arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1804.05901cs.CR
收藏

调查主动交通管理系统中的网络安全问题

Investigating Cybersecurity Issues In Active Traffic Management Systems

Zulqarnain H. Khattak, Hyungjun Park, Seongah Hong, Richard Atta Boateng, Brian L. Smith

摘要:

交通机构已经引入了主动交通管理(ATM)系统来管理经常性和非经常性的拥堵。ATM系统依赖于通过有线和/或无线网络实现的组件的互连性。不幸的是,这种支持ATM系统的连接性也提供了潜在的系统接入点,导致易受网络攻击。随着ATM系统开始集成物联网(IoT)设备,这一点变得更加明显。因此,需要严格评估ATM系统的网络攻击漏洞,并探索在网络攻击面前提供稳定性和优雅降级的设计概念。在这项研究中,为弗吉尼亚州北部I-66的1.5英里路段开发了一个原型ATM系统和一个实时网络攻击监控系统。监控系统通过将ATM系统产生的车道控制状态与监控系统认为最可能的车道控制状态进行比较来检测与ATM系统的预期操作的偏差。在两组状态之间存在任何偏差的情况下,监控系统显示由备用数据源生成的车道控制状态。在模拟实验中,原型ATM系统和网络攻击监测系统受到模拟的网络攻击。评估结果表明,当受到网络攻击时,与ATM系统相比,平均速度降低了15%,与基线情况相似。这表明ATM系统的有效性被网络攻击所否定。然而,监控系统使ATM系统恢复到预期的安全状态,并减少了网络攻击的负面影响。这些结果表明,有必要重新审视ATM系统的设计概念,作为一种手段,以防止网络攻击,除了传统的系统入侵预防方法。

英文摘要:

Active Traffic Management (ATM) systems have been introduced by transportation agencies to manage recurrent and non-recurrent congestion. ATM systems rely on the interconnectivity of components made possible by wired and/or wireless networks. Unfortunately, this connectivity that supports ATM systems also provides potential system access points that results in vulnerability to cyberattacks. This is becoming more pronounced as ATM systems begin to integrate internet of things (IoT) devices. Hence, there is a need to rigorously evaluate ATM systems for cyberattack vulnerabilities, and explore design concepts that provide stability and graceful degradation in the face of cyberattacks. In this research, a prototype ATM system along with a real-time cyberattack monitoring system were developed for a 1.5-mile section of I-66 in Northern Virginia. The monitoring system detects deviation from expected operation of an ATM system by comparing lane control states generated by the ATM system with lane control states deemed most likely by the monitoring system. In case of any deviation between two sets of states, the monitoring system displays the lane control states generated by the back-up data source. In a simulation experiment, the prototype ATM system and cyberattack monitoring system were subject to emulated cyberattacks. The evaluation results showed that when subject to cyberattack, the mean speed reduced by 15% compared to the case with the ATM system and was similar to the baseline case. This illustrates that the effectiveness of the ATM system was negated by cyberattacks. The monitoring system however, allowed the ATM system to revert to an expected safe state and reduced the negative impact of cyberattacks. These results illustrate the need to revisit ATM system design concepts as a means to protect against cyberattacks in addition to traditional system intrusion prevention approaches.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