随机零值攻击下基于随机加密防护的网络化控制系统随机稳定性分析

高梦州; 冯冬芹

doi:10.1631/FITEE.1700334

Your Location：

Home >

Browse articles >

随机零值攻击下基于随机加密防护的网络化控制系统随机稳定性分析

常规文章 | Updated：2022-05-19

- 随机零值攻击下基于随机加密防护的网络化控制系统随机稳定性分析
- Stochastic stability analysis of networked control systems with random cryptographic protection under random zero-measurement attacks
- 信息与电子工程前沿（英文） 2018年19卷第9期页码：1098-1111
- Affiliations：
  
  State Key Laboratory of Industrial Control Technology, Zhejiang University, Hangzhou 310027, China
  School of Cyberspace, Hangzhou Dianzi University, Hangzhou 310018, China
  Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai 200240, China
- Author bio：
  
  [ "Meng-zhou GAO, E-mail: mzgao@hdu.edu.cn" ]
  Dong-qin FENG, E-mail: dongqinfeng@zju.edu.cn
- Funds：
  
  Project supported by the National Natural Science Foundation of China (No. 61433006), the Key Research Project of Zhejiang Province, China (No. 2017C01062), the Open Research Project of the State Key Laboratory of Industrial Control Technology, Zhejiang University, China (No. ICT1800422), the Opening Project of Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, China (No. AGK2018003), the Department of Education of Zhejiang Province, China (No. Y201840611), and the Zhejiang Provincial Natural Science Foundation of China (No. LY16F020019)
- DOI：10.1631/FITEE.1700334
  中图分类号： TP273
- 收稿：2017-05-25，
  
  修回：2018-;9-15，
  
  纸质出版：2018-09
- Accepted：
Scan QR Code
高梦州, 冯冬芹. 随机零值攻击下基于随机加密防护的网络化控制系统随机稳定性分析[J]. 信息与电子工程前沿（英文）, 2018,19(9):1098-1111.

Meng-zhou GAO, Dong-qin FENG. Stochastic stability analysis of networked control systems with random cryptographic protection under random zero-measurement attacks[J]. Frontiers of Information Technology & Electronic Engineering, 2018, 19(9): 1098-1111.
高梦州, 冯冬芹. 随机零值攻击下基于随机加密防护的网络化控制系统随机稳定性分析[J]. 信息与电子工程前沿（英文）, 2018,19(9):1098-1111. DOI： 10.1631/FITEE.1700334.

Meng-zhou GAO, Dong-qin FENG. Stochastic stability analysis of networked control systems with random cryptographic protection under random zero-measurement attacks[J]. Frontiers of Information Technology & Electronic Engineering, 2018, 19(9): 1098-1111. DOI： 10.1631/FITEE.1700334.

摘要

近年来，网络化控制系统的安全问题受到广泛重视。安全防护需要额外的能量消耗、计算资源负荷以及时间延迟，使得实时、能量受限系统受到影响。因此，采用随机加密防护技术，该技术相比持续性加密防护技术在计算负荷、时间和能量消耗方面代价较小。针对能力较弱的攻击者，即系统经验知识较少，攻击能力有限，同时又有攻击欲望，考虑了一种随机零值攻击，即恶意地将测量值篡改为零信号。随机加密防护与随机零值攻击分别服从于两个相关的伯努利分布随机变量，该情况下网络化控制系统变成随机系统；基于线性矩阵不等式法开展了随机稳定性分析。所提的随机稳定性分析结果有助于确定一定攻击概率的随机零值攻击下所需的随机加密防护概率。最后，基于某垂直起降飞行系统进行仿真实验。仿真结果表明该方法的有效性、鲁棒性与适用性。此外，结果表明在选择合适防护技术时，应考虑延迟的影响；在确定系统采样周期时，应考虑采样周期对增加攻击鲁棒性的作用。

Abstract

Security issues in networked control systems (NCSs) have received increasing attention in recent years. However

security protection often requires extra energy consumption

computational overhead

and time delays

which could adversely affect the real-time and energy-limited system. In this paper

random cryptographic protection is implemented. It is less expensive with respect to computational overhead

time

and energy consumption

compared with persistent cryptographic protection. Under the consideration of weak attackers who have little system knowledge

ungenerous attacking capability and the desire for stealthiness and random zero-measurement attacks are introduced as the malicious modification of measurements into zero signals. NCS is modeled as a stochastic system with two correlated Bernoulli distributed stochastic variables for implementation of random cryptographic protection and occurrence of random zero-measurement attacks; the stochastic stability can be analyzed using a linear matrix inequality (LMI) approach. The proposed stochastic stability analysis can help determine the proper probability of running random cryptographic protection against random zero-measurement attacks with a certain probability. Finally

a simulation example is presented based on a vertical take-off and landing (VTOL) system. The results show the effectiveness

robustness

and application of the proposed method

and are helpful in choosing the proper protection mechanism taking into account the time delay and in determining the system sampling period to increase the resistance against such attacks.

