工业信息物理系统数据注入攻击的事件触发弹性控制  

Event-triggered elastic control of data injection attacks in industrial cyber physical systems

作　　者：陈峰 孙子文[1,2] CHEN Feng;SUN Zi-wen(School of Internet of Things Engineering,Jiangnan University,Wuxi Jiangsu 214122,China;Engineering Research Center of Internet of Things Technology Applications Ministry of Education,Wuxi Jiangsu 214122,China)

机构地区：[1]江南大学物联网工程学院,江苏无锡214122 [2]物联网技术应用教育部工程研究中心,江苏无锡214122

出　　处：《控制理论与应用》2020年第10期2134-2146,共13页Control Theory & Applications

基　　金：国家自然科学基金项目(61373126);中央高校基本科研业务费专项资金项目(JUSRP51510);江苏省自然科学基金项目(BK20131107)资助.

摘　　要：工业信息物理系统(ICPS)恶劣的工业环境使得无线通信网络的通信资源有限,且通信网络的脆弱性使得系统的稳定性容易受到数据注入攻击的破坏.本文基于输入到状态理论,采用H1观测器、预测器和事件触发器建立基于事件触发的ICPS模型来降低通信资源的使用率,并构造基于改进卡尔曼滤波器的攻击补偿模块进行攻击补偿,攻击补偿模块的参数随着攻击者攻击策略不同而进行改变,实现对数据注入攻击的弹性控制.用MATLAB软件进行仿真实验,以倒立摆作为被控对象,模拟基于事件触发的ICPS模型受到数据注入攻击时系统的稳定性能.仿真结果表明,事件触发控制策略和基于改进卡尔曼滤波器的攻击补偿模块的组合不仅能够保证系统期望的稳定性,还能有效减少数据通过无线网络传输的次数.The harsh industrial environment of industrial cyber physical systems makes the communication resources of the wireless communication network limited and the fragility of the communication network makes the stability of the system vulnerable to data injection attacks.Based on input-to-state stability theory,this paper uses H1 observer,predictor and event trigger to establish an event-triggered ICPS model to reduce the cost of communication resources.Besides,an attack compensation module based on an improved Kalman filter which reduces the impact of data injection attacks on the stability of ICPS is constructed for attack compensation.The parameters of the attack compensation module are changed with different attack strategies of adversary to achieve elastic control of data injection attacks.The simulation experiments are conducted by using MATLAB tool with the inverted pendulum as the controlled object to simulate the stability of the event-triggered ICPS model under the data injection attack.Simulation results show that the combination of event-triggered control strategy and improved Kalman filter attack compensation module can not only ensure the desired stability of system,but also effectively reduce the number of times data is transmitted through the wireless network.

关 键 词：工业信息物理系统 事件触发 卡尔曼滤波器 输入到状态稳定 数据注入攻击 

分 类 号：TN915.08[电子电信—通信与信息系统] TP13[电子电信—信息与通信工程]