CAREER: Practical Control Engineering Principles to Improve the Security and Privacy of Cyber-Physical Systems

职业：提高网络物理系统安全性和隐私性的实用控制工程原理

• 批准号: 1931573
• 负责人: Alvaro Cardenas
• 金额: $ 45.33万
• 依托单位: University of California-Santa Cruz
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2019
• 资助国家: 美国
• 起止时间: 2019-01-01 至 2024-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1931573&HistoricalAwards=false
• 关键词: CAREER; Practical; Control; Engineering; Principles

This project focuses on tackling the security and privacy of Cyber-Physical Systems (CPS) by integrating the theory and best practices from the information security community as well as practical approaches from the control theory community. The first part of the project focuses on security and protection of cyber-physical critical infrastructures such as the power grid, water distribution networks, and transportation networks against computer attacks in order to prevent disruptions that may cause loss of service, infrastructure damage or even loss of life. The second part of the project focuses on privacy of CPS and proposes new algorithms to deal with the unprecedented levels of data collection granularity of physical human activity. The work in these two parts focuses on the integration of practical control theory concepts into computer security solutions. In particular, in the last decade, the control theory community has proposed fundamental advances in CPS security; in parallel, the computer security community has also achieved significant advances in practical implementation aspects for CPS security and privacy. While both of these fields have made significant progress independently, there is still a large language and conceptual barrier between the two fields, and as a result, computer security experts have developed a parallel and independent research agenda from control theory researchers. In order to design future CPS security and privacy mechanisms, the two communities need to come closer together and leverage the insights that each has developed. This project attempts to facilitate the integration of these two communities by leveraging the physical properties of the system under control in two research problems: (1) Physics-based CPS security; and (2) Physics-based CPS privacy.Physics-based CPS security leverages the time series from sensor and control signals to detect deviations from expected operation. This is a growing area of research in both security and control theory venues, although there are several open problems in this space. This proposal tackles some of these open problems including the definition of new evaluation metrics that capture the unique operational properties of control systems, the consistent evaluation of different proposals for models and anomaly detection tests, and the development of new industrial control protocol parsers. Physics-based CPS privacy focuses on how to guide the implementation of general privacy recommendations like the Fair Information Practice principles into cyber-physical systems, leveraging the fact that these physical systems often have an objective to achieve, and this objective depends on the data-handling policies of the operator. The project focuses on investigating the trade-off between privacy and control performance and developing tools to guide how data minimization, data delays, and data retention should be implemented.

该项目致力于通过整合信息安全界的理论和最佳实践以及控制理论社区的实践方法来解决网络物理系统（CPS）的安全和隐私。该项目的第一部分着重于对网络物理关键基础设施的安全和保护，例如电网，水分配网络和运输网络，以防止计算机攻击，以防止可能导致服务损失，基础设施损失甚至丧命。该项目的第二部分着重于CPS的隐私，并提出了新算法来处理实物人类活动的前所未有的数据收集粒度。这两个部分的工作集中在实用控制理论概念概念与计算机安全解决方案中的整合。特别是，在过去的十年中，控制理论社区提出了CPS安全方面的基本进步。同时，计算机安全界还取得了在CPS安全和隐私方面实施方面的重大进步。尽管这两个领域都独立取得了重大进展，但两个领域之间仍然存在很大的语言和概念障碍，因此，计算机安全专家已经从控制理论研究人员那里开发了一个平行而独立的研究议程。 为了设计未来的CPS安全和隐私机制，这两个社区需要更加近距离，并利用每个社区的见解。该项目试图通过在两个研究问题中利用系统控制的系统的物理特性来促进这两个社区的整合：（1）基于物理的CPS安全性； （2）基于物理的CPS隐私。基于物理的CPS安全利用传感器和控制信号的时间序列来检测与预期操作的偏差。尽管在这个空间中有几个开放问题，但这是安全和控制理论场所的研究领域。该提案解决了其中一些开放问题，包括定义新的评估指标，这些定义捕获了控制系统的独特操作特性，对模型的不同建议和异常检测测试的一致评估以及新的工业控制协议解析器的开发。 基于物理的CPS隐私关注的是如何指导一般隐私建议的实施，例如公平信息实践原则到网络物理系统中，利用这些物理系统通常具有实现目标的事实，并且该目标取决于操作员的数据处理政策。该项目着重于研究隐私和控制绩效之间的权衡，并开发工具，以指导数据最小化，数据延迟和数据保留应如何实施。

项目成果

SAVIOR: Securing Autonomous Vehicles with Robust Physical Invariants

• 发表时间: 2020
• 期刊: 2017 3rd IEEE International Conference on Computer and Communications (ICCC)
• 作者: Raul Quinonez;J. Giraldo;Luis E. Salazar;Erick Bauman;A. Cárdenas;Zhiqiang Lin

DARIA: Designing Actuators to Resist Arbitrary Attacks Against Cyber-Physical Systems

• DOI: 10.1109/eurosp48549.2020.00029
• 发表时间: 2020-09
• 期刊: 2020 IEEE European Symposium on Security and Privacy (EuroS&P)
• 作者: J. Giraldo;Sahand Hadizadeh Kafash;Justin Ruths;A. Cárdenas

MaMIoT: Manipulation of Energy Market Leveraging High Wattage IoT Botnets

MaMIoT：利用高功率物联网僵尸网络操纵能源市场

• DOI: 10.1145/3460120.3484581
• 发表时间: 2021
• 期刊: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Shekari, Tohid;Irvene, Celine;Cardenas, Alvaro A.;Beyah, Raheem
• 通讯作者: Beyah, Raheem

You Make Me Tremble: A First Look at Attacks Against Structural Control Systems

• DOI: 10.1145/3460120.3485386
• 发表时间: 2021-11
• 期刊: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security
• 作者: Abel Zambrano;Alejandro Betancur;Luis Burbano;Andres Felipe Niño;L. F. Giraldo;Mariantonieta Gutierrez Soto-Mariantonieta-G

Enhancing the Resiliency of Cyber-Physical Systems with Software-Defined Networks

通过软件定义网络增强网络物理系统的弹性

• DOI: 10.1145/3338499.3357356
• 发表时间: 2019
• 期刊: CPS-SPC'19: Proceedings of the ACM Workshop on Cyber-Physical Systems Security & Privacy
• 作者: Salazar, Luis E.;Cardenas, Alvaro A.
• 通讯作者: Cardenas, Alvaro A.