Cyber-Physical_Systems_yber Physical system (CPS) is a new generation of digital systems,.pdf

yber Physical system (CPS) is a new generation of digital systems, composed of computational and physical capability that engages with humans like never before. It's designed to act like a network of multiple variables with both physical input and output – rather than standalone technology

1. Cyber-Physical Systems Security
Alvaro A. Cardenas

2. © Crown Copyright, The National Cyber Security Centre
2019. This information is licensed under the Open
Government Licencev3.0. To view this licence, visit
http://www.nationalarchives.gov.uk/doc/open-
government-licence/.
When you use this information under the Open
Government Licence, you should include the following
attribution: CyBOKCyber-Physical Systems Security
Knowledge Area Issue 1.0 © Crown Copyright, The
National Cyber Security Centre 2019, licensed under the
Open Government Licence
http://www.nationalarchives.gov.uk/doc/open-
government-licence/.
The CyBOKproject would like to understand how the
CyBOKis being used and its uptake. The project would like
organisationsusing, or intending to use, CyBOKfor the
purposes of education, training, course development,
professional development etc. to contact it at
[email protected] let the project know how they are
using CyBOK.

3. Modernization of our Physical
Infrastructures
2
Industrial Control Systems
Building AutomationManufacturing Automation
Smart Grid
Intelligent
TransportationSystems
Operations
Center
WirelessHART, ISA 100.11a, 6LoWPAN, ROLL, 802.15.4, …

4. Smart Homes, Autonomous
Vehicles, Agriculture
3
Image Source:
conosco.com

5. Cyber-Physical Systems
4
• Control
• Computation
• Communication
• Interdisciplinary
Research!

6. Security Problems
5

7. Control Systems
6
Control Room
HMI
PLC
Centrifuges
1kHz 1kHz
StatusStatus

9. Medical Devices
8

10. Air Traffic Communications
(ADS-B)
9
• Source: Sampigethaya et al.

11. Autonomous Vehicles
10

12. A decade ago it was hard to convince
researchers this was a problem
Only one verified attack to control systems:
2000 attack on waste water control system
11

13. If attacker has partial control of system, it
can drive it to unsafe states.
Nothing new!
Use normal IT security tools!
Nothing new!
Safety and fault tolerance will save
the day!
Security of Control Systems?
Not my job!
It’s the control engineers job!
Not my job!
It’s the IT security guy’s job!
Why is CPS Security Different?
12Attacks != Failures
Security Control

14. Security in CPS
• Security is not only about keeping attackers
out
• It is also about
–Understanding risks
–Mitigating
–Detecting
–Responding
to adversaries that have partial access to
your system
13

15. Preventing Attacks
•Securing Legacy Systems
• Bump-in-the-wire
• Wireless shields
• Retrofitting security in legacy communications
•Lightweight security
• High-assurance systems
• Preventing transduction attacks
14

16. Detecting Attacks
•Remote attestation
• Misuse detection
• Anomaly detection
• Physics-based
attack detection
• Active detection
15
Physical
Process
(Plant)
Actuators Sensors
Controller
Detection
v
k
z
k
yk
Reconfi
guration
uk
uk
(Under Normal Operation)
rk
Physical
Model
LDSor ARuk
y
k
ˆy
ky −k 1
r = y −yk kˆk
Residual Generation
Anomaly
Detection:
Satelessor
Stateful
rk
Detection
alert

17. Mitigating Attacks
• Conservative control
• Security indices
• Resilient estimation
• Inertial resets
• Constraining actuation
• Virtual sensors
• Reactive response
(game theory)
• Safe controls
16

18. Privacy in CPS

19. Privacy and New Technologies
• The right to be let alone (Thomas Cooley)
• There is a growing threat to this right
–“recent inventionsand business methods”
–“instantaneous photographs”
• Cameras created a new privacy problem:
–They allowed photography of unwilling or unknowing
persons
18
Warren and Brandeis
(1890)

20. Kevin Ashton (British entrepreneur)
coined the term IoT in 1999.
19
• 20th Century: computers were
brains without senses—-they only
knew what we told them.
• More info in the world than what
people can type on keyboard
• 21st century: computers sense
things, e.g., GPS we take for
granted in our phones

21. Ve h i c u l a r Pr i v a c y
20

22. Drones and Privacy
21
connect to drone open AP1
Attacker
Drone
3
2 echo lewei_cmd;…
record and return footage

23. Location Privacy
22

24. IoT for Children
23
Children are easy molded.
Accept standards of surveillance.

25. Smart Homes and Privacy

26. Policy and Political Aspects

27. Security is a Hard Business
Case
• “Making a strong business case for cybersecurity
investment is complicated by the difficulty of quantifying risk
in an environment of rapidly changing, unpredictable
threats with consequences that are hard to demonstrate”
–DoE. Roadmap to Achieve Energy Delivery Systems
Cybersecurity
26

28. As a Result Systems are Vulnerable
with Basic Security Gaffes
• Unauthenticated remote connection to devices
• Unencrypted communications
• Hardcoded backdoor from manufacturer
• Hardcoded keys in devices
• Devices have several easily exploitable vulnerabilities
• Security incentives (regulation?) represent
the most pressing challenge for improving
the security posture of critical infrastructures
27

29. Cyberconflict
•Computer networks are an extension to the way we
interact with others
–Any conflict will have its equivalent representation in
cyberspace.
• Cybercrime (violation of domestic law)
• Cyberespionage (OK under international law; nation-
states)
•Cyberwar (cyber attacks in armed conflict)
• M. Schmitt. International Law in Cyberspace: The Koh
Speech and Tallinn Manual Juxtaposed, 2012.
28

30. The Law of War Applies in
Cyberspace
• Tallin Manual: Non-binding study on how International Law
applies to cyber conflicts. NATO’s cooperative cyber-defense
center of excellence.
• The Koh Speech: State Dept. legal advisor Harold Koh,
explaining how U.S. interprets international law to cyberspace
• jus ad bellum (right to enter a war)
• jus in bellum (acceptable wartime conduct)
• Physical effects of a cyber-operation are key
• Are they similar to kinetic effects caused by e.g. missile?
• Grey area: cyber-attacks that do not rise to the level of
armed attacks
• Challenges: proportionality, attribution, and distinction (civilian
and military objectives)
29

31. Conclusions
• Attacks to CPS are growing: Attackers have the motivations,
knowledge, resources, and persistence to launch attacks
that will damage the physical world (even humans)
• We need to be prepared to prevent, detect, mitigate,
and respond to these attacks
• Privacy issues are also a growing concern
• We need to design mechanisms to facilitate the utility of
the CPS system while minimizing privacy loses
• Policy and political aspects
• Incentives for securing CPS
• Need new international legal frameworks for cyber
conflict
30