ICPS multi-target constrained comprehensive security control based on DoS attacks energy grading detection and compensation

Abstract

Aiming at the industry cyber-physical system (ICPS) where Denial-of-Service (DoS) attacks and actuator failure coexist, the integrated security control problem of ICPS under multi-objective constraints was studied. First, from the perspective of the defender, according to the differential impact of the system under DoS attacks of different energies, the DoS attacks energy grading detection standard was formulated, and the ICPS comprehensive security control framework was constructed. Secondly, a security transmission strategy based on event triggering was designed. Under the DoS attack energy classification detection mechanism, for large-energy attacks, the method based on time series analysis was considered to predict and compensate for lost data. Therefore, on the basis of passive and elastic response to small energy attacks, the active defense capability against DoS attacks was increased. Then by introducing the cone-complement linearization algorithm, the calculation methods of the state and fault estimation observer and the integrated safety controller were deduced, the goal of DoS attack active and passive hybrid intrusion tolerance and actuator failure active fault tolerance were realized. Finally, a simulation example of a four-capacity water tank system was given to verify the validity of the obtained conclusions.

Keywords

industry cyber-physical system (ICPS) / Denial-of-Service (DoS) attacks energy grading detection / security event triggering mechanism / time series analysis methods / cone complementary linearization

References

[1] AKKAYA I, DERLER P, EMOTO S, et al. Systems engineering for industrial cyber-physical systems using aspects. Proceedings of the IEEE, 2016, 104(5): 997-1012.

[2] KAYAN H K, NUNES M, RANA O, et al. Cybersecurity of industrial cyber-physical systems: a review. 2021: 2101.03564.

[3] SHEN Y B. Network security analyzing of event-triggered networked control systems under denial-of-service attacks//The 2nd International Conference on Robotics, Control and Automation Engineering, November 16-18, 2019, Lanzhou, China. New York: ACM, 2019: 49-54.

[4] YE D, ZHANG T Y. Summation detector for false data-injection attack in cyber-physical systems. IEEE Transactions on Cybernetics, 2020, 50(6): 2338-2345.

[5] CHEN B, HO D W C, HU G Q, et al. Secure fusion estimation for bandwidth constrained cyber-physical systems under replay attacks. IEEE Transactions on Cybernetics, 2018, 48(6): 1862-1876.

[6] GONG J H, HU X H, HONG P. Behavior analysis of malicious sensor nodes based on optimal response dynamics. Journal of Measurement Science and Instrumentation, 2022, 13(1): 96-104. .

[7] PENG Y, WANG Y, XIANG C, et al. Cyber-physical attack-oriented industrial control systems (ICS) modeling, analysis and experiment environment//2015 International Conference on Intelligent Information Hiding and Multimedia Signal Processing (IIH-MSP), September 23-25, 2015, Adelaide, SA, Australia. New York: IEEE, 2015: 322-326.

[8] YLMAZ E N, CIYLAN B, GÖNEN S, et al. Cyber security in industrial control systems: Analysis of DoS attacks against PLCs and the insider effect//2018 6th International Istanbul Smart Grids and Cities Congress and Fair (ICSG), April 25-26, 2018, Istanbul, Turkey. New York: IEEE, 2018: 81-85.

[9] FENG S, TESI P. Resilient control under Denial-of-Service: Robust design. Automatica, 2017, 79: 42-51.

[10] ZHANG C L, YANG G H, LU A Y. Resilient observer-based control for cyber-physical systems under denial-of-service attacks. Information Sciences, 2021, 545: 102-117.

[11] GAN R M, XIAO Y, SHAO J L, et al. An analysis on optimal attack schedule based on channel hopping scheme in cyber-physical systems. IEEE Transactions on Cybernetics, 2021, 51(2): 994-1003.

[12] QIN J H, LI M L, WANG J, et al. Optimal Denial-of-Service attack energy management against state estimation over an SINR-based network. Automatica, 2020, 119: 109090.

[13] SONG H T, PENG C, WANG Z W. Event-triggered predictive control for cyber-physical systems under DoS attackss. Control and Decision, 2019, 34(11): 2303-2309.

[14] YE D, DIAO N N, ZHAO X G. Fault-tolerant controller design for general polynomial-fuzzy-model-based systems. IEEE Transactions on Fuzzy Systems, 2018, 26(2): 1046-1051.

[15] ZHANG J X, YANG G H. Fault-tolerant output-constrained control of unknown Euler-Lagrange systems with prescribed tracking accuracy. Automatica, 2020, 111: 108606.

[16] QIU A B, JI H G, GU J P. Optimal integrated design of time-varying fault estimation and accommodation for nonuniformly sampled data systems. Acta Automatica Sinica, 2014, 40(7): 1493-1504.

[17] YE D, CHEN M M, YANG H J. Distributed adaptive event-triggered fault-tolerant consensus of multiagent systems with general linear dynamics. IEEE Transactions on Cybernetics, 2019, 49(3): 757-767.

[18] WANG X D, FEI Z Y, WANG Z H, et al. Event-triggered fault estimation and fault-tolerant control for networked control systems. Journal of the Franklin Institute, 2019, 356(8): 4420-4441.

[19] DENG C, CHE W W. Fault-tolerant fuzzy formation control for a class of nonlinear multiagent systems under directed and switching topology. IEEE Transactions on Systems, Man, and Cybernetics: Systems, 2021, 51(9): 5456-5465.

[20] SHAO X F, YE D. Fuzzy adaptive event-triggered secure control for stochastic nonlinear high-order MASs subject to DoS attacks and actuator faults. IEEE Transactions on Fuzzy Systems, 2021, 29(12): 3812-3821.

[21] LI J, YANG Z, MU X W, et al. Passivity-based event-triggered fault tolerant control for nonlinear networked control system with actuator failures and DoS jamming attacks. Journal of the Franklin Institute, 2020, 357(14): 9288-9307.

[22] ZHAO L, LI W. Co-design of dual security control and communication for nonlinear CPS under DoS attack. IEEE Access, 2020, 8: 19271-19285.

[23] FRIDMAN E. A refined input delay approach to sampled-data control. Automatica, 2010, 46(2): 421-427.

[24] QIU A B, JIANG B, WEN C L, et al. Fault estimation and accommodation for networked control systems with nonuniform sampling periods. International Journal of Adaptive Control and Signal Processing, 2015, 29(4): 427-442.