CRII: CPS: Secure-by-Design Synthesis of Cyber-Physical Systems

CRII：CPS：网络物理系统的安全设计综合

基本信息

批准号：
1656981
负责人：
Andrew Clark
金额：
$ 17.5万
依托单位：
Worcester Polytechnic Institute
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2017
资助国家：
美国
起止时间：
2017-01-15 至 2019-12-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1656981&HistoricalAwards=false
关键词：
CRII CPS Secure Design Synthesis

项目摘要

Cyber-physical systems, including unmanned vehicles, networked medical devices, and smart manufacturing, are expected to autonomously perform complex tasks, while satisfying strict requirements on safety and performance. An emerging approach to designing such systems is to automatically generate a controller that captures the desired functionality of the system. The ability of the system to execute the control, however, may be impacted by malicious adversaries mounting cyber and physical attacks. The goal of this project is to develop a framework for automatically generating control actions that jointly consider safety, performance, and security. The proposed effort contains two research thrusts. The first thrust consists of methodologies for integrating security threats into logical specifications for Cyber-physical systems (CPS), and verifying whether a CPS satisfies the specification under a given adversary model. Verification is performed via a new class of behavioral games that we develop. The second thrust consists of approaches for automatic synthesis of secure controllers that satisfy the specifications developed in the first thrust. The project aims to formulate passivity-based rules for composing multiple control laws to ensure security against multi-stage attacks, as well as methods for switching controllers based on the current estimate of the adversary actions.This effort will contribute to development of CPS, such as autonomous vehicles and smart homes, that operate safely in the presence of cyber attacks. Algorithms developed in the project will be implemented on mobile platforms in order to demonstrate the practical feasibility of our approach and ensure successful and timely transition to practice. Research will be conducted by graduate student research assistants as part of their training, while implementation will be done in conjunction with undergraduate research projects at Worcester Polytechnic Institute. Results will be disseminated through peer-reviewed publications, intellectual property disclosures, and open-source software release via CPS Virtual Organization (CPS-VO).

预计包括无人车，网络医疗设备和智能制造在内的网络物理系统将自主执行复杂的任务，同时满足对安全性和性能的严格要求。设计此类系统的一种新兴方法是自动生成一个捕获系统所需功能的控制器。但是，系统执行控制的能力可能会受到越来越多的网络和身体攻击的恶意对手的影响。该项目的目的是开发一个框架，以自动生成共同考虑安全性，性能和安全性的控制动作。拟议的努力包含两个研究推力。第一个推力包括将安全威胁集成到网络物理系统（CPS）逻辑规范中的方法论，并验证CPS是否满足给定对手模型下的规范。验证是通过我们开发的新型行为游戏进行的。第二个推力包括自动合成安全控制器的方法，该方法满足了第一个推力中开发的规格。该项目旨在制定基于被动性的规则来制定多个控制法律，以确保根据当前对对手行动的估计进行切换控制器的安全性，以及在对抗性行动的当前估计中进行切换的方法。这将有助于在存在网络攻击的情况下安全运行的CPS的开发，例如自动驾驶汽车和智能房屋。项目中开发的算法将在移动平台上实施，以证明我们方法的实际可行性，并确保成功，及时过渡到实践。研究生研究助理将作为培训的一部分进行研究，而实施将与伍斯特理工学院的本科研究项目一起进行。结果将通过同行评审的出版物，知识产权披露和开源软件通过CPS虚拟组织（CPS-VO）传播。