动态水印攻击检测方法的鲁棒性研究  

Robustness of Dynamic-Watermarking Attack-detection Method

作　　者：杜大军[1,2] 张竞帆 张长达 费敏锐 YANG Tai-Cheng[3] DU Da-Jun;ZHANG Jing-Fan;ZHANG Chang-Da;FEI Min-Rui;YANG Tai-Cheng(School of Mechatronics Engineering and Automation,Shanghai University,Shanghai 200072,China;Shanghai Key Laboratory of Power Station Automation Technology,Shanghai 200072,China;Department of Engineering,University of Sussex,Brighton BN19QT,UK)

机构地区：[1]上海大学机电工程与自动化学院,上海200072 [2]上海市电站自动化技术重点实验室,上海200072 [3]萨赛克斯大学工程系,英国布莱顿BN19QT

出　　处：《自动化学报》2023年第12期2557-2568,共12页Acta Automatica Sinica

基　　金：国家自然科学基金(61773253,61803252,61633016,61833011);111引智基地项目(D18003);上海市科委项目(20JC1414000,19500712300,19510750300)资助。

摘　　要：针对传统动态水印(Dynamic-watermarking,DWM)检测方法无法适用模型不确定系统的攻击检测问题,首先分析模型不确定项导致的传统动态水印检测失效原因,然后考虑模型不确定项和过程噪声的统计规律,将其影响转化为对方差变化特性进行分析,提出两个具有鲁棒性的攻击检测式以及检测式中关键时变方差阈值的确定方法;其次采用系统失真信号功率定量刻画攻击信号造成系统性能损失程度,理论证明了系统失真信号功率上界;在此基础上考虑最坏情况下攻击能够躲过检测,基于水印信号与其他混合信号相互独立性新增第三检测式,同时理论证明了系统失真信号功率上界进一步受限范围,进而提升不确定系统的安全性;最后仿真算例验证了所提方法的有效性和可行性.The traditional dynamic-watermarking(DWM)cyber-attack detection cannot directly apply to uncertain systems.In this paper,we first analyze this failure due to model uncertainty.Secondly,based on the statistics of model uncertainty and process noise,we derive two robust attack-detection formulas,and the method of determining the critical time-varying-variance threshold in the formulas.Then,the system performance loss caused by the attack signal,and the upper limit of the distortion signal power are quantified.Furthermore,in the worst case,to avoid that an attack can pass-through the above two-formula detection,the third detection formula is derived.In addition,the upper limit of the distorted signal power of the system is also derived.This is based on the mutual independence of the watermark signal and other mixed signals.Thus,the three-formula detection strengthens the security of the system with model uncertainty.Finally,we use a simulation example to demonstrate our theoretical results.

关 键 词：动态水印 模型不确定 失真信号功率 攻击检测 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]