网络化控制系统虚假数据注入攻击的检测方法研究

发布时间：2018-04-25 01:36

本文选题：信息物理系统 + 子空间辨识　；参考：《北方工业大学》2017年硕士论文

【摘要】：信息物理系统(cyber physics system,CPS)作为新一代的智能系统一直得到广泛的关注,随着越来越多的领域开始应用信息物理系统相关的技术,信息物理系统的安全问题显得尤为重要,如何保障信息物理系统的安全一直是广大科研人员研究的焦点,同时这也是信息物理系统未来发展的前提。考虑到信息物理系统的概念是基于网络化控制,其特征是分布式和网络通信。针对此特征,攻击者能够很容易的从传输网络中得到系统的传输数据,系统的安全性极易遭到破坏。本文是从控制系统安全角度研究虚假数据注入攻击,考虑一个输出跟踪控制系统动态模型是线性离散时不变高斯控制系统,利用跟踪误差和系统助构造一个增广控制系统。首先站在攻击者的角度,假设攻击者能够窃取到目标系统在网络中传输的数据,通过对数据进行分析利用子空间辨识方法对目标系统进行建模,可以间接的得到系统的准确模型。攻击者通过系统的状态空间模型设计出一个隐秘的虚假数据注入(False Data Injection,FDI)攻击序列,目的是在对目标进行攻击后,系统的被控对象会偏离系统给定的参考信号,而且在控制器端基于残差的检测器通过虚假的传感器数据无法检测到攻击的存在。然后针对此类攻击,设计出一种检测方法,旨在能够对上述的虚假数据攻击进行检测。文章最后通过仿真和实验分别验证了攻击和检测方法的有效性。
[Abstract]:As a new generation of intelligent system, the information physics system (physics) has been paid more and more attention. With more and more fields begin to apply the related technology of information physics system, the security of information physics system becomes more and more important. How to ensure the safety of information physics system has been the focus of scientific research, and it is also the premise of the future development of information physics system. Considering that the concept of information physical system is based on networked control, it is characterized by distributed and network communication. In view of this characteristic, the attacker can easily get the data of the system from the transmission network, and the security of the system is easy to be destroyed. In this paper, a false data injection attack is studied from the point of view of control system security. A dynamic model of an output tracking control system is considered as a linear discrete time-invariant Gao Si control system, and an augmented control system is constructed by using tracking error and system assistance. First of all, from the point of view of the attacker, assuming that the attacker can steal the data transmitted by the target system in the network, the target system is modeled by analyzing the data and using the subspace identification method. The exact model of the system can be obtained indirectly. An attacker designs a secret false Data injection Data FDI attack sequence through the system's state space model, in order to deviate from the system's given reference signal after attacking the target. Moreover, the residual-based detector in the controller can not detect the attack by false sensor data. Then a detection method is designed to detect the above-mentioned false data attacks. Finally, the effectiveness of the attack and detection methods is verified by simulation and experiments.
【学位授予单位】：北方工业大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP273

【参考文献】