关键词

Keywords

references

S Amin , , , X Litrico , , , S Sastry , , , 等 . . Cyber security of water scada systems—part Ⅰ: analysis and experimentation of stealthy deception attacks . . IEEE Trans Contr Syst Technol , , 2013 . . 21 ( ( 5 ): ): 1963 - - 1970 . . DOI: 10.1109/tcst.2012.2211873 http://doi.org/10.1109/tcst.2012.2211873 . .

C Bennett , , , SB Wicker . . Decreased time delay and security enhancement recommendations for AMI smart meter networks . . Power & Energy Society Innovative Smart Grid Technologies Conf , , 2010 . . p.1 - - 6 . . DOI: 10.1109/isgt.2010.5434780 http://doi.org/10.1109/isgt.2010.5434780 . .

HY Cao , , , PD Zhu , , , XC Lu , , , 等 . . A layered encryption mechanism for networked critical infrastructures . . IEEE Netw , , 2013 . . 27 ( ( 1 ): ): 12 - - 18 . . DOI: 10.1109/mnet.2013.6423186 http://doi.org/10.1109/mnet.2013.6423186 . .

DR Ding , , , ZD Wang , , , DWC Ho , , , 等 . . Observerbased event-triggering consensus control for multiagent systems with lossy sensors and cyber-attacks . . IEEE Trans Cybern , , 2017a . . 47 ( ( 8 ): ): 1936 - - 1947 . . DOI: 10.1109/tcyb.2016.2582802 http://doi.org/10.1109/tcyb.2016.2582802 . .

DR Ding , , , ZD Wang , , , DWC Ho , , , 等 . . Distributed recursive filtering for stochastic systems under uniform quantizations and deception attacks through sensor networks . . Automatica , , 2017b . . 78 231 - - 240 . . DOI: 10.1016/j.automatica.2016.12.026 http://doi.org/10.1016/j.automatica.2016.12.026 . .

DR Ding , , , GL Wei , , , SJ Zhang , , , 等 . . On scheduling of deception attacks for discrete-time networked systems equipped with attack detectors . . Neurocomputing , , 2017c . . 219 99 - - 106 . . DOI: 10.1016/j.neucom.2016.09.009 http://doi.org/10.1016/j.neucom.2016.09.009 . .

Z Feng , , , GH Wen , , , GQ Hu . . Distributed secure coordinated control for multiagent systems under strategic attacks . . IEEE Trans Cybern , , 2017 . . 47 ( ( 5 ): ): 1273 - - 1284 . . DOI: 10.1109/tcyb.2016.2544062 http://doi.org/10.1109/tcyb.2016.2544062 . .

J Hu , , , S Liu , , , DH Ji , , , 等 . . On co-design of filter and fault estimator against randomly occurring nonlinearities and randomly occurring deception attacks . . Int J Gener Syst , , 2016 . . 45 ( ( 5 ): ): 619 - - 632 . . DOI: 10.1080/03081079.2015.1106730 http://doi.org/10.1080/03081079.2015.1106730 . .

W Jiang , , , P Pop , , , K Jiang . . Design optimization for security- and safety-critical distributed real-time applications . . Microprocess Microsyst , , 2016 . . 52 401 - - 415 . . DOI: 10.1016/j.micpro.2016.08.002 http://doi.org/10.1016/j.micpro.2016.08.002 . .

LH Keel , , , SP Bhattacharyya , , , JW Howze . . Robust control with structure perturbations . . IEEE Trans Autom Contr , , 1988 . . 33 ( ( 1 ): ): 68 - - 78 . . DOI: 10.1109/9.362 http://doi.org/10.1109/9.362 . .

K Kogiso , , , T Fujita . . Cyber-security enhancement of networked control systems using homomorphic encryption . . IEEE 54 th Annual Conf on Decision and Control , , 2015 . . p.6836 - - 6843 . . DOI: 10.1109/cdc.2015.7403296 http://doi.org/10.1109/cdc.2015.7403296 . .

R Muradore , , , D Quaglia . . Energy-efficient intrusion detection and mitigation for networked control systems security . . IEEE Trans Ind Inform , , 2015 . . 11 ( ( 3 ): ): 830 - - 840 . . DOI: 10.1109/tii.2015.2425142 http://doi.org/10.1109/tii.2015.2425142 . .

ZH Pang , , , GP Liu . . Design and implementation of secure networked predictive control systems under deception attacks . . IEEE Trans Contr Syst Technol , , 2012 . . 20 ( ( 5 ): ): 1334 - - 1342 . . DOI: 10.1109/tcst.2011.2160543 http://doi.org/10.1109/tcst.2011.2160543 . .

F Pasqualetti , , , F Dörfler , , , F Bullo . . Attack detection and identification in cyber-physical systems . . IEEE Trans Autom Contr , , 2013 . . 58 ( ( 11 ): ): 2715 - - 2729 . . DOI: 10.1109/tac.2013.2266831 http://doi.org/10.1109/tac.2013.2266831 . .

