基于数字水印的网络控制系统回放攻击检测  

Replay attack measurement of networked control system based on digital watermark

作　　者：颉新春 费敏锐[1] 杜大军[1] JIE Xin-chun;FEI Min-rui;DU Da-jun(School of Mechanical Engineering and Automation,Shanghai University,Shanghai 200444,China;School of Information and Engineering,Inner Mongolia University of Science and Technology,Baotou Inner Mongolia 014010,China)

机构地区：[1]上海大学机电工程与自动化学院,上海200444 [2]内蒙古科技大学信息工程学院,内蒙古包头014010

出　　处：《控制理论与应用》2020年第9期2047-2053,共7页Control Theory & Applications

基　　金：国家自然科学基金项目(61633016)资助。

摘　　要：随着网络技术在控制系统中的广泛应用,如何处理数据回放及数据篡改等网络攻击行为是广大科技工作者必须考虑和解决的一个问题.在构建包含控制网络和检测网络的控制系统基础上,本文给出了一种网络控制系统的数学模型,并详细阐述了其传感器节点到控制器节点的数据传输方法.考虑到控制器节点遭受回放攻击的实际情况,通过数据帧中添加时间戳和水印数据,并采用拟合优度检验等相关策略,由此提出一种新的异常行为检测方法.仿真结果表明,该方法在一定程度上能够有效并快速地检测出针对控制器的回放攻击行为,具有应用前景和推广参考价值.With the wide application of networks in control systems,the process of data replay attacks and keeping the stability of networked control systems is a problem that the researchers must consider.On the basis of establishing a control system including a control network and a measurement network,a data transmission method between sensor nodes and controller nodes is proposed.The mathematical model of the networked control system is given.Considering the presence of the replay attacks to the controller nodes,a real-time anomaly detection method is presented on the basis of adding the time stamp in the data frame.The strategy of adding digital watermarking and chi-square goodness of fit test are described in detail.The simulation results show that the detection method of goodness of fit test can detect the replay attack actions in real time.The method has certain application prospects and popularization values.

关 键 词：传感器水印 网络控制系统 拟合优度检验 网络安全 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置] TP393.08[自动化与计算机技术—控制科学与工程]