Kinematic Control of Serial Manipulators Under False Data Injection Attack

False data injection attacks with complete stealthiness in cyber–physical systems: A self-generated approach

Design of False Data Injection Attacks in Cyber-Physical Systems

False data injection (FDI) attacks are malicious insertions of false data as sensor measurements in a cyber-physical system, in order to lead the system to take a wrong action. False data injection attacks do not attack the computational or network components of cyber-physical systems but the interface between the physical and the cyber part. Such attacks are powerful and can have catastrophic results. Defense against them can be achieved by limiting the attack surface through vulnerability analysis of the cyber-physical system design and by monitoring system operation in the field with monitors that observe system parameters and sensor measurements and detect abnormal operation early. In this chapter, we describe promising techniques for vulnerability analysis and dynamic monitoring, based on efficient SMT solvers and Kalman filter techniques, respectively.

The cybersecurity of the smart grid is becoming a critical issue to the power systems. Mitigating potential cyberattacks on the control of the power electronic devices is an important concern in the controller design to enhance the resilience of the overall power grid. In this paper, a novel model predictive control (MPC) is proposed for the multilevel cascaded H-bridge inverters considering the false data injection (FDI) attacks. The FDI attack is a vicious attack scenario when the attack signals are injected into the sensors in the cyberphysical systems (CPS). It is shown that FDI signals can effectively penetrate the commonly used Kalman Filter (KF) based state estimation and jeopardize the control of the inverters. The k-Nearest Neighbors (KNN) algorithm is employed in the proposed scheme to mitigate the FDI attacks. The proposed KNN-based MPC scheme was tested with various types of attack signals. The results show that the proposed scheme exhibits a robust performance in the face of the malicious FDI attacks.

While acquiring precise and intelligent state sensing and control capabilities, the cyber physical power system is constantly exposed to the potential cyber-attack threat. False data injection (FDI) attack attempts to disrupt the normal operation of the power system through the coupling of cyber side and physical side. To deal with the situation that stealthy FDI attack can bypass the bad data detection and thus trigger false commands, a system feature extraction method in state estimation is proposed, and the corresponding FDI attack detection method is presented. Based on the principles of state estimation and stealthy FDI attack, we analyze the impacts of FDI attack on measurement residual. Gaussian fitting method is used to extract the characteristic parameters of residual distribution as the system feature, and attack detection is implemented in a sliding time window by comparison. Simulation results prove that the proposed attack detection method is effectiveness and efficiency.

Driven by the rapid development of modern industrial processes, cyber-physical systems (CPSs), which tightly conjoin computational and physical resources, have become ever-more prevalent during recent years. However, due to the intrinsical vulnerability of the cyber layer, the system performances of CPSs are easily degraded by malicious false data injection (FDI) attacks, which are launched by adversary. In this article, the issue of secure reconstruction is considered for linear CPSs with simultaneous sparse actuator and sensor attacks. First, an adaptive counteraction searching strategy is proposed to identify the potential combinational attack mode. In this way, malicious FDI attacks are excluded. Second, by constructing a descriptor switched sliding mode observer, the sparse FDI attacks and the system state are reconstructed effectively. Meanwhile, sufficient conditions of the error convergence can be derived. Finally, a numerical simulation is utilized to illustrate the applicability of the proposed theoretical derivation.

An adaptive event-triggered security control method is proposed for networked robotic teleoperation systems subject to time-varying delays and false data injection (FDI) attacks. An event-triggered scheme is designed via the position and velocity signals of the master and slave robots, where the triggering thresholds can change adaptively with the system states. The position and velocity triggered signals and the feedback error between the operator and the environment forces are utilized to detect whether the transmitted signals suffered from FDI attacks. Then, a switching controller is designed, which is able to adopt the corresponding control strategy according to the corresponding detection result. The stability of the system and the convergence of the tracking errors are proved through Lyapunov functions, and the proposed method is validated through practical experiments. The proposed method is able to adaptively adjust the triggering frequency and effectively reduce the transmitted data, thus saving the network resources. Meanwhile, it can ensure the stability of networked teleoperation systems under time-varying delays and FDI attacks, as well as the position and force tracking performance.

In this paper, for a class of nonlinear cyber-physical systems (CPSs), the problem of adaptive security control for false data injection (FDI) attacks on the sensor and actuator is solved. Both sensor and actuator are destroyed by attackers, which makes the feedback control design unable to access the traditional error surface. Firstly, a state observer is constructed to mitigate the impact of sensor attacks. And then neural networks are used to approximate the nonlinear term and compensate for state-dependent actuator attacks. Finally, in order to reduce the impact of FDI attacks, we design a special time-varying symmetry barrier function in backstepping control design, which can achieve specific output signal constraints under FDI attacks. Through the above control strategy, the output constraint control problem of CPSs under FDI attacks is solved. Finally, a numerical simulation example demonstrates the effectiveness of the proposed controller.

Attacks detection and security control for cyber-physical systems under false data injection attacks

In this article, a novel model-free adaptive control (MFAC) design for a class of multiple input multiple output (MIMO) nonlinear cyber-physical systems (CPSs) under false data injection (FDI) attacks in the measurement channel is proposed. First, a threshold attack detection scheme based on the difference between predicted and transmission data is proposed. Then, an attack compensation module is designed, which can be changed according to different attack strategies of the attacker, and can realize resilient control of FDI attacks on systems with different complexity and different attack intensities. Subsequently, a model-free adaptive controller based on partial form dynamic linearization is designed for the reconstructed system after attack compensation, which can indirectly realize the tracking control task of the original system. Theoretical analysis of the proposed algorithm shows that the tracking error is ultimately bounded. Finally, a numerical simulation and a three-tank system simulation are given to demonstrate the effectiveness of the proposed attack detection scheme, the flexibility of the resilient control of attack compensation, and the uniformly bounded convergence of tracking error.

