safe state before a recovery deadline while minimizing the degradation to the mission being executed by the system. Third, this project investigates efficient techniques that address the attack detection and recovery in a coordinated fashion to significantly improve response to attacks. Specific research tasks include the development of real-time adaptive sensor attack detection techniques, real-time attack recovery techniques, and attack detection and recovery coordination techniques. The developed techniques will be implemented and evaluated on multiple CPS simulators and an autonomous vehicle testbed.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.