An integrated data-driven scheme for the defense of typical cyber–physical attacks. (April 2022)

• Record Type: Journal Article
• Authors: Wu, Shimeng; Jiang, Yuchen; Luo, Hao; Zhang, Jiusi; Yin, Shen; Kaynak, Okyay
• Is Part Of: Reliability engineering & system safety. Volume 220(2022)
• Publication Date: 2022-04
• Subjects: Cyber–physical attacks -- Safety -- Denoising auto-encoder -- Secure transmission -- Attack detection; Reliability (Engineering) -- Periodicals; System safety -- Periodicals; Industrial safety -- Periodicals; Fiabilité -- Périodiques; Sécurité des systèmes -- Périodiques; Sécurité du travail -- Périodiques; 620.00452
• DOI: 10.1016/j.ress.2021.108257
• Languages: English
• ISSNs: 0951-8320

Abstract

Abstract: With the frequent occurrence of safety incidents in cyber–physical systems (CPSs), great significance has been attached to the study of defense schemes against cyber–physical attacks. In this paper, an integrated data-driven defense scheme is proposed, which can sensitively detect data integrity attacks such as false data injection (FDI) attacks, denial-of-service (DoS) attacks, and replay attacks, and ensures secure transmission against eavesdropping attacks. Specifically, a novel deep learning model is designed so that both the online detection task and the encryption/decryption task can be completed under the same framework. The main idea is inspired by denoising auto-encoders whereas necessary changes are made to adapt to the challenges in the context of CPS attacks, and in light of this, the proposed approach is called modified denoising auto-encoder (MDAE). Unlike supervised classifier-based detectors, the proposed detector can retain sensitivity to unknown attacks because it is trained to learn the normal operation behavior. Moreover, to improve the detectability of the DoS and replay attacks on all data, the check code is designed. Encrypting the transmitted data through nonlinear mapping is achieved using the same MDAE, which prevents the attackers from recording useful information. Benefiting from the fact that the dimension of the variables is reduced after encryption, the transmission traffic can be saved. Simulation results on the measurement data instances generated by the IEEE 118-bus system validate the encryption effects and detection accuracy of the proposed scheme and show the superiority by comparison study. Highlights: A modified denoising autoencoder-based detector with check code is designed. Detecting different types of data integrity attacks with unknown patterns. An encryption scheme to prevent attackers from getting useful information. Reducing network transmission traffic and errors caused by noise.