网络攻击下的信息物理系统安全状态估计研究综述  

A survey on secure state estimation of cyber-physical systems under cyber attacks

作　　者：杨光红[1,2] 芦安洋 安立伟 YANG Guang-Hong;LU An-yang;AN Li-wei(College of Information Science and Engineering,Northeastern University,Shenyang 110819,China;State Key Laboratory of Synthetical Automation of Process Industries,Northeastern University,Shenyang 110819,China)

机构地区：[1]东北大学信息科学与工程学院,沈阳110819 [2]东北大学流程工业综合自动化国家重点实验室,沈阳110819

出　　处：《控制与决策》2023年第8期2093-2105,共13页Control and Decision

基　　金：国家自然科学基金项目(61621004,62103091).

摘　　要：近年来,信息物理系统在工业界的广泛应用引起了人们对系统安全问题的极大关注.信息物理系统对通信网络的深度依赖,使得网络攻击成为其中最为严峻的威胁之一,特别是那些能够干扰系统状态认知的攻击,因此,安全状态估计(即在遭受攻击时正确估计系统状态)已成为各界广泛关注的安全问题之一.此文旨在总结网络攻击下信息物理系统安全状态估计研究的进展.首先,介绍典型的网络攻击,并详细阐述在稀疏攻击下的安全状态估计问题.其次,探讨集中式安全状态估计和分布式安全状态估计的研究现状.在考虑稀疏攻击下安全状态估计问题的难点时,关键在于如何快速找到受到攻击的信道集合(这可能涉及到高计算复杂度).因此,将安全状态估计方法分为遍历搜索和非遍历搜索两大类,并对现有方法的优缺点进行归纳总结和详细阐述.然后,介绍稀疏攻击下信息物理系统安全状态能观性分析的研究现状.现有的研究结果表明:增加检测机制或先验知识可以缓解在稀疏攻击下安全状态估计所需的基础冗余度要求;同时,通过区分攻击和故障,也能有效降低传感器冗余度要求.最后,对信息物理系统安全状态估计仍然存在的问题进行展望,并提出一些可能的解决方向.In recent years,the widespread application of cyber-physical systems(CPS)in the industrial sphere has elicited substantial attention towards system security issues.Given the deep reliance of CPS on communication networks,cyber-attacks have emerged as one of the most severe threats,particularly those capable of disrupting system state awareness.Thus,secure state estimation—accurately gauging the system state under attack—has become a security concern of widespread interest.This paper aims to summarize the advances in secure state estimation research under cyber-attacks for CPS.Initially,we introduce typical cyber-attacks and elaborate on the secure state estimation problem under sparse attacks.Subsequently,the state of research on centralized and distributed secure state estimation is explored.When considering the difficulty of secure state estimation under sparse attacks,the crux lies in swiftly identifying the set of channels under attack—a process potentially involving high computational complexity.Therefore,we categorize secure state estimation methods into exhaustive and non-exhaustive search types,summarizing and elaborating on the strengths and weaknesses of current methods.Further,we present the status of research on observability analysis for CPS’s secure state under sparse attacks.Existing studies suggest that increasing detection mechanisms or prior knowledge can alleviate the baseline redundancy requirement for secure state estimation under sparse attacks.Meanwhile,distinguishing between attacks and failures can effectively reduce sensor redundancy requirements.Finally,the paper anticipates ongoing challenges in secure state estimation for CPS and proposes potential directions for resolution.

关 键 词：信息物理系统 网络攻击 安全状态估计 分布式安全状态估计 安全状态能观性 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]