CPS:Medium:Foundations of Secure Cyber Physical Systems

CPS：中：安全网络物理系统的基础

• 批准号: 1136174
• 负责人: Suhas Diggavi
• 金额: $ 179.99万
• 依托单位: University of California-Los Angeles
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2011
• 资助国家: 美国
• 起止时间: 2011-09-01 至 2016-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1136174&HistoricalAwards=false
• 关键词: CPS; Medium; Foundations; Secure; Cyber

Cyber-physical systems regulating critical infrastructures, such as electrical grids and water networks, are increasingly geographically distributed, necessitating communication between remote sensors, actuators and controllers. The combination of networked computational and physical subsystems leads to new security vulnerabilities that adversaries can exploit with devastating consequences. A synchronized attack on the interdependent network components and physical plants can create complex and new security vulnerabilities that cannot be addressed by securing the constituent systems individually.This project takes a holistic view by utilizing the properties of physical systems to design new secure protocols and architectures for cyber-physical systems (CPS) through a unified conceptual framework, which uses models for the physical system and the communication/computation network to define precise attack models and vulnerabilities. These mathematical models are used to design algorithms and protocols with provable operational security guarantees, thus enabling the design of more trustworthy architectures and components. The algorithms, protocols, and architectures are validated on CPS testbeds targeting building, automobile, and smart-grid applications. Additionally, the research is being integrated into the curriculum via the creation of novel coursework combining the underlying control, information theory, cryptography, and embedded system concepts.By improving the protection of critical cyber-physical infrastructure against emerging threats, this research is expected to provide direct socio-economic benefits, ranging from individual organizations to a national scale. The inter-disciplinary team of this project will integrate teaching and curriculum development with the research, contributing to the training of a new generation of engineers well versed in the design of trustworthy cyber-physical systems.

调节关键基础设施（例如电网和水网络）的网络物理系统越来越多地分布在地理上，因此需要在遥控传感器，执行器和控制器之间进行通信。 网络计算和物理子系统的组合导致了对手可以利用毁灭性后果来利用的新安全漏洞。 对相互依存的网络组件和物理植物的同步攻击可以创建复杂而新的安全漏洞，无法通过单独保护组成系统来解决这些脆弱性，该项目通过将物理系统的属性通过设计新的安全协议和架构来实现网络的构架（CPS），并使用统一的概念框架，并使用统一的模型，该项目通过将物理系统的属性设计出新的安全协议和架构来进行整体视图，该项目将其构成，该模型和模型，该模型，该模型，该模型，该模型，该模型，该模型（CPS），该模型，该模型（CPS），该模型，该模型（CPS），该模型，该模型，该模型，该模型（漏洞。这些数学模型用于设计具有可证明的操作安全保证的算法和协议，从而实现了更值得信赖的体系结构和组件的设计。算法，协议和体系结构在针对建筑物，汽车和智能网格应用程序的CPS测试床上进行了验证。此外，这项研究正在通过创建新颖的课程结合，结合基础控制，信息理论，密码学和嵌入式系统概念。通过改善保护关键的网络物理基础架构免受新兴威胁的保护，这项研究预计将提供直接社会经济益处，从而为个人组织提供全国规模。该项目的跨学科团队将将教学和课程的发展与研究相结合，这有助于培训新一代的工程师精通可信赖的网络物理系统的设计。