This paper,from the view of a defender,addresses the security problem of cyber-physical systems(CPSs)subject to stealthy false data injection(FDI)attacks that cannot be detected by a residual-based anomaly detector without other defensive measures.To detect such a class of FDI attacks,a stochastic coding scheme,which codes the sensor measurement with a Gaussian stochastic signal at the sensor side,is proposed to assist an anomaly detector to expose the FDI attack.In order to ensure the system performance in the normal operational context,a decoder is adopted to decode the coded sensor measurement when received at the controller side.With this detection scheme,the residual under the attack can be significantly different from that in the normal situation,and thus trigger an alarm.The design condition of the coding signal covariance is derived to meet the constraints of false alarm rate and attack detection rate.To minimize the trace of the coding signal covariance,the design problem of the coding signal is converted into a constraint non-convex optimization problem,and an estimation-optimization iteration algorithm is presented to obtain a numerical solution of the coding signal covariance.A numerical example is given to verify the effectiveness of the proposed scheme.

GUO Haibin;PANG Zhonghua;SUN Jian;LI Jun

State Key Lab of Intelligent Control and Decision of Complex Systems,School of Automation,Beijing Institute of Technology,Beijing 100081,China; Beijing Institute of Technology Chongging Innovation Center,Chongqing 401120,China;Key Laboratory of Fieldbus Technology and Automation of Beijing,North China University of Technology,Beijing 100144,China; Beijing Institute of Technology Chongqing Innovation Center,Chongqing 401120,China;China Industrial Control Systems Cyber Emergency Response Team,Beijing 100040,China

系统科学与复杂性学报（英文版）

[1]GUO Haibin;PANG Zhonghua;SUN Jian;LI Jun-.Detection of Stealthy False Data Injection Attacks Against Cyber-Physical Systems:A Stochastic Coding Scheme)[J].系统科学与复杂性学报（英文版）,2022(05):1668-1684

Stealthy,defender

Detection,False,Data,Injection,Attacks,Against,Cyber,Physical,Systems,Stochastic,Coding,Scheme,This,paper,from,view,addresses,security,problem,cyber,physical,systems,CPSs,subject,stealthy,false,data,injection,FDI,attacks,that,cannot,detected,by,residual,anomaly,detector,without,other,defensive,measures,To,such,class,stochastic,coding,scheme,which,codes,sensor,measurement,Gaussian,signal,side,proposed,assist,expose,order,ensure,performance,normal,operational,context,decoder,adopted,coded,when,received,controller,With,this,detection,under,significantly,different,situation,thus,trigger,alarm,design,condition,covariance,derived,meet,constraints,rate,minimize,trace,converted,into,convex,optimization,estimation,iteration,algorithm,presented,obtain,numerical,solution,example,given,verify,effectiveness

0.571058