MK Qiu , , , WZ Gao , , , M Chen , , , 等 . . Energy efficient security algorithm for power grid wide area monitoring system . . IEEE Trans Smart Grid , , 2011 . . 2 ( ( 4 ): ): 715 - - 723 . . DOI: 10.1109/tsg.2011.2160298 http://doi.org/10.1109/tsg.2011.2160298 . .

MK Qiu , , , H Su , , , M Chen , , , 等 . . Balance of security strength and energy for a PMU monitoring system in smart grid . . IEEE Commun Mag , , 2012 . . 50 ( ( 5 ): ): 142 - - 149 . . DOI: 10.1109/mcom.2012.6194395 http://doi.org/10.1109/mcom.2012.6194395 . .

Y Shoukry , , , K Gatsis , , , A Alanwar , , , 等 . . Privacy-aware quadratic optimization using partially homomorphic encryption . . IEEE 55 th Conf on Decision and Control , , 2016 . . p.5053 - - 5058 . . DOI: 10.1109/cdc.2016.7799042 http://doi.org/10.1109/cdc.2016.7799042 . .

TJ Tarn , , , Y Rasis . . Observers for nonlinear stochastic systems . . IEEE Trans Autom Contr , , 1976 . . 21 ( ( 4 ): ): 441 - - 448 . . DOI: 10.1109/tac.1976.1101300 http://doi.org/10.1109/tac.1976.1101300 . .

A Teixeira , , , D Pérez , , , H Sandberg , , , 等 . . Attack models and scenarios for networked control systems . . Proc 1st Int Conf on High Confidence Networked Systems , , 2012 . . p.55 - - 64 . . DOI: 10.1145/2185505.2185515 http://doi.org/10.1145/2185505.2185515 . .

A Teixeira , , , KC Sou , , , H Sandberg , , , 等 . . Secure control systems: a quantitative risk management approach . . IEEE Contr Syst , , 2015 . . 35 ( ( 1 ): ): 24 - - 45 . . DOI: 10.1109/mcs.2014.2364709 http://doi.org/10.1109/mcs.2014.2364709 . .

KG Vamvoudakis , , , JP Hespanha , , , B Sinopoli , , , 等 . . Detection in adversarial environments . . IEEE Trans Autom Contr , , 2014 . . 59 ( ( 12 ): ): 3209 - - 3223 . . DOI: 10.1109/tac.2014.2351671 http://doi.org/10.1109/tac.2014.2351671 . .

D Wang , , , ZD Wang , , , B Shen , , , 等 . . Recent advances on filtering and control for cyber–physical systems under security and resource constraints . . J Franklin Inst , , 2016 . . 353 ( ( 11 ): ): 2451 - - 2466 . . DOI: 10.1016/j.jfranklin.2016.04.011 http://doi.org/10.1016/j.jfranklin.2016.04.011 . .

WY Wang , , , Y Xu , , , M Khanna . . A survey on the communication architectures in smart grid . . Comput Netw , , 2011 . . 55 ( ( 15 ): ): 3604 - - 3629 . . DOI: 10.1016/j.comnet.2011.07.010 http://doi.org/10.1016/j.comnet.2011.07.010 . .

YN Wang , , , ZR Lin , , , X Liang , , , 等 . . On modeling of electrical cyber-physical systems considering cyber security . . Front Inform Technol Electron Eng , , 2016 . . 17 ( ( 5 ): ): 465 - - 478 . . DOI: 10.1631/fitee.1500446 http://doi.org/10.1631/fitee.1500446 . .

SY Xu , , , J Lam , , , TW Chen . . Robust H ∞ control for uncertain discrete stochastic time-delay systems . . Syst Contr Lett , , 2004 . . 51 ( ( 3 ): ): 203 - - 215 . . DOI: 10.1016/j.sysconle.2003.08.004 http://doi.org/10.1016/j.sysconle.2003.08.004 . .

WT Zeng , , , M Chow . . Modeling and optimizing the performance–security tradeoff on D-NCS using the coevolutionary paradigm . . IEEE Trans Ind Inform , , 2013 . . 9 ( ( 1 ): ): 394 - - 402 . . DOI: 10.1109/tii.2012.2209662 http://doi.org/10.1109/tii.2012.2209662 . .

JF Zhang , , , RS Blum , , , XX Lu , , , 等 . . Asymptotically optimum distributed estimation in the presence of attacks . . IEEE Trans Signal Process , , 2015 . . 63 ( ( 5 ): ): 1086 - - 1101 . . DOI: 10.1109/tsp.2014.2386281 http://doi.org/10.1109/tsp.2014.2386281 . .

浏览量

Downloads

CSCD

文章被引用时，请邮件提醒。

Submit

工具集

关联资源

Novel architectures and security solutions of programmable software-defined networking: a comprehensive survey

A secure and high-performance multi-controller architecture for software-defined networking

A lightweight authentication scheme with user untraceability*