基于“平滑水印”的隐蔽性重放攻击检测技术  

A detection technology for the concealment replay attack based on the‘smooth watermark’

作　　者：史立明 刘斌 胡勇[3] SHI Liming;LIU Bin;HU Yong(Eneering Research Center of Metallurgical Automation and Testing Technology,Ministry of Education,Wuhan University of Science and Technology,Wuhan 430081;Hubei Key Laboratory of Metallurgical Process System Science,Wuhan 430081;Beijing Control Engineering Research Institute,Beijing 100190)

机构地区：[1]武汉科技大学冶金自动化与检测技术教育部工程研究中心,武汉430081 [2]湖北省冶金过程系统科学重点实验室,武汉430081 [3]北京控制工程研究所,北京100190

出　　处：《高技术通讯》2022年第6期607-614,共8页Chinese High Technology Letters

基　　金：国家自然科学基金(61333008)资助项目。

摘　　要：重放攻击在稳定的信息物理系统中对卡方检测器具有隐蔽性。以损失一定的控制性能为代价,向最优控制量中添加水印信号,可以有效应对该问题。水印信号通常是一组独立同分布的高斯噪声序列。然而,很多实际的工业被控对象是慢过程,其自身的大惯性会极大削弱水印信号的效果。针对上述问题,本文提出了一种水印信号改进方法,该方法的核心思想是使用采样和插值算法对水印信号进行“平滑化”处理。平滑之后的水印信号呈现出“低频性”,在慢过程中依然有明显响应,从而使卡方检测器有效识别重放攻击。本文使用单容水箱液位控制系统进行仿真实验,实验结果表明,在适当的平滑周期下,“平滑水印”可以在降低控制性能损失的同时,有效提升攻击检测效果。Replay attacks are hidden fromχ^(2) detectors in stable cyber-physical systems.At the cost of losing certain control performance,adding watermark signal to the optimal control quantity can effectively deal with this problem.The watermark signal is usually a set of independent identical distributed Gaussian noise sequences.However,many actual industrial controlled objects are slow processes,whose large inertia will greatly weaken the effect of watermark signal.Aiming at the above problem,this paper proposes an improvement method for watermark signal.The core idea of this method is to use sampling and interpolation algorithm to smooth the watermark signal.The smoothed watermark signal shows‘low frequency’and still responds obviously in the slow process,so that theχ^(2) detector acts.In this paper,the liquid level control system of a single tank is used for simulation experiments.The experimental results show that the‘smooth watermarking’can reduce the loss of control performance and effectively improve the attack detection effect under the appropriate smoothing period.

关 键 词：重放攻击 隐蔽性 慢过程 大惯性 平滑水印 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]