In this chapter, we introduce methods to address resiliency issues for control systems. The main challenge for control systems is its cyber-physical system nature which strongly couples the cyber systems with physical layer dynamics. Hence the resiliency issues for control systems need to be addressed by integrating the cyber resiliency with the physical layer resiliency. We introduce frameworks that can provide a holistic view of the control system resiliency and a quantitative design paradigm that can enable an optimal cross-layer and cross-stage design at the planning, operation, and recovery stage of control systems. The control systems are often large-scale systems in industrial application and critical infrastructures. Decentralized control of such systems is indispensable. We extend the resiliency framework to address distributed and collaborative resiliency among decentralized control agents.
Critical systems must be designed resilient to all kinds of malfunctions. We are especially interested by the loss of control authority over actuators. This malfunction considers actuators producing uncontrolled and possibly undesirable inputs. We investigate the design of resilient linear systems capable of reaching their target even after such a malfunction. In contrast with the settings of robust control and fault-tolerant control, we consider undesirable but observable inputs of the same magnitude as controls since they are produced by a faulty actuator of the system. The control inputs ca…
This paper presents an adversary detection mechanism and a resilient control framework for multi-agent systems under spatiotemporal constraints. Safety in multi-agent systems is typically addressed under the assumption that all agents collaborate to ensure the forward invariance of a desired safe set. This work analyzes agent behaviors based on certain behavior metrics, and designs a proactive adversary detection mechanism based on the notion of the critical region for the system operation. In particular, the presented detection mechanism not only identifies adversarial agents, but also ensure…
The study of resilient control of linear time-invariant (LTI) systems against denial-of-service (DoS) attacks is gaining popularity in emerging cyber-physical applications. In previous works, explicit system models are required to design a predictor-based resilient controller. These models can be either given a priori or obtained through a prior system identification step. Recent research efforts have focused on data-driven control based on pre-collected input-output trajectories (i.e., without explicit system models). In this paper, we take an initial step toward data-driven stabilization of …
The integration of synchronous generators and energy storage systems operated through communication networks introduces new challenges and vulnerabilities to the electric grid, where cyber attacks can corrupt sensor measurements or control inputs and interrupt functions such as frequency regulation. This paper proposes a defense methodology for the design of resilient operating constraints imposed on each generation and storage unit in order to prevent any attack sequence from driving the system's frequency to unsafe conditions. The resilient operating constraints are found by using ellipsoida…
We present ResilienC, a framework for resilient control of Cyber-Physical Systems subject to STL-based requirements. ResilienC utilizes a recently developed formalism for specifying CPS resiliency in terms of sets of $(\mathit{rec},\mathit{dur})$ real-valued pairs, where $\mathit{rec}$ represents the system's capability to rapidly recover from a property violation (recoverability), and $\mathit{dur}$ is reflective of its ability to avoid violations post-recovery (durability). We define the resilient STL control problem as one of multi-objective optimization, where the recoverability and durabi…
In this paper, we investigate a novel control architecture and algorithm for incorporating preadaption functions. We propose a preadaptation mechanism that can augment any adaptive control scheme and improve its resilience. Through simulations of a flight control system we illustrate the effectiveness of the preadaptation mechanism in improving the adaptation. We show that the preadaptation mechanism we propose can reduce the peak of the response by as much as $50\%$. The scenarios we present also show that the preadaptation mechanism is effective across a wide range of scenarios suggesting th…
LEO satellite constellation coverage has served as the base platform for various space applications. However, the rapidly evolving security environment such as orbit debris and adversarial space threats are greatly endangering the security of satellite constellation and integrity of the satellite constellation coverage. As on-orbit repairs are challenging, a distributed and autonomous protection mechanism is necessary to ensure the adaptation and self-healing of the satellite constellation coverage from different attacks. To this end, we establish an integrative and distributed framework to en…
This paper proposes a distributed secondary voltage control method based on extended state Kalman-Bucy filter (ESKBF) and fast terminal sliding mode (FTSM) control for the resilient operation of an islanded microgrid (MG) with inverter-based distributed generations (DGs). To tackle the co-existence of multiple uncertainties, a unified modelling framework is proposed to represent the set of different types of disturbances, including parameter perturbation, measurement noise, and immeasurably external variables, by an extended state method. Kalman-Bucy filter is then applied to accurately estima…
We introduce a metric that can quantify the temporal relaxation of Signal Temporal Logic (STL) specifications and facilitate resilient control synthesis in the face of infeasibilities. The proposed metric quantifies a cumulative notion of relaxation among the subtasks, and minimizing it yields to structural changes in the original STL specification by i) modifying time-intervals, ii) removing subtasks entirely if needed. To this end, we formulate an optimal control problem that extracts state and input sequences by minimally violating the temporal requirements while achieving the desired predi…
