Resilience to denial-of-service and integrity attacks: a structured systems approach

DOI10.1016/J.EJCON.2021.09.005MaRDI QIDQ2667478zbMATH OpenOpenAlexFDO

Authors Bhaskar Ramasubramanian, M. A. Rajan, M. Girish Chandra, Rance Cleaveland, Steven I. Marcus

Publication date 4 March 2022

Published in European Journal of Control (Search for Journal in Brave)

Full work available at URL https://arxiv.org/abs/2109.01224

zbMATH Keywords

denial of service attackright unmatched vertexstrongly connected componentstructural resiliencestructured systemswitched system

Mathematics Subject Classification ID

Sensitivity (robustness) (93B35) Networked control (93B70) Linear systems in control theory (93C05) Control/observation systems involving computers (process control, etc.) (93C83)

Abstract: The resilience of cyberphysical systems to denial-of-service (DoS) and integrity attacks is studied in this paper. The cyberphysical system is modeled as a linear structured system, and its resilience to an attack is interpreted in a graph theoretical framework. The structural resilience of the system is characterized in terms of unmatched vertices in maximum matchings of the bipartite graph and connected components of directed graph representations of the system under attack. We first present conditions for the system to be resilient to DoS attacks when an adversary may block access or turn off certain inputs to the system. We extend this analysis to characterize resilience of the system when an adversary might additionally have the ability to affect the implementation of state-feedback control strategies. This is termed an integrity attack. We establish conditions under which a system that is structurally resilient to a DoS attack will also be resilient to a certain class of integrity attacks. Finally, we formulate an extension to the case of switched linear systems, and derive conditions for such systems to be structurally resilient to a DoS attack.

Recommendations

• Resilient filtering for cyber-physical systems under denial-of-service attacks
• Resilient observer-based control for cyber-physical systems under denial-of-service attacks
• Resilient control under denial-of-service: robust design
• Stabilization of distributed cyber physical systems subject to denial-of-service attack
• Switching resilient control scheme for cyber-physical systems against DoS attacks

Cites work

• A Framework for Structural Input/Output and Control Configuration Selection in Large-Scale Systems
• A Graph-Theoretic Characterization of Perfect Attackability for Secure Design of Distributed Control Systems
• Actuator Security Indices Based on Perfect Undetectability: Computation, Robustness, and Sensor Placement
• Analysis and Design of Actuation–Sensing–Communication Interconnection Structures Toward Secured/Resilient LTI Closed-Loop Systems
• Attack Detection and Identification in Cyber-Physical Systems
• Bigraphs versus digraphs via matrices
• Control-Theoretic Methods for Cyberphysical Security: Geometric Principles for Optimal Cross-Layer Resilient Control Systems
• Controllability of dynamical systems: threat models and reactive security
• Depth-First Search and Linear Graph Algorithms
• False data injection attacks with complete stealthiness in cyber-physical systems: a self-generated approach
• Generic properties and control of linear structured systems: A survey
• scientific article; zbMATH DE number 1001723 (Why is no real title available?)
• Minimal Controllability Problems
• Minimum cost input/output design for large-scale linear structural systems
• On the complexity of the constrained input selection problem for structural linear systems
• Structural controllability
• Structural controllability of switched linear systems
• Structural minimum controllability problem for switched linear continuous-time systems
• The single-input minimal controllability problem for structured systems

Cited in

(11)

• Fixed-time event-triggered control under denial-of-service attacks
• Availability analysis for software system with intrusion tolerance
• Sustainability of Service Provisioning Systems Under Stealth DoS Attacks
• Resiliency of Mobility-as-a-Service Systems to Denial-of-Service Attacks
• Self-similarity breeds resilience
• Revisiting the Impossibility for Boosting Service Resilience
• Theory of Cryptography
• Graph-theoretic approaches for analyzing the resilience of distributed control systems: a tutorial and survey
• Quickest physical watermarking-based detection of measurement replacement attacks in networked control systems
• Cyber resilience assessment and enhancement of cyber-physical systems: structural controllability perspective
• Management of a dynamic infrastructure of complex systems under conditions of directed cyber attacks

This page was built for publication: Resilience to denial-of-service and integrity attacks: a structured systems approach

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2667478)