TROCI: Towards Resilient Operation of Critical Infrastructures - application to water and energy systems

关键的基础设施是一个国家运转所必需的，也是日常生活所依赖的。最近的地缘政治事件凸显了保护这些基础设施免受各种威胁以确保国家安全和公民福祉的重要性。仪表和控制（I&C）系统广泛用于通过各个节点的传感器收集数据，做出决策，并通过远程和/或自主控制这些基础设施确保顺利运行。由于攻击面数量的增加，最近数字I&C的采用使这些基础设施容易受到网络物理攻击。针对I&C系统的网络安全侵犯日益受到世界各国的关注。如果不加以缓解，这些攻击可能会产生危险的后果。传统的I&C系统是为分析和控制目的而设计的集中数据处理系统。由于系统的复杂性和新的威胁行为体和载体的出现，这种方法已不再适用。为了填补这一空白，我们设想开发一种全面的混合硬件软件安全和隐私解决方案，以增强关键基础设施的弹性。实现这一愿景需要系统级思维、多学科专业知识和有效的工业终端用户参与。通过在设计I&C系统时采用全新的方法，拟议的解决方案将共同设计，重点是：-优化硬件软件交互-最小化信息流-通过冗余和智能化减少硬件故障的风险-通过最小的传感器放置减少入侵攻击面数量-通过本地处理保护数据免受中毒-通过创新的软件平台设计提高能源效率。研究结果将与我们的工业终端用户共同开发，并将部署在涉及配水系统和核电站的先进用例中。本计划所寻求的科技突破，将为加强关键基础设施的弹性、促进客观基准、培养熟练人力和加速行业采用，开辟新的研究机会。

Critical infrastructures are necessary for a country to function and upon which daily life depends. Recent geopolitical events have highlighted the importance of protecting these infrastructures from various threats to ensure national security and citizens' wellbeing. Instrumentation and control (I&C) systems are widely used to collect data through sensors from various nodes, make decisions and ensure smooth operation through remote and/or autonomous control of these infrastructures. The recent adoption of digital I&C makes these infrastructures vulnerable to cyber-physical attacks due to the increased number of attack surfaces. Cyber security infringements targeting I&C systems are a growing concern worldwide. If unmitigated, the attacks can have dangerous consequences. Traditional I&C systems were designed for a time with centralised data-processing for analytics and control purposes. This approach is no longer fit for purpose owing to the system complexity and the emergence of new threat actors and vectors. To fill this void, we envision to develop a comprehensive hybrid hardware-software security and privacy solution for the critical infrastructure resilience enhancement. Realisation of this vision will require system-level thinking, multidisciplinary expertise, and effective industrial end user engagement. By adopting a fundamentally new approach in designing the I&C systems, the proposed solution will be co-designed with emphasis on: -optimising the hardware-software interaction -minimising the information flow -reducing the risk of hardware fault through redundancy and smartification -lowering the number of intrusion attack surfaces through minimum sensor placement -safeguarding the data from poisoning through local processing -enhancing energy-efficiency through innovative software platform design. The results will be developed with our industrial end users and will be deployed in advanced use cases involving water distribution systems and nuclear power plants. The scientific and technical breakthroughs sought through this project will open new research opportunities in critical infrastructure resilience enhancement, promote objective benchmarking, develop skilled manpower and accelerate industry adoption.