Title
BLOC: A Game-Theoretic Approach to Orchestrate CPS against Cyber Attacks.
Abstract
Securing Cyber-Physical Systems (CPS) against cyber-attacks is challenging due to the wide range of possible attacks - from stealthy ones that seek to manipulate/drop/delay control and measurement signals to malware that infects host machines that control the physical process. This has prompted the research community to address this problem through developing targeted methods that protect and check the run-time operation of the CPS. Since protecting signals and checking for errors result in performance penalties, they must be performed within the delay bounds dictated by the control loop. Due to the large number of potential checks that can be performed, coupled with various degrees of their effectiveness to detect a wide range of attacks, strategic assignment of these checks in the control loop is a critical endeavor. To that end, this paper presents a coherent runtime framework - which we coin BLOC - for orchestrating the CPS with check blocks to secure them against cyber attacks. BLOC capitalizes on game theoretical techniques to enable the defender to find an optimal randomized use of check blocks to secure the CPS while respecting the control-loop constraints. We develop a Stackelberg game model for stateless blocks and a Markov game model for stateful ones and derive optimal policies that minimize the worst-case damage from rational adversaries. We validate our models through extensive simulations as well as a real implementation for a HVAC system.
Year
Venue
Field
2018
IEEE Conference on Communications and Network Security
Computer science,Markov chain,HVAC,Computer network,Stateful firewall,Control system,Stackelberg competition,Malware,Jamming,Stateless protocol
DocType
ISSN
Citations 
Conference
2474-025X
0
PageRank 
References 
Authors
0.34
0
7
Name
Order
Citations
PageRank
Mina Guirguis115520.04
Alireza Tahsini201.01
Khan Siddique300.68
Clara Novoa4715.34
Justin Moore500.34
Christine Julien667765.29
Noah Dunstatter721.41