DoS攻击下CPS双重安全控制与通讯的协同设计  

Co-design of CPS dual security control and communication under DoS attack

作　　者：李炜[1,2,3] 魏凯锋 李亚洁[1] 史娅红 LI Wei;WEI Kai-feng;LI Ya-jie;SHI Ya-hong(College of Electrical and Information Engineering, Lanzhou Univ. of Tech., Lanzhou 730050, China;Key Laboratory of Gansu Advanced Control for Industrial Processes, Lanzhou Univ. of Tech., Lanzhou 730050, China;National Demonstration Center for Experimental Electrical and Control Engineering Education, Lanzhou Univ. of Tech., Lanzhou 730050, China)

机构地区：[1]兰州理工大学电气工程与信息工程学院,甘肃兰州730050 [2]兰州理工大学甘肃省工业过程先进控制重点实验室,甘肃兰州730050 [3]兰州理工大学电气与控制工程国家级实验教学示范中心,甘肃兰州730050

出　　处：《兰州理工大学学报》2020年第6期85-97,共13页Journal of Lanzhou University of Technology

基　　金：国家自然科学基金(61364011)。

摘　　要：针对一类具有执行器故障与DoS攻击的CPS,基于边缘计算理念,并结合事件触发通讯机制,研究了CPS双重安全控制与通讯的协同设计问题.首先,基于边缘计算的资源分配,提出DETCS下的CPS双重安全控制架构,并把有限能量的DoS攻击转化为一种特殊的时延,在DETCS下建立了具有故障与攻击的闭环CPS模型;其次,借助时滞系统理论,通过构造适当的Lyapunov-Krasovskii泛函,利用仿射Bessel-Legendre等不等式,分别给出了DoS攻击下状态与故障估计鲁棒观测器、执行器故障和DoS攻击双重安全控制与通讯协同设计的方法;最后,通过对四容水箱系统的仿真验证了文中理论结果的有效性与可行性.In view of a class of CPS with actuator failure and DoS attacks,this paper studies the cooperative design of CPS dual security control and communication on the basis of concept of edge computation combined with event-triggered communication mechanism.Firstly,based on the resource allocation of edge computing,the CPS dual security control architecture under the discrete event trigger mechanism is proposed,meanwhile transforming the finite energy DoS attack into a special delay,and the closed-loop CPS model under fault and attack is established under the scheme of discrete event triggering.Secondly,the appropriate Lyapunov-Krasovskii functional with the aid of the time-delay system theory and using affine Bessel-Legendre and other inequalities are both constructed.The robust observer of state and fault estimation under DoS attack and the dual security control and communication collaborative design method under DoS attack are presented respectively.Finally,the effectiveness and feasibility of present theoretical results in this paper are verified by the simulation of four-tank water tank system.

关 键 词：双重安全控制 离散事件触发通讯机制 DOS攻击 边缘计算 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]