A Posteriori Detection of Moment of Attack on Cyber-physical Systems: A Back-and-forth Observer Approach ⁎. Issue 23 (2018)

• Record Type: Journal Article
• Authors: Nam, Jiyeon; Park, Gyunghoon; Kim, Taekyoo; Shim, Hyungbo
• Is Part Of: IFAC-PapersOnLine. Volume 51:Issue 23(2018)
• Page Start: 188
• Page End: 193
• Publication Date: 2018
• Subjects: Cyber-physical systems -- Attack detection -- Moment of attack -- Temporary stealthiness -- Back-and-forth observer; Automatic control -- Periodicals; 629.805
• DOI: 10.1016/j.ifacol.2018.12.033
• Languages: English
• ISSNs: 2405-8963

Abstract

Abstract: In this paper, we address the problem of finding the moment at which an attack to a cyber-physical system initiates, which we call the "moment of attack." The proposed algorithm is not a real-time method, but the search is performed a posteriori. Nevertheless, the problem becomes of particular interest for forensic evidence, or for high-cost manufacturing processes. In fact, when a production system is attacked, the manufactured output before the attack does not have to be discarded if exact time of the attack is found. To tackle the problem for "temporarily stealthy" sensor attack of polynomial types (with which the conventional real-time anomaly detectors hardly estimate the moment of attack), we propose a batch-type detection algorithm for the moment of attack via the back-and-forth observer approach.