The smart grid combines the classical power system with the information technology, leading to a cyber-physical system. In such an environment, the malicious injection of data has the potential to cause severe consequences. Classical residual-based methods for bad data detection are unable to detect well designed false data injection (FDI) attacks. Moreover, most of the works on FDI attack detection are based on the linearized DC model of the power system and fails to detect attacks based on the AC model. The aim of this paper is to address these problems by using the graph structure of the grid and the AC power flow model. We derive an attack detection method that is able to detect previously undetectable FDI attacks. This method is based on concepts originating from graph signal processing (GSP). The proposed detection scheme calculates the graph Fourier transform of an estimated grid state and filters the graph’s high-frequency components. By comparing the maximum norm of this outcome with a threshold, we can detect the presence of FDI attacks. Case studies on the IEEE 14-bus system demonstrate that the proposed method is able to detect a wide range of previously undetectable attacks, both on angles and on magnitudes of the voltages.

This article is concerned with the recursive state estimation issue for a class of nonlinear cyber-physical systems (CPSs) with token bucket protocols (TBPs) subject to sensor failures and false data injection (FDI) attacks. In the system under consideration, measurement signals are transmitted to the remote estimator only when there are sufficient tokens in the bucket to meet the token consumption. During network transmissions, the signals are exposed to FDI attacks, which occur randomly and follow a Bernoulli distribution. The primary objective is to develop a state estimation algorithm that can handle the TBP, sensor failures, and FDI attacks simultaneously. Initially, the upper bound of the estimation error covariance is derived using an intensive stochastic technique and the induction approach. Subsequently, the desired estimator gains are recursively computed to minimize this upper bound. Finally, an example is presented to demonstrate the effectiveness of the proposed estimation scheme.

This paper studies the cooperative output regulation problem for heterogeneous multi‐agent systems (MASs) subject to false data injection (FDI) attacks, which means the malicious cyber‐attackers may inject false data into the communication topology randomly. To ensure that each follower agent can track the leader agent accurately, we construct both an observer and a control law for each follower agent. Since the FDI attacks may exist in the communication network, a filter with an adaptive compensator, which can estimate attack signals dynamically, is equipped for each observer, such that the filter can neutralize attacks when malicious attackers launch attacks. Therefore, the cooperative output regulation can be achieved under the control law based on the observer no matter whether there exist attacks or not. Finally, a numerical example is provided for validating the theoretical results.

Consensus in multi-agent dynamical systems is prone to be sabotaged by the adversary, which has attracted much attention due to its key role in broad applications. In this paper, we study a new false data injection (FDI) attack design problem, where the adversary with limited capability aims to maximize the consensus convergence error by compromising a subset of agents and manipulating their local high-dimensional states. We first formulate the FDI attack design problem as a combinatorial optimization problem, which is NP-hard. Then, based on the submodularity optimization theory, we provide the necessary and sufficient conditions to guarantee the submodularity of the objective function, which satisfies the property of diminishing marginal returns. In other words, the profit of adding an extra agent to the compromised set decreases as that set becomes larger. With this property, we exploit the greedy scheme which aims to find the optimal compromised agent set to produce the maximum convergence error when adding one extra agent to that set each time. Thus, an FDI attack selection algorithm is formed to obtain the near-optimal subset of the compromised agents. Furthermore, we derive the analytical suboptimality bounds and the worst-case running time under the proposed algorithm. Extensive simulation results are conducted to show the effectiveness of the proposed algorithm.

The rapid adoption of the Industrial Internet of Things (IIoT) model has exposed methods to inadequate security measures. False data injection attacks (FDIAs) pose a significant security threat in IIoT, as they aim to mislead industrial platforms by manipulating sensor readings. In IIoT, owing to the data attacker’s changeability, the FDIA is the most critical intrusion network. As aggressive devices permitted in the network perform their typical data-collecting tasks, identifying an FDIA becomes a nontrivial effort due to potential attacks. Conventional attack detection models have proven insufficient in addressing FDIAs, and most current countermeasures focus on the need to legalise data, primarily in the context of data clustering services. Presently, deep learning (DL) systems are employed for detecting FDIA in real-time and supply personalised protective measures to the threat. This paper presents an Intelligent Management of False Data Injection Attacks Using Feature Selection and Voting Classifier (IMFDIA-FSVC) technique in IIoT systems. The primary purpose of the IMFDIA-FSVC technique is to develop a model for detecting and mitigating FDIAs to ensure safe and trustworthy operations of IIoT systems. Initially, the data pre-processing stage involves two stages: missing value analysis and normalisation to standardise the input data for an effective study. For an effective feature selection, the IMFDIA-FSVC model utilises a statistical and information-theoretic selection (SITS) technique to select optimal features from the input data. Finally, the classification process is mainly deployed by three models: the temporal convolutional network (TCN), the deep belief network (DBN), and the autoencoder (AE). An ensemble classifier is then performed using the voting classifier. The comparison study of the IMFDIA-FSVC method showed a superior accuracy value of 99.15% compared to existing models on the IIoT and FDIA datasets.