Title
Integrating Cyber-Attack Defense Techniques into Real-Time Cyber-Physical Systems
Abstract
With the rapid deployment of Cyber-Physical Systems (CPS), security has become a more critical problem than ever before, as such devices are interconnected and have access to a broad range of critical data. A well-known attack is ReturnOriented Programming (ROP) which can diverge the control flow of a program by exploiting the buffer overflow vulnerability. To protect a program from ROP attacks, a useful method is to instrument code into the protected program to do runtime control flow checking (known as Control Flow Integrity, CFI). However, instrumented code brings extra execution time, which has to be properly handled, as most CPS systems need to behave in a real-time manner. In this paper, we present a technique to efficiently compute an execution plan, which maximizes the number of executions of instrumented code to achieve maximal defense effect, and at the same time guarantees real-time schedulability of the protected task system with a new response time analysis. Simulation-based experimental results show that the proposed method can yield good quality execution plans, but performs orders of magnitude faster than exhaustive search. We also built a prototype in which a small auto-drive car is defended against ROP attacks by the proposed method implemented in FreeRTOS. The prototype demonstrates the effectiveness of our method in real-life scenarios.
Year
DOI
Venue
2019
10.1109/ICCD46524.2019.00037
2019 IEEE 37th International Conference on Computer Design (ICCD)
Keywords
Field
DocType
cyber security,cyber physical systems,real time systems,schedulability analysis
Software deployment,Brute-force search,Cyber-attack,Computer science,Control flow,Response time,Real-time computing,Cyber-physical system,Embedded system,Vulnerability,Buffer overflow
Conference
ISSN
ISBN
Citations 
1063-6404
978-1-7281-1215-2
0
PageRank 
References 
Authors
0.34
18
5
Name
Order
Citations
PageRank
Xiaochen Hao100.34
Mingsong Lv215815.88
Jiesheng Zheng300.34
Zhengkui Zhang400.34
Wang Yi54232332.05