抗智能传感器攻击的非阻塞管理器存在性判定
On Decidability of Existence of Nonblocking Supervisors Resilient to Smart Sensor Attacks
摘要：
离散事件系统（DES）的网络安全性近年来受到越来越多的关注，因为它与严重依赖网络系统之间数据通信的所谓第四次工业革命高度相关。一个关键的挑战是如何确保系统对传感器和/或执行器攻击的弹性，这些攻击可能会篡改数据完整性和服务可用性。在本文中，我们专注于智能传感器攻击相关的一些关键的可判定性问题。我们首先提出了一个充分和必要的条件，确保存在一个智能传感器攻击，这揭示了一个新的需求和供应之间的关系的攻击者和受控植物，表示为一组风险对。每个风险对由攻击者所需的损害字符串和在监督程序中可行的可观察序列组成，使得后者诱导一系列控制模式，这允许损害字符串发生。事实证明，每个风险对都可以引发智能弱传感器攻击。接下来，我们表明，当植物，主管和损坏的语言是定期的，它是计算上可行的，以消除所有这样的风险对植物的行为，通过一个真正的编码方案，在此基础上，我们能够建立我们的关键结果，存在一个非阻塞的监督弹性智能传感器攻击是可判定的。据我们所知，这是DES文献中关于网络攻击的第一个结果。建议的决策过程呈现出一个特定的合成过程，保证计算一个有弹性的监督员，只要它存在，这到目前为止还没有在文献中实现。
英文摘要：
Cybersecurity of discrete event systems (DES) has been gaining more and more attention recently, due to its high relevance to the so-called 4th industrial revolution that heavily relies on data communication among networked systems. One key challenge is how to ensure system resilience to sensor and/or actuator attacks, which may tamper data integrity and service availability. In this paper we focus on some key decidability issues related to smart sensor attacks. We first present a sufficient and necessary condition that ensures the existence of a smart sensor attack, which reveals a novel demand-supply relationship between an attacker and a controlled plant, represented as a set of risky pairs. Each risky pair consists of a damage string desired by the attacker and an observable sequence feasible in the supervisor such that the latter induces a sequence of control patterns, which allows the damage string to happen. It turns out that each risky pair can induce a smart weak sensor attack. Next, we show that, when the plant, supervisor and damage language are regular, it is computationally feasible to remove all such risky pairs from the plant behaviour, via a genuine encoding scheme, upon which we are able to establish our key result that the existence of a nonblocking supervisor resilient to smart sensor attacks is decidable. To the best of our knowledge, this is the first result of its kind in the DES literature on cyber attacks. The proposed decision process renders a specific synthesis procedure that guarantees to compute a resilient supervisor whenever it exists, which so far has not been achieved in the literature.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
