Engineering security-aware control applications for data authentication in smart industrial cyber–physical systems

In today's competitive industry marketplace, the companies face growing demands to improve process efficiencies, comply with environmental regulations, and meet corporate financial objectives. Given the increasing age of many industrial systems and the dynamic industrial manufacturing market, intelligent and low-cost industrial automation systems are required to improve the productivity and efficiency of such systems. The collaborative nature of industrial wireless sensor networks (IWSNs) brings several advantages over traditional wired industrial monitoring and control systems, including self-organization, rapid deployment, flexibility, and inherent intelligent-processing capability. In this regard, IWSN plays a vital role in creating a highly reliable and self-healing industrial system that rapidly responds to real-time events with appropriate actions. In this paper, first, technical challenges and design principles are introduced in terms of hardware development, system architectures and protocols, and software development. Specifically, radio technologies, energy-harvesting techniques, and cross-layer design for IWSNs have been discussed. In addition, IWSN standards are presented for the system owners, who plan to utilize new IWSN technologies for industrial automation applications. In this paper, our aim is to provide a contemporary look at the current state of the art in IWSNs and discuss the still-open research issues in this field and, hence, to make the decision-making process more effective and direct.

In engineering application, the characteristics of the control system are entirely determined by the system controller once the controlled object has been chosen. Improving the traditional controller or constructing the new controller is an unfading study field of control theory and application. The control system is greatly enriched and developed by this way. As a complicated self-adaptable system, the biological immune system can effectively and smoothly stand against antigens and viruses intruded into organism. It is possible to improve the self-learning, adaptive and robustness capability of the control system through embedded an artificial immune controller in control system. Based on the biological immune mechanism and artificial immune model, this chapter attempts to study the immune controller design and application in traditional control system..First, a kind of artificial immune controller is proposed based on the T-B cells immunity. The boundedness and the stability of SISO control systems, which constructed by the artificial immune controller, are proved by the little gain theorem. A general controller structure frame based on the T-B cells immunity is proposed, which includes the same kind of controller proposed previously. The validity of this artificial immune controller is verified by simulation. Second, a new type of artificial immune controllers is constructed according to a simple double-cell immune dynamics model. The non-error characteristic of SISO control systems, which constructed by the artificial immune controller, is proved by the nonlinear theory in this chapter. The I/O stability and no-error characteristic of the system are verified by simulations, which show that the kind of artificial immune system have good anti-lag capability. Third, the Varela immune network model has been improved based on which an artificial immune system is proposed. The odd linearization method of the non-linear system is used to prove the stability and non-error characteristic of the SISO system constructed by the artificial immune control system. Its I/O stability, non-error characteristic and strong anti-lag capability are also verified by simulation. Finally, based on the comparison of the three kinds of immune controllers, a general structure of the artificial immune controller is proposed. The further study on this field is indicated in this chapter lastly.

Secure authentication of classical messages with decoherence-free states

In wireless communication for data integrity hash functions are commonly used. It is also an important cryptographic primitives, which is very critical for data integrity assurance and data origin authentication in security services. SHA hash functions are set of cryptographic hash function designed by NSA. SHA-1 produces message digest that of is 160 bits long. Later it has been identified that security flaws were identified in SHA-1, namely that a possible mathematical weakness might exist indicating that stronger hash function would be desirable. In this paper we propose a new hash function, say SHA-192 that has more strength than the existing.

Ahstract A flight control law is designed using the slidingmode control strategy for an aircraft containing pitching moment nonlinearities due to angle-of-attack variation. The performance of this control law is evaluated using the C* criterion. Results indicate that the robusmess is superior to that of a traditional PPI control system for full range of pilot commands. To minimize control chattering which is characteristic of the sliding-mode controller, we incorporate a boundary layer around the sliding surface.

Although the traditional PID controller is widely used in many fields, the system parameters varying and external disturbances existing in the DC servo system will cause large overshoot or poor stability. To improve the performance of the PID controller, a compound servo control system combining the conventional PID control and the fuzzy control is presented to meet the demand of a vehicular antenna servo system in this paper. Incorporating the fuzzy control and the conventional PID control, this paper presents a design method of the fuzzy PID controller that is based on the fuzzy tuning rules and formed by integrating two above control ideas. Simulation results are presented to show the efficiency of the proposed controller. The practical control effect shows that the control system that adopts the fuzzy PID controller has better performance than that of the traditional PID control system, and meets the performance requirements of the servo system.

