In this manuscript, we introduce a model predictive control (MPC) strategy tailored to improve the security and resilience of constrained cyber-physical systems facing attacks whose target is the communication channel. Building upon a recently developed resilient control framework, the improvement consists in addressing the challenges posed by time length varying denial-of-service attacks. Its primary focus lies in its capacity to mitigate undesired system behaviors stemming from external malicious actions.Central to our strategy consists in using set-membership conditions, facilitating swift detection of data integrity anomalies and enabling the implementation of appropriate countermeasures. By harnessing set-theoretic based model predictive control ideas, the resulting solution emphasizes its resilient nature in the efficient handling of explicit plant constraints. Moreover, the proposed scheme is designed to ensure the system's safe operation during attacks and minimizing performance degradation. To further bolster resilience, a network refresh procedure is added, which serves to securely restore attack-free communications should the initially deployed countermeasures prove insufficient. Through extensive simulations, wherein we apply our methodology to a tracking problem involving a planar mass-point system, the effectiveness of the resilient scheme here proposed is proved. These simulations confirm the capability of our control architecture to maintain constraint satisfaction across a spectrum of possible denial of service attack scenarios, thereby underlining its robustness and practical usefulness in safeguarding cyber-physical systems against malicious threats.

A Counteracting Resilience Strategy for Denial-of-Service Scenarios in Networked Control Systems

Famularo D.
2024-01-01

Abstract

In this manuscript, we introduce a model predictive control (MPC) strategy tailored to improve the security and resilience of constrained cyber-physical systems facing attacks whose target is the communication channel. Building upon a recently developed resilient control framework, the improvement consists in addressing the challenges posed by time length varying denial-of-service attacks. Its primary focus lies in its capacity to mitigate undesired system behaviors stemming from external malicious actions.Central to our strategy consists in using set-membership conditions, facilitating swift detection of data integrity anomalies and enabling the implementation of appropriate countermeasures. By harnessing set-theoretic based model predictive control ideas, the resulting solution emphasizes its resilient nature in the efficient handling of explicit plant constraints. Moreover, the proposed scheme is designed to ensure the system's safe operation during attacks and minimizing performance degradation. To further bolster resilience, a network refresh procedure is added, which serves to securely restore attack-free communications should the initially deployed countermeasures prove insufficient. Through extensive simulations, wherein we apply our methodology to a tracking problem involving a planar mass-point system, the effectiveness of the resilient scheme here proposed is proved. These simulations confirm the capability of our control architecture to maintain constraint satisfaction across a spectrum of possible denial of service attack scenarios, thereby underlining its robustness and practical usefulness in safeguarding cyber-physical systems against malicious threats.
2024
Sensors
Denial-of-service attack
Actuators
Safety
Sensor systems
Cyberattack
Resilience
Cyber-physical systems
Robust control
Predictive control
Security
induced-delays
attack detection
robust model predictive control
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/20.500.11770/367738
 Attenzione

Attenzione! I dati visualizzati non sono stati sottoposti a validazione da parte dell'ateneo

Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 0
  • ???jsp.display-item.citation.isi??? 0
social impact