FIRED: 为新兴商品型网络物理系统实现频繁惯性重置以实现多样化
FIRED: Frequent Inertial Resets with Diversification for Emerging Commodity Cyber-Physical Systems
AI总结：
FIRED通过频繁重置和多样化操作提升网络物理系统安全，利用惯性特性抵御攻击，经实验证明其在稳定性和安全性方面有效。
摘要：
网络物理系统（CPS）因其混合特性引入了新的攻击向量，但同时也提供了设计新安全防御的机会。本文提出了一种新的领域特定安全机制FIRED，利用CPS的物理特性如惯性来提高安全性。FIRED通过频繁执行重置和多样化操作，通常以秒或毫秒为周期，使攻击者无法持续控制系统。由于惯性作用，CPS在频繁重置下仍能保持安全和稳定。此外，重置简化了某些多样化机制，使其在计算资源有限的CPS中可行。我们在两个真实系统上评估了该方法：汽车发动机管理单元和四旋翼飞行控制器。这些系统提供了典型的和极端的操作需求，用于评估FIRED在稳定性、算法复杂性和安全性方面的表现。我们发现FIRED能有效抵御劫持攻击和持久CPS威胁，并适用于当前未受监管且成本敏感的新兴CPS，如商品化无人机。
英文摘要：
A Cyber-Physical System (CPS) is defined by its unique characteristics involving both the cyber and physical domains. Their hybrid nature introduces new attack vectors, but also provides an opportunity to design new security defenses. In this paper, we present a new domain-specific security mechanism, FIRED, that leverages physical properties such as inertia of the CPS to improve security. FIRED is simple to describe and implement. It goes through two operations: Reset and Diversify, as frequently as possible -- typically in the order of seconds or milliseconds. The combined effect of these operations is that attackers are unable to gain persistent control of the system. The CPS stays safe and stable even under frequent resets because of the inertia present. Further, resets simplify certain diversification mechanisms and makes them feasible to implement in CPSs with limited computing resources. We evaluate our idea on two real-world systems: an engine management unit of a car and a flight controller of a quadcopter. Roughly speaking, these two systems provide typical and extreme operational requirements for evaluating FIRED in terms of stability, algorithmic complexity, and safety requirements. We show that FIRED provides robust security guarantees against hijacking attacks and persistent CPS threats. We find that our defense is suitable for emerging CPS such as commodity unmanned vehicles that are currently unregulated and cost sensitive.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