Universal hash functions are commonly used primitives for fast and secure message authentication in the form of message authentication codes or authenticated encryption with associated data schemes. These schemes are widely used and standardised, the most well known being McGrew and Viega's Galois/Counter Mode (GCM). In this paper we identify some properties of hash functions based on polynomial evaluation that arise from the underlying algebraic structure. As a result we are able to describe a general forgery attack, of which Saarinen's cycling attack from FSE 2012 is a special case. Our attack removes the requirement for long messages and applies regardless of the field in which the hash function is evaluated. Furthermore we provide a common description of all published attacks against GCM, by showing that the existing attacks are the result of these algebraic properties of the polynomial-based hash function. We also greatly expand the number of known weak GCM keys and show that almost every subset of the keyspace is a weak key class. Finally, we demonstrate that these algebraic properties and the corresponding attacks are highly relevant to GCM/$$2^+$$2+, a variant of GCM designed to increase the efficiency in software.

A robust combiner for hash functions takes two candidate implementations and constructs a hash function which is secure as long as at least one of the candidates is secure. So far, hash function combiners only aim at preserving a single property such as collision-resistance or pseudorandomness. However, when hash functions are used in protocols like TLS they are often required to provide several properties simultaneously. We therefore put forward the notion of multi-property preserving combiners, clarify some aspects on different definitions for such combiners, and propose a construction that provably preserves collision resistance, pseudorandomness, “random-oracle-ness”, target collision resistance and message authentication according to our strongest notion.KeywordsHash FunctionRandom OracleRandom StringPseudorandom FunctionOracle AccessThese keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

The transfer of information by telecommunication channels is accompanied by message hashing to control the integrity of the data and confirm the authenticity of the data. When using a reliable hash function, it is computationally difficult to create a fake message with a pre-existing hash code, however, due to the weaknesses of specific hashing algorithms, this threat can be feasible. To increase the level of cryptographic strength of transmitted messages over telecommunication channels, there are ways to create hash codes, which, according to practical research, are imperfect in terms of the speed of their formation and the degree of cryptographic strength. The collisional properties of hashing functions formed using the modified UMAC algorithm using the methodology for assessing the universality and strict universality of hash codes are investigated. Based on the results of the research, an assessment of the impact of the proposed modifications at the last stage of the generation of authentication codes on the provision of universal hashing properties was presented. The analysis of the advantages and disadvantages that accompany the formation of the hash code by the previously known methods is carried out. The scheme of cascading generation of data integrity and authenticity control codes using the UMAC algorithm on crypto-code constructions has been improved. Schemes of algorithms for checking hash codes were developed to meet the requirements of universality and strict universality. The calculation and analysis of collision search in the set of generated hash codes was carried out according to the requirements of a universal and strictly universal class for creating hash codes

This book presents cutting-edge emerging technologies and approaches in the areas of service-oriented architectures, intelligent devices and cloud-based cyber-physical systems. It provides a clear view on their applicability to the management and automation of manufacturing and process industries. It offers a holistic view of future industrial cyber-physical systems and their industrial usage and also depicts technologies and architectures as well as a migration approach and engineering tools based on these. By providing a careful balance between the theory and the practical aspects, this book has been authored by several experts from academia and industry, thereby offering a valuable understanding of the vision, the domain, the processes and the results of the research. It has several illustrations and tables to clearly exemplify the concepts and results examined in the text and these are supported by four real-life case-studies. We are witnessing rapid advances in the industrial automation, mainly driven by business needs towards agility and supported by new disruptive advances both on the software and hardware side, as well as the cross-fertilization of concepts and the amalgamation of information and communication technology-driven approaches in traditional industrial automation and control systems. This book is intended for technology managers, application designers, solution developers, engineers working in industry, as well as researchers, undergraduate and graduate students of industrial automation, industrial informatics and production engineering.

Hash functions are important security primitives used for authentication and data integrity. Among the most popular hash functions are MD5, SHA-1, and RIPEMD-160, which are all based on the function MD4. This similarity can be exploited for designing a unified engine to perform all three hash functions. Hash message authentication code (HMAC) is a shared-key security algorithm that uses these hash functions alternatively for IPSec authentication. Since some other security applications, such as digital signature, also use these three hash functions, it is prudent to design a unified, reconfigurable engine that can perform any one of them alone or with HMAC. In this work, we design an HMAC-hash unit that can be reconfigured to perform one of six standard security algorithms; namely, MD5, SHA-1, RIPEMD-160, HMAC-MD5, HMAC-SHA-1, and HMAC-RIPEMD-160. This paper applied pipelining and parallelism to the design of the HMAC-hash unit to improve throughput, especially for large message sizes. We achieved higher throughput than engines that integrated three hash functions or more and comparable throughput to those integrated only two hash functions.

