arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2006.00044eess.SYcs.SY
收藏

分布式IoT-Based工业自动化系统的安全性分析

Security Analysis for Distributed IoT-Based Industrial Automation

Vuk Lesi, Zivana Jakovljevic, Miroslav Pajic

摘要:

随着现代嵌入式平台不断扩展的计算和通信能力,物联网(IoT)技术使可重构制造系统的发展成为可能--这些系统中的顺序控制主要基于离散事件,而它们的正式执行语义被指定为控制解释Petri网(CIPN)。尽管业界广泛使用基于CIPN形式主义的编程语言,但不支持在存在对抗活动的情况下对此类控制应用程序进行正式验证。因此,在本文中,我们专注于基于CIPN的顺序控制应用程序的安全感知建模和验证的挑战。具体来说,我们展示了如何将联网工业物联网控制器的CIPN模型转换为基于时间Petri网(TPN)的模型,并与工厂和安全感知通道模型组合,以便在存在基于网络的攻击的情况下实现安全属性的系统级验证。此外,我们引入了现实的通道特定的攻击模型,捕捉敌对行为使用非确定性。此外,我们还展示了如何利用验证结果来引入安全补丁,并激励设计攻击检测器,以提高整体系统的弹性,并允许满足关键的安全属性。最后,我们评估我们的框架上的工业案例研究。

英文摘要:

With ever-expanding computation and communication capabilities of modern embedded platforms, Internet of Things (IoT) technologies enable development of Reconfigurable Manufacturing Systems---a new generation of highly modularized industrial equipment suitable for highly-customized manufacturing. Sequential control in these systems is largely based on discrete events, while their formal execution semantics is specified as Control Interpreted Petri Nets (CIPN). Despite industry-wide use of programming languages based on the CIPN formalism, formal verification of such control applications in the presence of adversarial activity is not supported. Consequently, in this paper we focus on security-aware modeling and verification challenges for CIPN-based sequential control applications. Specifically, we show how CIPN models of networked industrial IoT controllers can be transformed into Time Petri Net (TPN)-based models, and composed with plant and security-aware channel models in order to enable system-level verification of safety properties in the presence of network-based attacks. Additionally, we introduce realistic channel-specific attack models that capture adversarial behavior using nondeterminism. Moreover, we show how verification results can be utilized to introduce security patches and motivate design of attack detectors that improve overall system resiliency, and allow satisfaction of critical safety properties. Finally, we evaluate our framework on an industrial case study.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