论文标题
通过ARX系统识别对网络物理系统的线性攻击赔偿
Compensation of Linear Attacks to Cyber Physical Systems through ARX System Identification
论文作者
论文摘要
网络物理系统（CPS）在当今城市的关键基础设施中大量使用。这些系统的网络部分通常具有网络组件，可以通过该组件启动网络攻击。在本文中，我们首先通过识别植物来设计入侵检测系统（IDS）。我们假设CPS的初始操作期是无攻击并学习植物模型的。然后，我们将通过标识符发现的预期输出与通过反馈链接产生的实数输出进行比较。任何大于阈值的差异都被视为一种异常。为了补偿，一旦IDS标记了循环的更改，我们将重新启动系统标识以找到新的传输功能。随着手头新传输功能的估计，新的控制器旨在保持系统稳定。为了测试这个想法，我们将直流电动机作为工厂和使用的ARX标识符。 MATLAB Simulink环境用于测试提出的入侵检测和补偿框架。在实验中，我们将一组欺骗攻击应用于向前通道。获得的结果证明，我们的检测策略效果很好，并且及时对异常反应。此外，他们表明补偿策略也有效，并在此类攻击下保持系统稳定。
Cyber-Physical Systems (CPSs) are vastly used in today's cities critical infrastructure. The cyber part of these systems usually has a network component through which cyber attacks can be launched. In this paper, we first design an intrusion detection system (IDS) by identifying the plant. We assume the initial operation period of the CPS is attack-free and learn the plant model. Then, we compare the expected output found via the identifier with the real one coming through the feedback link. Any difference greater than a threshold is deemed to be an anomaly. To compensate, once the IDS flags a change in the loop, we restart the system identification to find the new transfer function. With the estimation of the new transfer function at hand, a new controller is designed to keep the system stable. To test the idea, we took a DC motor as the plant and employed ARX identifier. MATLAB Simulink environment was used to test the proposed intrusion detection and compensation framework. We applied a set of deception attacks to the forward channel in our experiments. The obtained results prove that our detection strategy works well and timely reacts to anomalies. Moreover, they show that the compensation strategy is also effective and keeps the system stable under such attacks.