As an important part of guard system, intrusion detection systems have great significance to the security of industrial control systems. Cause the industrial control systems of the on-site environment is often very complicated, the process data extracted on-site have a wide variety of features, and they always have complex associations and are not independent. The intrusion detection algorithms for traditional industrial control systems often do not solve this problem, which results in a decrease in the accuracy, precision and high false negative rate (FNR), false positives rate (FPR). Aiming at solving the current problems, this paper proposes an algorithm combining the Fast Independent Principal Component Analysis (FastICA) and Support Vector Machine (SVM). Finally compared with the SVM and PCA-SVM algorithms, the experimental results show that the accuracy rate has been significantly improved and slight FPR.KeywordsIntrusion detectionFastICASVM

This review chapter provides an in-depth exploration of various aspects of data security, ranging from foundational principles to advanced techniques. It sheds light on the importance of maintaining confidentiality, integrity, and availability of data and presents a comprehensive overview of technologies and methodologies that can be employed to achieve robust data security. In today's digital age, ensuring the security and protection of data has become paramount. This research chapter explores various topics related to data security, including confidentiality, integrity, and availability. It also delves into the role of blockchain technology, zero-trust architecture, secure coding practices, legal and ethical considerations, homomorphic encryption, secure multi-party computation, hash functions and digital signatures, secure communication protocols, cryptocurrency and blockchain security, as well as cryptanalysis and side-channel attacks.It highlights various techniques and technologies that can be employed to protect data confidentiality, including encryption and access control mechanisms. Blockchain technology has emerged as a groundbreaking solution for enhancing data security. Zero-trust architecture challenges traditional security models by adopting a holistic and dynamic approach to data protection. Secure coding practices and DevSecOps play a vital role in developing secure software applications. The chapter investigates the importance of integrating security measures throughout the software development lifecycle. It emphasizes the adoption of secure coding practices and the implementation of DevSecOps methodologies to build resilient and secure software systems. Legal and ethical considerations are crucial when addressing data security. Homomorphic encryption and secure multi-party computation are advanced cryptographic techniques that allow data to be processed securely while encrypted. The chapter examines the principles and applications of these techniques, highlighting their significance in scenarios where privacy is paramount. Hash functions and digital signatures form the backbone of data authentication and integrity. The chapter discusses the properties and applications of hash functions and digital signatures in verifying the integrity and authenticity of data. Secure communication protocols are essential for protecting data during transmission. The chapter explores various secure communication protocols, such as Transport Layer Security (TLS), and examines their role in ensuring data confidentiality, integrity, and authenticity. Cryptocurrency and blockchain security focus on the secure storage and transfer of digital assets. The research chapter investigates the security considerations specific to cryptocurrencies and explores how block chain technology can mitigate vulnerabilities and ensure the trustworthiness of transactions. Cryptanalysis and side-channel attacks are threats to cryptographic systems. The chapter discusses these attack techniques, highlighting their potential risks and the measures that can be taken to counter them.

Due to the energy conservation law, traditional active noise control system cannot realize the suppression of omnidirectional sound field and will bring fluctuation effect in the far field. This paper presents a method of sound field control using beam deflection to overcome the shortcomings of traditional active noise control system. The principle of beam deflection is firstly derived based on the principle of beam forming. Two methods including conventional beam deflection and optimal beam deflection are proposed. Then technical route of the sound field control using beam deflection is given. Finally, simulations are performed and the results show that proposed method can effectively suppress the energy of a controlled sound source in the predetermined direction.

In order to adapt to the development and application of power dispatch control systems in the future cloud computing environment, this study proposes to make full use of the elastic characteristics of cloud computing to construct a new power dispatch control system architecture. First, we analyze the shortcomings of the traditional power dispatch control system architecture, from the perspective of architecture complexity, operation and maintenance, universality and disaster tolerance. Secondly, combining the characteristics of the existing dispatch control system, we propose a new power dispatch control system architecture that conforms to the cloud computing platform. Finally, we emphatically analyzed the key technologies for key breakthroughs needed to realize the power dispatching control system architecture. Through the comparison of traditional and new power dispatch control system architectures, it can be considered that the new power dispatching control system architecture has greatly improved reliability, flexibility, safety and economy, and has certain advantages.