2021/06/17 by Vuk Lesi, Marcio Juliato, Lesi, Vuk +9
Engineering · Computer Science · #Smart Grid Security and Resilience #Anomaly Detection Techniques and Applications #Electrostatic Discharge in Electronics
paper · pdf · doi:10.48550/arxiv.2106.09826
Closed-loop control systems employ continuous sensing and actuation to\nmaintain controlled variables within preset bounds and achieve the desired\nsystem output. Intentional disturbances in the system, such as in the case of\ncyberattacks, can compromise reachability of control goals, and in several\ncases jeopardize safety. The increasing connectivity and exposure of networked\ncontrol to external networks has enabled attackers to compromise these systems\nby exploiting security vulnerabilities. Attacks against safety-critical control\nloops can not only drive the system over a trajectory different from the\ndesired, but also cause fatal consequences to humans. In this paper we present\na physics-based Intrusion Detection System (IDS) aimed at increasing the\nsecurity in control systems. In addition to conventional process state\nestimation for intrusion detection, since the controller cannot be trusted, we\nintroduce a controller state estimator. Additionally, we make our detector\ncontext-aware by utilizing sensor measurements from other control loops, which\nallows to distinguish and characterize disturbances from attacks. We introduce\nadaptive thresholding and adaptive filtering as means to achieve\ncontext-awareness. Together, these methodologies allow detection and\nlocalization of attacks in closed-loop controls. Finally, we demonstrate\nfeasibility of the approach by mounting a series of attacks against a networked\nDirect Current (DC) motor closed-loop speed control deployed on an ECU testbed,\nas well as on a simulated automated lane keeping system. Among other\napplication domains, this set of approaches is key to support security in\nautomotive systems, and ultimately increase road and passenger safety.\n