A Two-Pronged Approach to Security of Discrete-Event Systems  

作　　者：MATSUI Shoma RUDIE Karen CAI Kai 

机构地区：[1]Department of Electrical and Computer Engineering&the Ingenuity Labs Research Institute,Queen's University,Kingston K7L 3N6,Canada [2]Department of Core Informatics,Osaka Metropolitan University,Osaka 545-0051,Japan

出　　处：《Journal of Systems Science & Complexity》2025年第1期178-209,共32页系统科学与复杂性学报(英文版)

基　　金：funded by the Natural Sciences and Engineering Research Council of Canada(NSERC)Discovery Grant;JSPS KAKENHI under Grant Nos.21H04875 and 22KK0155.

摘　　要：This paper investigates a security problem of simultaneously addressing two types of attacks:Eavesdropping and infiltration.The authors model the target system as a discrete-event system(DES)with subsets of concealable events and protectable events,in order to make the proposed methodology applicable to various practical systems and employ two existing works of DES security:Degree of opacity and state protection.Specifically,the authors consider that all protectable events are observable,and some observable events are concealable.In addition,protectable events cannot be protected once they are concealed.Given such a constraint,the goal is to figure out which events to conceal and which transitions to protect so that the prescribed requirements of degree of opacity and state protection are satisfied.In this work the authors decide which events to conceal as all transitions of a given event label are concealed or not concealed.The proposed problem formulation also requires a solution to only involve absolutely necessary protectable events in order for the system to avoid superfluous protection costs.The authors first examine a general version of our security problem with an intuitive algorithm to compute acceptable solutions,and then present a special version which results in a reduced computation time compared to the general version.

关 键 词：Degree of opacity discrete-event systems SECURITY state protection 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]