Formal detection method for defense of information physical fusion system

Abstract

The invention discloses a formal detection method for defense of an information physical fusion system. Based on detection and verification of a CPS false data injection attack of a time automaton, the method comprises the steps of building models of all parts of the CPS and verifying CPS security attributes, firstly modeling components of all levels according to a CPS universal hierarchical network security system structure, then completing modeling of a false data injection attacker and an automatic recovery mechanism, and finally forming a complete system so as to carry out verification. The method has the beneficial effects that the timed automaton is a state machine containing time constraints, the CPS often has time requirements, and modeling and verification of the CPS are simple and easy by using the timed automaton. The CPS behavior safety is modeled, verified and analyzed, and the system safety of the CPS can be effectively improved.

Description

technical field [0001] The invention belongs to the technical field of information security and formalized methods, and in particular relates to a formalized detection method for cyber-physical fusion system defense. Background technique [0002] Cyber ​​Physical Systems (Cyber ​​Physical Systems, hereinafter referred to as CPS) security is one of the important technical foundations of intelligent manufacturing. As a new field that is still in the development stage, CPS still has many problems to be solved urgently in terms of key security technologies. , CPS is the fundamental link between information systems and equipment that controls industrial production and maintains critical infrastructure services. Interconnections between CPS and information systems create exploitable security gaps due to a number of factors, such as the legacy of CPS information security applications and the tendency of CPS developers to sacrifice system integrity and confidentiality. cost over us...

AI Technical Summary

Problems solved by technology

[0005] Regarding the false data injection attack, its full description is: If the attacker can determine the current configuration of the CPS, it can inject malicious measurement data that misleads the state detection process, without being detected by any detection technique, the attacker can exploit the state estimation algorithm Small measurement errors that can be tolerated, thus further increasing the impact of false data injection attacks without being detected

Images