Detecting cyber attacks in cyber-physical systems
Abstract: Recent years have seen the onset of cyber threats against a number of cyber-physical systems, including safety-critical infrastructure, such as power distribution grids and water networks. Secure control has arisen as a counterpart to traditional IT security as a means to diagnose the presence of cyber attacks, as well as to accommodate their effects. In this talk, I will start by addressing the problem of cyber-attack detection in cyber-physical systems, highlighting known structural properties which must hold for attacks to remain undetectable. I will then show how in large-scale systems locally secure information can be leveraged to ensure attacks remain detectable, and how this information can be further exploited to reconstruct secure local state estimates. Finally, I will show how active techniques can be used to thwart these structural conditions, by altering the system's behavior compared to the attacker's internal model.