基于分布式融合的FDI攻击信号快速检测方法  

A fast detection method of FDI attack signal based on distributed fusion

作　　者：沈家辉 翁品迪 陈博[1,2] 俞立[1,2] SHEN Jia-hui;WENG Pin-di;CHEN Bo;YU Li(College of Information Science and Engineering,Zhejiang University of Technology,Hangzhou 310023,China;Institute of Cyberspace Security,Zhejiang University of Technology,Hangzhou 310023,China)

机构地区：[1]浙江工业大学信息工程学院,杭州310023 [2]浙江工业大学网络空间安全研究院,杭州310023

出　　处：《控制与决策》2022年第12期3259-3266,共8页Control and Decision

基　　金：国家自然科学基金项目(61973277,62073292);浙江省自然科学基金项目(LR20F030004)。

摘　　要：研究带宽受限下信息物理系统中虚假数据注入(false data injection,FDI)攻击的检测问题.首先,将执行器遭受的FDI攻击信号建模为系统的未知输入信号,基于给定的H∞性能指标,设计局部残差产生器以实时逼近攻击信号.其次,为提高检测系统预警速度,在分布式融合框架下将所有经对数量化后的残差信号发送至检测中心,并设计优化目标将分布式加权融合准则的求解问题转化为线性矩阵不等式形式下的凸优化问题.与单个传感器情况下的检测方法相比,基于分布式融合方法所确定的检测阈值更加精准,从而可大幅度提高对攻击信号的预警速度.最后,通过移动目标系统的仿真验证所提方法的有效性.This paper studies the alarm response of false data injection attack in cyber-physical system under limited bandwidth constraints. Firstly, the false data injected in the actuator is modeled as unknown inputs, and the local residual generators are designed by the given H∞ performance index to generate the residual signals approaching the attack signal.Subsequently, in order to improve the alarm response, all the residual signals are quantized and then sent to the detection center under the distributed fusion framework, the optimization objective is designed and then the distributed fusion criterion are derived by solving a convex optimization problem in terms of linear matrix inequalities. Comparing with the detection method by single sensor, the detection threshold based on the distributed fusion method is more accurate, thus the alarm response is more effective and the detection time is sharply reduced. Finally, an illustrative example is used to show the effectiveness of the proposed algorithm.

关 键 词：信息物理系统 FDI攻击检测 量化 凸优化 信息融合 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]