Detection and isolation of routing attacks through sensor watermarking

Detection and isolation of routing attacks through sensor watermarking

Ferrari, Riccardo M.G. (TU Delft Team Jan-Willem van Wingerden)
Herdeiro Teixeira, A.M. (TU Delft Information and Communication Technology)

Sun, J (editor)
Jiang, Z-P (editor)

2017

In networked control systems, leveraging the peculiarities of the cyber-physical domains and their interactions may lead to novel detection and defense mechanisms against malicious cyber-attacks. In this paper, we propose a multiplicative sensor watermarking scheme, where each sensor's output is separately watermarked by a Single Input Single Output (SISO) filter. Hence, such scheme does not require communication between multiple sensors, but can still lead to detection and isolation of malicious cyber-attacks. In particular, we analyze the benefits of the proposed watermarking scheme for two attack scenarios: The physical sensor re-routing attack and the cyber measurement re-routing one. For each attack scenario, detectability and isolability properties are analyzed with and without the proposed watermarking scheme and we show how the watermarking scheme can be leveraged to detect cyber sensor routing attacks. In order to detect compromised sensors, we design an observer-based detector with a robust adaptive threshold. Additionally, we identify the sensors involved in the re-routing attacks by means of a tailored Recursive Least Squares parameter estimation algorithm. The results are illustrated through a numerical example.

http://resolver.tudelft.nl/uuid:8308f0f0-1369-4fb2-977e-f84f3eacf9c6

https://doi.org/10.23919/ACC.2017.7963800

IEEE, Piscataway, NJ, USA

9781509059928

Proceedings of the 2017 American Control Conference (ACC 2017)

2017 American Control Conference, ACC 2017, 2017-05-24 → 2017-05-26, Seattle, United States

Institutional Repository

conference paper

© 2017 Riccardo M.G. Ferrari, A.M. Herdeiro Teixeira