Resilience to denial-of-service and integrity attacks: A structured systems approach *

被引:5
|
作者
Ramasubramanian, Bhaskar [1 ]
Rajan, M. A. [2 ]
Chandra, M. Girish [2 ]
Cleaveland, Rance I. [3 ,4 ]
Marcus, Steven [3 ,5 ]
机构
[1] Univ Washington, Dept Elect & Comp Engn, Network Secur Lab, Seattle, WA 98195 USA
[2] Tata Consultancy Serv, Innovat Labs, Bangalore 560066, Karnataka, India
[3] Univ Maryland, Inst Syst Res, College Pk, MD 20742 USA
[4] Univ Maryland, Dept Comp Sci, College Pk, MD 20742 USA
[5] Univ Maryland, Dept Elect & Comp Engn, College Pk, MD USA
关键词
Structured system; Structural resilience; Denial of service attack; Right unmatched vertex; Strongly connected component; Switched system; CONTROLLABILITY PROBLEM;
D O I
10.1016/j.ejcon.2021.09.005
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
The resilience of cyberphysical systems to denial-of-service (DoS) and integrity attacks is studied in this paper. The cyberphysical system is modeled as a linear structured system, and its resilience to an attack is interpreted in a graph theoretical framework. The structural resilience of the system is characterized in terms of unmatched vertices in maximum matchings of the bipartite graph and connected components of directed graph representations of the system under attack. We first present conditions for the system to be resilient to DoS attacks when an adversary may block access or turn off certain inputs to the system. We extend this analysis to characterize resilience of the system when an adversary might additionally have the ability to affect the implementation of state-feedback control strategies. This is termed an integrity attack. We establish conditions under which a system that is structurally resilient to a DoS attack will also be resilient to a certain class of integrity attacks. Finally, we formulate an extension to the case of switched linear systems, and derive conditions for such systems to be structurally resilient to a DoS attack.(c) 2021 European Control Association. Published by Elsevier Ltd. All rights reserved.
引用
收藏
页码:61 / 69
页数:9
相关论文
共 50 条
  • [1] Denial-of-service attacks
    Neumann, PG
    COMMUNICATIONS OF THE ACM, 2000, 43 (04) : 136 - 136
  • [2] Analysis of denial-of-service attacks on denial-of-service defensive measures
    Wang, BT
    Schulzrinne, H
    GLOBECOM'03: IEEE GLOBAL TELECOMMUNICATIONS CONFERENCE, VOLS 1-7, 2003, : 1339 - 1343
  • [3] DETECTABILITY OF DENIAL-OF-SERVICE ATTACKS ON COMMUNICATION SYSTEMS
    Boche, Holger
    Schaefer, Rafael F.
    Poor, H. Vincent
    2019 IEEE INTERNATIONAL CONFERENCE ON ACOUSTICS, SPEECH AND SIGNAL PROCESSING (ICASSP), 2019, : 2532 - 2536
  • [4] Detection of Denial-of-service Attacks
    Anh Quang Tran ZHANG Qianli LI Xing Tsinghua University Beijing China
    计算机工程, 2002, (S1) : 86 - 91
  • [5] Denial-of-Service Attacks to UMTS
    Bertino, Elisa
    COMPUTER, 2015, 48 (02) : 6 - 6
  • [6] CLIQUE clustering approach to detect denial-of-service attacks
    Bethi, SK
    Phoha, VV
    Reddy, YB
    PROCEEDINGS FROM THE FIFTH IEEE SYSTEMS, MAN AND CYBERNETICS INFORMATION ASSURANCE WORKSHOP, 2004, : 447 - 448
  • [7] Resiliency of Mobility-as-a-Service Systems to Denial-of-Service Attacks
    Thai, Jerome
    Yuan, Chenyang
    Bayen, Alexandre M.
    IEEE TRANSACTIONS ON CONTROL OF NETWORK SYSTEMS, 2018, 5 (01): : 370 - 382
  • [8] Denial-of-Service Attacks on LoRaWAN
    van Es, Eef
    Vranken, Harald
    Hommersom, Arjen
    13TH INTERNATIONAL CONFERENCE ON AVAILABILITY, RELIABILITY AND SECURITY (ARES 2018), 2019,
  • [9] Investigation of Simple Denial-of-Service Attacks
    Voitovych, Olesya
    Baryshev, Yurii
    Kolibabchuk, Eduard
    Kupershtein, Leonid
    2016 THIRD INTERNATIONAL SCIENTIFIC-PRACTICAL CONFERENCE PROBLEMS OF INFOCOMMUNICATIONS SCIENCE AND TECHNOLOGY (PIC S&T), 2016, : 145 - 148
  • [10] Denial-of-service attacks and countermeasures on BitTorrent
    Lehmann, Matheus Brenner
    Santos, Flavio Roberto
    Gaspary, Luciano Paschoal
    Barcellos, Marinho Pilla
    COMPUTER NETWORKS, 2012, 56 (15) : 3479 - 3498