拒绝服务攻击下信息物理系统的混合通信策略  

Hybrid Communication Strategy of Cyber-physical System Under Denial-of-service Attack

作　　者：施雁 王志文[1,2,3] SHI Yan;WANG Zhiwen(College of Electrical and Information Engineering,Lanzhou University of Technology,Lanzhou 730050;Key Laboratory of Gansu Advanced Control for Industrial Processes,Lanzhou University of Technology,Lanzhou 730050;National Demonstration Center for Experimental Electrical and Control Engineering Education,Lanzhou University of Technology,Lanzhou 730050)

机构地区：[1]兰州理工大学电气工程与信息工程学院,兰州730050 [2]甘肃省工业过程先进控制重点实验室,兰州730050 [3]兰州理工大学电气与控制工程国家级实验教学示范中心,兰州730050

出　　处：《计算机与数字工程》2020年第11期2589-2594,共6页Computer & Digital Engineering

基　　金：国家自然科学基金项目“拒绝服务攻击下网络化多率采样系统的触发策略与安全控制研究”(编号:61863026);“基于混合触发机制的网络化多率采样系统拒绝服务攻击的防御与控制”(编号:61751315);“具有介质访问约束的网络化系统控制与通信调度研究”(编号:61563031)资助。

摘　　要：论文针对拒绝服务(Denial-of-Service,DoS)攻击下信息物理系统(Cyber-Physical System,CPS)的安全问题,提出了一种主动通信策略。首先,基于各子系统带宽需求的独特性以及离散事件触发策略减少网络通信的优势,提出了基于动态带宽分配的离散触发通讯策略。其次,不同于现有研究从控制系统的角度对抗DoS攻击的方法,论文通过所提出的混合通信策略主动适应各子系统带宽需求的变化,从带宽动态分配的角度实现DoS攻击的对抗。最后,通过仿真实例验证了该方法的有效性。In this paper,a proactive communication scheme for the security of the Cyber-Physical System(CPS)under the Denial-of-Service(DoS)attack is proposed.Firstly,considering the uniqueness of the demand of each subsystem's bandwidth and the discrete event-triggered strategy with the advantage of reducing network communication,a discrete event-triggered communica⁃tion strategy based on dynamic bandwidth allocation is proposed.Secondly,different from the existing studies on security of CPS from the perspective of the control system,this paper actively adapts to the changes in bandwidth requirements of each subsystem caused by DoS attack,and realizes the confrontation of DoS attacks from the perspective of bandwidth dynamic allocation.At last,a simulation example is given to demonstrate the effectiveness of the proposed hybrid communication strategy.

关 键 词：信息物理系统 拒绝服务攻击 动态带宽分配 离散事件触发策略 

分 类 号：TN91[电子电信—通信与信息系统]