عنوان

Secure Detection in Cyberphysical Control Systems

Number

TL48086

.Language of Text, Soundtrack etc

انگلیسی

Title Proper

Secure Detection in Cyberphysical Control Systems

General Material Designation

[Thesis]

First Statement of Responsibility

Rohan Chabukswar

Subsequent Statement of Responsibility

Sinopoli, Bruno

Name of Publisher, Distributor, etc.

Carnegie Mellon University

Date of Publication, Distribution, etc.

2014

Specific Material Designation and Extent of Item

152

Text of Note

Committee members: Grover, Pulkit; Rowe, Anthony; Sandberg, Henrik

Text of Note

Place of publication: United States, Ann Arbor; ISBN=978-1-321-50259-6

Dissertation or thesis details and type of degree

Ph.D.

Discipline of degree

Electrical and Computer Engineering

Body granting the degree

Carnegie Mellon University

Text preceding or following the note

2014

Text of Note

A SCADA system employing the distributed networks of sensors and actuators that interact with the physical environment is vulnerable to attacks that target the interface between the cyber and physical subsystems. An attack that hijacks the sensors in an attempt to provide false readings to the controller (for example, the Stuxnet worm that targeted Iran's nuclear centrifuges) can be used to feign normal system operation for the control system, while the attacker can hijack the actuators to send the system beyond its safety range. This thesis extends the results of a previously proposed method. The original method proposed addition of a randomized "watermarking" signal and checking for the presence of this signal and its effects in the received sensor measurements. Since the control inputs traverse the cyberphysical boundary and make their effects apparent in the sensor measurements, they are employed to carry this watermarking signal through to the system and back to the SCADA controller. The sensor measurements are compared to the expected measurements (calculated using a suitably delayed model of the system within the controller). This methodology is based on using the statistics of the linear system and its controller. The inclusion of a randomized signal on the control inputs induces an increase in the performance cost of the physical system. This thesis proposes a method of optimization of the watermarking signal based on the trade-off between this performance cost and the attack detection rate, by leveraging the distribution the watermarking signal over multiple inputs and multiple outputs. It is further proved that regardless of the number of inputs and outputs in the system, only one watermarking signal needs to be generated. This optimization, and its necessity in improving the effectiveness of the detector without detriment to the performance cost, are demonstrated on a simulated chemical plant. The thesis also proposes another methodology that does not rely on these statistics, but is instead based on calculating the correlation between the received sensor measurements and the expected measurements accrued from the model inside the controller.

Computer Engineering; Electrical engineering

Subject Term

Applied sciences;Control inputs;Cyberphysical systems;Secure control;Watermarking signal

Makhadmeh, Naheda

Sinopoli, Bruno

Subdivision

Electrical and Computer Engineering

Carnegie Mellon University

Call Number

1651182435; 3648800

Electronic name

p

[Thesis]

276903

a

Y