TY - GEN
T1 - Variable Window and Deadline-Aware Sensor Attack Detector for Automotive CPS
AU - Akowuah, Francis
AU - Fletcher, Kenneth
AU - Kong, Fanxin
N1 - Publisher Copyright:
© 2023 IEEE.
PY - 2023
Y1 - 2023
N2 - Cyber-physical systems (CPS) are susceptible to physical attacks, and researchers are exploring ways to detect them. One method involves monitoring the system for a set duration, known as the time-window, and identifying residual errors that exceed a predetermined threshold. However, this approach means that any sensor attack alert can only be triggered after the time-window has elapsed. The length of the time-window affects the detection delay and the likelihood of false alarms, with a shorter time-window leading to quicker detection but a higher false positive rate, and a longer time-window resulting in slower detection but a lower false positive rate.While researchers aim to choose a fixed time-window that balances a low false positive rate and short detection delay, this goal is difficult to attain due to a trade-off between the two. An alternative solution proposed in this paper is to have a variable time-window that can adapt based on the current state of the CPS. For instance, if the CPS is heading towards an unsafe state, it is more crucial to reduce the detection delay (by decreasing the time-window) rather than reducing the false alarm rate, and vice versa. The paper presents a sensor attack detection framework that dynamically adjusts the time-window, enabling attack alerts to be triggered before the system enters dangerous regions, ensuring timely detection. This framework consists of three components: attack detector, state predictor, and window adaptor. We have evaluated our work using real-world data, and the results demonstrate that our solution improves the usability and timeliness of time-window-based attack detectors.
AB - Cyber-physical systems (CPS) are susceptible to physical attacks, and researchers are exploring ways to detect them. One method involves monitoring the system for a set duration, known as the time-window, and identifying residual errors that exceed a predetermined threshold. However, this approach means that any sensor attack alert can only be triggered after the time-window has elapsed. The length of the time-window affects the detection delay and the likelihood of false alarms, with a shorter time-window leading to quicker detection but a higher false positive rate, and a longer time-window resulting in slower detection but a lower false positive rate.While researchers aim to choose a fixed time-window that balances a low false positive rate and short detection delay, this goal is difficult to attain due to a trade-off between the two. An alternative solution proposed in this paper is to have a variable time-window that can adapt based on the current state of the CPS. For instance, if the CPS is heading towards an unsafe state, it is more crucial to reduce the detection delay (by decreasing the time-window) rather than reducing the false alarm rate, and vice versa. The paper presents a sensor attack detection framework that dynamically adjusts the time-window, enabling attack alerts to be triggered before the system enters dangerous regions, ensuring timely detection. This framework consists of three components: attack detector, state predictor, and window adaptor. We have evaluated our work using real-world data, and the results demonstrate that our solution improves the usability and timeliness of time-window-based attack detectors.
KW - Attack and Detection
KW - CPS Security
KW - attack detection
KW - sensor attack
UR - http://www.scopus.com/inward/record.url?scp=85168759877&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85168759877&partnerID=8YFLogxK
U2 - 10.1109/ISORC58943.2023.00018
DO - 10.1109/ISORC58943.2023.00018
M3 - Conference contribution
AN - SCOPUS:85168759877
T3 - Proceedings - 2023 IEEE 26th International Symposium on Real-Time Distributed Computing, ISORC 2023
SP - 54
EP - 63
BT - Proceedings - 2023 IEEE 26th International Symposium on Real-Time Distributed Computing, ISORC 2023
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 26th IEEE International Symposium on Real-Time Distributed Computing, ISORC 2023
Y2 - 23 May 2023 through 25 May 2023
ER -