Networked Constrained Cyber-Physical Systems subject to malicious attacks: a resilient set-theoretic control approach
DIMES, Universitá degli Studi della Calabria（卡拉布里亚大学 DIMES）；Electrical and Computer Engineering Department, Carnegie Mellon University（卡内基梅隆大学电气与计算机工程学院）
This paper studies the problem of stabilizing a self-triggered control system with quantized output. Employing a standard observer-based state feedback control law, a self-triggering mechanism that dictates the next sampling time based on quantized output is co-developed with an output encoding scheme. If, in addition, the transmission protocols at the controller-to-actuator (C-A) and sensor-to-controller (S-C) channels can be adapted, the self-triggered control architecture can be considerably simplified, leveraging a delicate observer-based deadbeat controller to eliminate the need for runni…
Networked microgrids with high penetration of distributed generators have ubiquitous remote information exchange, which may be exposed to various cyber security threats. This paper, for the first time, addresses a consensus problem in terms of frequency synchronisation in networked microgrids subject to multi-layer denial of service (DoS) attacks, which could simultaneously affect communication, measurement and control actuation channels. A unified notion of Persistency-of-Data-Flow (PoDF) is proposed to characterise the data unavailability in different information network links, and further q…
We study how to design a secure observer-based distributed controller such that a group of vehicles can achieve accurate state estimates and formation control even if the measurements of a subset of vehicle sensors are compromised by a malicious attacker. We propose an architecture consisting of a resilient observer, an attack detector, and an observer-based distributed controller. The distributed detector is able to update three sets of vehicle sensors: the ones surely under attack, surely attack-free, and suspected to be under attack. The adaptive observer saturates the measurement innovatio…
The paper considers the problem of multi-agent consensus in the presence of adversarial agents which may try to prevent and introduce undesired influence on the coordination among the regular agents. To our setting, we extend the so-called mean subsequence reduced algorithms with the aim to reduce the amount of communication via two measures: The agents exchange information in the form of ternary data at each transmission and moreover keep the frequency of data exchange low by employing self- and event-triggered communication. We will observe that in hostile environments with adversaries, the …
This paper is concerned with the problem of stabilizing continuous-time linear time-invariant systems subject to quantization and Denial-of-Service (DoS) attacks. In this context, two DoS-induced challenges emerge with the design of resilient encoding schemes, namely, the coupling between encoding strategies of different signals, and the synchronization between the encoder and decoder. To address these challenges, a novel structure that is equipped with a deadbeat controller as well as a delicate transmission protocol for the input and output channels, co-designed leveraging the controllabilit…
Complex, interconnected Cyber-physical Systems (CPS) are increasingly common in applications including smart grids and transportation. Ensuring safety of interconnected systems whose dynamics are coupled is challenging because the effects of faults and attacks in one sub-system can propagate to other sub-systems and lead to safety violations. In this paper, we study the problem of safety-critical control for CPS with coupled dynamics when some sub-systems are subject to failure or attack. We first propose resilient-safety indices (RSIs) for the faulty or compromised sub-systems that bound the …
This paper shows that a relation can be found between the voltage at the terminals of an inverter-interfaced Renewable Energy Source RES and its optimal reactive power support. This relationship, known as Volt-Var Curve VVC, enables the decentral operation of RES for Active Voltage Management (AVM). In this paper, the decentralized AVM technique is modified to consider the effects of the realistic operational constraints of RES. The AVM technique capitalizes on the reactive power support capabilities of inverters to achieve the desired objective in unbalanced active Low-Voltage Distribution Sy…
In this paper, we consider the problem of dynamically tuning gains for multi-robot systems (MRS) under potential based control design framework where the MRS team coordinates to maintain a connected topology while equipped with limited field of view sensors. Applying the potential-based control framework and assuming robot interaction is encoded by a triangular geometry, we derive a distributed control law in order to achieve the topology control objective. A typical shortcoming of potential-based control in distributed networks is that the overall system behavior is highly sensitive to gain-t…
This paper addresses the problem of distributed secondary voltage control of an islanded microgrid (MG) from a cyber-physical perspective. An event-triggered distributed model predictive control (DMPC) scheme is designed to regulate the voltage magnitude of each distributed generators (DGs) in order to achieve a better trade-off between the control performance and communication and computation burdens. By using two novel event triggering conditions that can be easily embedded into the DMPC for the application of MG control, the computation and communication burdens are significantly reduced wi…
The University of Hong Kong（香港大学）；Shenzhen University（深圳大学）；Texas A&M University at Qatar（德州农工大学卡塔尔分校）
This paper studies the problem of cooperative control of heterogeneous multi-agent systems (MASs) against Byzantine attacks. The agent affected by Byzantine attacks sends different wrong values to all neighbors while applying wrong input signals for itself, which is aggressive and difficult to be defended. Inspired by the concept of Digital Twin, a new hierarchical protocol equipped with a virtual twin layer (TL) is proposed, which decouples the above problems into the defense scheme against Byzantine edge attacks on the TL and the defense scheme against Byzantine node attacks on the cyber-phy…
