• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Asia and South Pacific Design Automation Conference >A systematic security analysis of real-time cyber-physical systems
【24h】

A systematic security analysis of real-time cyber-physical systems

机译：实时网络物理系统的系统安全性分析

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Security in Cyber-Physical Systems (CPS) has become a serious concern owing to the rapid adoption of technologies such as plug-and-play connectivity, robotics and remote coordination and control. It is well understood that the performance overhead incurred due to security considerations is rather high, which needs to be captured holistically for a real-time CPS with strict timing budget and hard deadlines. Additionally, attacks in real-time CPS may only alter the timing behaviour of system components without any changes in functionality, resulting in serious consequences due to missed deadlines. To address this challenging issue, it is necessary to understand the role of diverse components in a real-time CPS and how those expose the system to a malicious attacker. In this paper, we propose a systematic security analysis flow, using a novel Attack Sequence Diagram (ASD), which links the sources, intermediate components and final manifestations of an attack, thereby clearly delineating the attack surfaces of a complex real-time CPS. Based on the ASD, it is possible to evaluate the complexity of an attack, performance overhead of a countermeasure and explore different design trade-offs for a realtime CPS. With the help of real-world and synthetic examples, we demonstrate that ASD seamlessly enables one to map the existing vulnerabilities and uncover new attack possibilities.
机译：由于快速采用了即插即用连接，机器人技术以及远程协调和控制之类的技术，网络物理系统（CPS）的安全性已成为严重关注的问题。众所周知，出于安全考虑而产生的性能开销相当高，对于具有严格时间预算和严格期限的实时CPS，需要从整体上捕获该开销。此外，实时CPS攻击可能只会更改系统组件的计时行为，而功能不会发生任何变化，由于错过截止日期而导致严重后果。为了解决这个具有挑战性的问题，有必要了解实时CPS中各种组件的作用以及这些组件如何将系统暴露给恶意攻击者。在本文中，我们提出了一种使用新颖的攻击序列图（ASD）的系统安全分析流程，该流程将攻击的来源，中间组件和最终表现形式链接在一起，从而清楚地描绘出了复杂的实时CPS的攻击面。基于ASD，可以评估攻击的复杂性，对策的性能开销，并为实时CPS探索不同的设计折衷方案。借助实际示例和综合示例，我们演示了ASD无缝地使人们能够映射现有漏洞并发现新的攻击可能性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号