A hierarchical security architecture for cyber-physical systems

Abstract

Abstract-Security of control systems is becoming a pivotal concern in critical national infrastructures such as the power grid and nuclear plants. In this paper, we adopt a hierarchical viewpoint to these security issues, addressing security concerns at each level and emphasizing a holistic cross-layer philosophy for developing security solutions. We propose a bottom-up framework that establishes a model from the physical and control levels to the supervisory level, incorporating concerns from network and communication levels. We show that the game-theoretical approach can yield cross-layer security strategy solutions to the cyber-physical systems. I. INTRODUCTIONMany industry sectors are experienced with arming automation systems with modern IT technology. The integration moves the systems from an outdated, proprietary technology to more common ones such as personal computers, Microsoft Windows, TCP/IP/Ethernet, etc. It provides more efficient methods of communication, improves system interoperability and result in considerable cost and performance benefits. However, in the meantime, it poses security challenges on control systems as the integration exposes the system to public networks.In [1], it is reported that hackers have inserted software into the US power grid, potentially allowing the grid to be disrupted at a later date from a remote location. As reported in [2], it is believed that an inappropriate software update has led to a recent emergency shutdown of a nuclear power plant in Georgia, which lasted for 48 hours. In [3], it is discovered that a computer worm, Stuxnet has been spread to target Siemens Supervisory Control And Data Acquisition (SCADA) systems that are configured to control and monitor specific industrial processes. On November 29, 2010, Iran has confirmed that its nuclear program had indeed been damaged by Stuxnet [4], [5]. The infestation by this worm may have damaged Iran's nuclear facilities in Natanz and eventually delayed the start up of Iran's nuclear power plant.Many control systems do not have built-in security functionalities and the security solutions in regular IT systems may not always apply to systems in critical infrastructures. This is because critical infrastructures have different goals, objectives and assumptions concerning what needs to be protected, and have specific applications that are not originally designed for a general IT environment. Hence, it is necessary to develop unique security solutions to fill the gap where IT solutions do not apply.

Cyber-physical system security for networked industrial processes

“…The purpose of the cyber-security impact assessment is to identify threats and the consequences of successful attacks so that security managers can prioritize security defense resources [17] . The cyber-security impact assessment can be achieved by the following three steps: asset identification and classification, asset quantization, and dynamic assessment.…”

“…Ocarina [17] can automatically generate the framework code from the AADL models. This code is then compiled with the AADL runtime and functional source code to create executable binaries.…”

“…Cyber-security guarantee of the industrial CPS must be designed according to the hierarchical structure of the system, and all levels of cyber-security must be taken into account [16] . However, many industrial control systems do not have their built-in security functionalities, and the cyber-security solutions in the information technology (IT) domain are not suitable for industrial CPSs because of the different goals and assumptions concerning the protection [17,18] . Therefore, it is necessary to develop a flexible and resilient cyber-security protection approach to guarantee the cyber-security of the industrial CPS.…”

Towards a Framework for Assuring Cyber Physical System Security

“…Quanyan Zhu, et al, in [80] adopts a hierarchical viewpoint to these security issues, addressing security concerns at each level and emphasizing a holistic cross-layer philosophy for developing security solutions. …”

Agent-based cyber control strategy design for resilient control systems: Concepts, architecture and methodologies

“…It has been pointed out that current research philosophies lack the depth or the focus on the control system application to satisfy many aspects of requirements of resilience, including graceful degradation of hierarchical control while under cyber attack. In [7], a hierarchical viewpoint is used to address security concerns at each level of complex systems. The paper emphasizes a holistic cross-layer philosophy for developing security solutions and provides a game-theoretical approach to model cross-layer security problems in cyberphysical systems.…”