基于DoS攻击能量分级的ICPS综合安全控制与通信协同设计

Co-Design of Integrated Security Control and Communication of ICPS Based on DoS Attack Energy Classification

  • 摘要: 针对一类有限能量拒绝服务(denial of service,DoS)攻击与执行器故障共存的工业信息物理系统(industry cyber-physical system,ICPS),研究了综合安全控制与通信协同设计问题。首先,考虑单侧网络遭受DoS攻击的情形,构建了ICPS综合安全控制架构,并从防御者的视角通过分析不同能量级DoS攻击对系统的影响差异,制定了相应的能量分级标准;其次,设计了DoS攻击的能量分级检测机制,并对小能量攻击以弹性控制鲁棒应对,对大能量攻击提出了一种PD(proportional-differential)数据重构补偿策略,提升了ICPS对DoS攻击的主动防御能力,而安全系数的引入又使主被动容侵得以交融协同;接着,在同一非均匀数据传输机制下,通过给出的观测器与综合安全控制器的设计方法,实现了对不同能量等级DoS攻击的主被动混合容侵、执行器故障主动容错,并与通信协同设计的目标;最后,通过四容水箱系统仿真验证了所得理论结果的有效性。

     

    Abstract: Aiming at an industry cyber-physical system (ICPS) with limited energy denial of service (DoS) attack and actuator failure, we research the integrated safety control and communication codesign method. First, we construct a comprehensive security control architecture for the ICPS considering the DoS attack on one side of the network and formulate the corresponding energy grading standards by analyzing the impact of different energy levels of DoS attacks on the system from the perspective of the defender. Second, we design an energy level detection mechanism for DoS attacks, deal with low energy attacks through elastic control and robust response, and propose a proportional-differential (PD) data reconstruction compensation strategy for high energy attacks, which improves the active defense capability of ICPS against DoS attacks. The introduction of the security factor also encourages the principal and victim to move and attack to integrate and cooperate. Then, under the same nonuniform data transmission mechanism, we achieve the targets of active and passive mixed intrusion tolerance for DoS attacks of different energy levels, active fault tolerance of actuator failures, and codesign with communication through the given observer and integrated safety controller design method. Finally, we verify the effectiveness of the theoretical results via simulation of a four-capacity water tank system.

     

/

返回文章
返回