计算机科学
信息物理系统
计算机安全
服务拒绝攻击
信息安全
网络攻击
熵(时间箭头)
作者
Aris Kanellopoulos,Kyriakos G. Vamvoudakis
出处
期刊:Advances in information security
日期:2019-01-01
卷期号:: 59-83
被引量:3
标识
DOI:10.1007/978-3-030-10597-6_3
摘要
This chapter considers the problem of securely operating a cyber-physical system under different types of attacks, including actuator and sensor attacks. The proposed defense approach consists of a proactive and a reactive mechanism. The proactive part leverages the principles of moving target defense, and introduces a stochastic switching structure that dynamically and continuously alters the behavior of the system, aiming to neutralize the attacker’s reconnaissance efforts. An unpredictability metric is proposed that utilizes the entropy induced by a switching supervisor, in order to maximize efficiency. The reactive part isolates the potentially compromised system components. A novel integral Bellman-based intrusion detection system is used to detect the attacks and take appropriate measures by collecting data online and without knowledge of the physical interpretation of the system. Simulation results are presented to showcase the efficacy of the proposed approach.
科研通智能强力驱动
Strongly Powered by AbleSci AI