arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2007.13272eess.SYcs.CRcs.LOcs.SYmath.OC
收藏

网络物理系统对攻击者的隐私保护弹性

Privacy-Preserving Resilience of Cyber-Physical Systems to Adversaries

Bhaskar Ramasubramanian, Luyao Niu, Andrew Clark, Linda Bushnell, Radha Poovendran

摘要:

网络物理系统(CPS)预计将对多种类型的对手具有弹性。在本文中,我们考虑一个CPS,必须满足线性时序逻辑(LTL)的目标存在两种对手。第一个对手有能力篡改CPS的输入,以影响LTL目标的满足。CPS与这个对手的相互作用被建模为一个随机博弈。我们合成一个控制器的CPS,以最大限度地满足LTL目标的概率在任何政策下,这个对手。第二个对手是一个窃听者谁可以观察标记的轨迹的CPS产生的前一步。然后,它可以利用这些信息发动其他类型的攻击。标记轨迹是一系列标签,其中标签与状态相关联,并与该状态下LTL目标的满足程度相关联。我们使用差分隐私来量化当窃听者看到标记的轨迹时彼此相关的状态之间的不可分割性。如果两个相等长度的轨迹在沿着各自轨迹的每个状态处是差分私有的,则它们将是差分私有的。我们使用一个倾斜的Kantorovich度量计算概率分布之间的距离,导致从选择的行动,根据政策从相关的国家,以量化差异隐私。此外,我们这样做的方式,不影响LTL目标的满意度概率。我们验证了我们的方法在模拟的无人机,以满足LTL目标在对抗性环境中。

英文摘要:

A cyber-physical system (CPS) is expected to be resilient to more than one type of adversary. In this paper, we consider a CPS that has to satisfy a linear temporal logic (LTL) objective in the presence of two kinds of adversaries. The first adversary has the ability to tamper with inputs to the CPS to influence satisfaction of the LTL objective. The interaction of the CPS with this adversary is modeled as a stochastic game. We synthesize a controller for the CPS to maximize the probability of satisfying the LTL objective under any policy of this adversary. The second adversary is an eavesdropper who can observe labeled trajectories of the CPS generated from the previous step. It could then use this information to launch other kinds of attacks. A labeled trajectory is a sequence of labels, where a label is associated to a state and is linked to the satisfaction of the LTL objective at that state. We use differential privacy to quantify the indistinguishability between states that are related to each other when the eavesdropper sees a labeled trajectory. Two trajectories of equal length will be differentially private if they are differentially private at each state along the respective trajectories. We use a skewed Kantorovich metric to compute distances between probability distributions over states resulting from actions chosen according to policies from related states in order to quantify differential privacy. Moreover, we do this in a manner that does not affect the satisfaction probability of the LTL objective. We validate our approach on a simulation of a UAV that has to satisfy an LTL objective in an adversarial environment.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