On Zero Dynamics and Controllable Cyber-Attacks in Cyber-Physical Systems and Dynamic Coding Schemes as Their Countermeasures

作     者：Mahdi Taheri Khashayar Khorasani Nader Meskin 

作者机构：the Department of Electrical and Computer Engineering Concordia University the Department of Electrical Engineering Qatar University 

出 版 物：《IEEE/CAA Journal of Automatica Sinica》 (自动化学报(英文版))

年 卷 期：2024年第11卷第11期

页      面：2191-2203页

核心收录：

学科分类：0839[工学-网络空间安全] 08[工学] 

基　　金：the financial support received from NATO under the Emerging Security Challenges Division program the support received from NPRP (10-0105-17017) from the Qatar National Research Fund (a member of Qatar Foundation) the support received from the Natural Sciences and Engineering Research Council of Canada (NSERC) and the Department of National Defence (DND) under the Discovery Grant and DND Supplemental Programs supported in part by funding from the Innovation for Defence Excellence and Security (IDEaS) program from the Department of National Defence (DND) 

主　　题：Controllable attacks cyber-physical systems (CPS) dynamic coding zero dynamics attacks stealthy cyber-attacks 

摘      要：In this paper, we study stealthy cyber-attacks on actuators of cyber-physical systems(CPS), namely zero dynamics and controllable attacks. In particular, under certain assumptions, we investigate and propose conditions under which one can execute zero dynamics and controllable attacks in the CPS. The above conditions are derived based on the Markov parameters of the CPS and elements of the system observability matrix. Consequently, in addition to outlining the number of required actuators to be attacked, these conditions provide one with the minimum system knowledge needed to perform zero dynamics and controllable cyber-attacks. As a countermeasure against the above stealthy cyber-attacks, we develop a dynamic coding scheme that increases the minimum number of the CPS required actuators to carry out zero dynamics and controllable cyber-attacks to its maximum possible value. It is shown that if at least one secure input channel exists, the proposed dynamic coding scheme can prevent adversaries from executing the zero dynamics and controllable attacks even if they have complete knowledge of the coding system. Finally, two illustrative numerical case studies are provided to demonstrate the effectiveness and capabilities of our derived conditions and proposed methodologies.