Cyber-physical Systems Security- Challenges and Research Ideas
Partha Pal, Rick Schantz, Kurt Rohloff, Joseph Loyall
BBN Technologies, Cambridge, MA 02138
{ppal,schantz,krohloff,jloyall}@bbn.com
1. Introduction
Cyber-physical systems (CPS) are at a crossroads.
Typical CPSs with multi-loop control consisting of
device controllers, plant-level distributed control, and
system-wide SCADA components are pushed (see
Figure 1 below) by market forces to:
Connect many diverse (e.g., control and
business) systems leading to an internetworked
system of systems spanning wide geographic
areas,
Use off-the-shelf networks (sometimes
involving public infrastructure like the Internet,
and often shared) for communication, and
general purpose computing hardware and
software for information processing, and
Empower end-users and customers with more
information and control.
As a result of this push, restrictive and purpose-built
interfaces typical of CPSs are replaced by more open
interfaces, and new dependencies among
interconnected subsystems are established (sometimes
unintentionally). Access to more information and
control surfaces for users and supervisors in an open
and interconnected situation amplifies the impact of
erroneous or malicious actions. Because today’s cyber-
physical system of systems is often part of critical
national infrastructure, the stakes are even higher.
Additionally, unlike many distributed systems (e.g., e-
commerce or logistics planning systems) where a delay
or unavailability of a few seconds is usually tolerable,
CPSs must often meet strict timing requirements during
normal operation as well as during recovery. We argue
that securing the emerging internetworked and
information-rich CPSs is harder than securing typical
distributed information systems because a number of
cyber-security issues that have been addressed
individually or in isolation within a subsystem come
together in a new context with many additional
challenging requirements. In this position paper we
present some of them.
2. Challenges and Solution Approaches
In many ways, the direction taken by CPSs is
reminiscent of the early days of the Internet. The
Internet is arguably the most successful internetworked
environment and example of user empowerment. Our
view of CPS security is informed by our Internet
experience [1], and based on our expertise in multiple
generations of cyber-security research [2, 3, 5],
especially in survivability [4], and on our control
systems experience [14, 15]. We claim that
consideration of CPS security must accept that a) it is
Figure 1: Modern CPS as internetworked system of systems
资源评论
lvgeneral2015-05-10可以认真学习，作为专业拓展的需求。
