论文标题

通过线性变化的动态水印来检测对自动驾驶汽车的欺骗攻击

Detecting Deception Attacks on Autonomous Vehicles via Linear Time-Varying Dynamic Watermarking

论文作者

Porter, Matthew, Dey, Sidhartha, Joshi, Arnav, Hespanhol, Pedro, Aswani, Anil, Johnson-Roberson, Matthew, Vasudevan, Ram

论文摘要

网络物理系统(CPS)(例如自动驾驶汽车)都依赖于车载传感器和外部通信来估计其状态。不幸的是,这些通信使该系统容易受到网络攻击的影响。尽管许多攻击检测方法已经开始解决这些问题,但它们仅限于线性时间存在(LTI)系统。尽管LTI系统模型可为CPS(例如自动驾驶汽车)以恒定速度和转动半径提供准确的近似值,但它们对于更复杂的运动(例如车道变化,转弯和速度变化)而不准确。由于这些更复杂的动作是通过线性时变(LTV)系统模型而不是LTI模型更适当地描述的,因此在LTV系统中扩展了动态水印,从而为输入信号添加了私有激发以验证测量值。但是,此扩展不允许在测量信号中看到给定控制输入的效果之前需要几个步骤的LTV系统。此外,没有考虑自动相关的时变作用。此外,仅使用简化模型的模拟提供了概念证明。 本文放松了单个步骤可见输入的要求,并构建自动相关因素以消除自动相关的效果。此外,将动态水印应用于CARSIM中的高保真车辆模型和1/10比例自主漫游器,以进一步增强现实系统的概念验证。在每种情况下,车辆都以时变速度和转动半径遵循预定义的路径。使用LTV动态水印以快速可重复的方式可以检测到以前记录的测量值的重播攻击。

Cyber-physical systems (CPS) such as autonomous vehicles rely on both on-board sensors and external communications to estimate their state. Unfortunately, these communications render the system vulnerable to cyber-attacks. While many attack detection methods have begun to address these concerns, they are limited to linear time-invariant (LTI) systems. Though LTI system models provide accurate approximations for CPS such as autonomous vehicles at constant speed and turning radii, they are inaccurate for more complex motions such as lane changes, turns, and changes in velocity. Since these more complex motions are more suitably described by linear time-varying (LTV) system models rather than LTI models, Dynamic Watermarking, which adds a private excitation to the input signal to validate measurements, has recently been extended to LTV systems. However, this extension does not allow for LTV systems that require several steps before the effect of a given control input can be seen in the measurement signal. Additionally, there is no consideration for the time-varying effects of auto-correlation. Furthermore, a proof of concept was only provided using simulations of a simplified model. This paper relaxes the requirement for inputs to be visible in a single step and constructs an auto-correlation normalizing factor to remove the effects of auto-correlation. In addition, Dynamic Watermarking is applied to a high-fidelity vehicle model in carsim and a 1/10 scale autonomous rover to further reinforce the proof of concept for realistic systems. In each case, the vehicle follows a predefined path with time-varying velocity and turning radii. A replay attack, which replays previously recorded measurements, is shown to be detectable using LTV Dynamic Watermarking in a quick and repeatable manner.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源