基于多信道博弈的ICPS虚假注入攻击防御策略  

ICPS false injection attack defense strategy based on multi-channel game

作　　者：孙子文[1,2] 洪涛 SUN Zi-wen;HONG Tao(School of Internet of Things Engineering,Jiangnan University,Wuxi 214122,China;Engineering Research Center of Internet of Things Technology Applications of Ministry of Education,Wuxi 214122,China)

机构地区：[1]江南大学物联网工程学院,江苏无锡214122 [2]物联网技术应用教育部工程研究中心,江苏无锡214122

出　　处：《控制与决策》2022年第5期1357-1366,共10页Control and Decision

基　　金：中央高校基本科研业务费专项资金项目(JUSRP51510);江苏省自然科学基金项目(BK20131107)。

摘　　要：工业信息物理系统(ICPS)与基础设施的连接越来越密切,同时通信网络也易受到环境干扰和虚假数据注入攻击的影响.鉴于此,研究基于多信道传输框架和minimax控制器,提高ICPS在攻击、环境和噪声干扰下的弹性.通过设计minimax控制器以增强ICPS在噪音和干扰下的弹性,基于多信道传输框架建立发射机与攻击者之间的攻防博弈模型,通过多信道上的攻防博弈策略实现整个ICPS的弹性防御策略.通过OPNET和Matlab的联调仿真,验证模拟数据注入攻击下基于多信道传输框架的ICPS控制系统的性能.仿真结果表明,minimax控制器和多信道传输框架组成的弹性防御策略,能够同时提升系统在环境干扰下的稳定性并有效降低数据注入攻击对ICPS的影响.The industrial cyber-physical system(ICPS)is increasingly connected to the infrastructure,meanwhile its communication network is vulnerable to environmental interference and false data injection attacks.Therefore,this paper studies a multi-channel transmission framework and a minimax controller to improve the elasticity of the ICPS under attack,environment interference and noise interference.The minimax controller is designed to enhance the elasticity of the ICPS under noise and interference.Furthermore,based on the multi-channel transmission framework,an attackdefense game model between the transmitter and the attacker is established,which uses the attack-defense game strategy to realize the elastic defense strategy of the whole ICPS.Through the joint debugging simulation of OPNET and Matlab,the performance of the ICPS control system based on the multi-channel transmission framework under data injection attacks is simulated.The simulation results show that the elastic defense strategy composed of the minimax controller and the multi-channel transmission framework can not only improve the stability of the system under environmental interference,but also reduce the impact of data injection attacks on the ICPS effectively.

关 键 词：工业信息物理系统 数据注入攻击 零和博弈 多信道传输 minimax控制器 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]