Singapore Academic Cybersecurity R&D

Harnessing R&D to Secure our Nation

NRF2014NCR-NCR001-040

ASPIRE: Design of Secure Cyber Physical Systems

I. Goal

Conduct fundamental scientific research to improve the security of Cyber Physical Systems (CPS) that offer key services such as water and power.

Motivation

Our focus is on the field of emerging unified industrial networks for CPS. Fully connected networks promise to enable applications such as robust distributed controls. Unfortunately, the inevitable trend towards an industrial internet-of-things also introduces novel threats to security and reliability. To understand these novel threats, expert knowledge in the area of communication systems, systems control, and the specific physical processes is required.

Tasks

ASPIRE_tasks.png

II. Technologies

1. Attacker Models

  • New CPS-centric models developed
  • Existing attacker models adapted to CPS

ASPIRE_fig1.png

2. Process-based Models

Validation of EpanetWADI (the process-based model developed)

ASPIRE_fig2.png

3. CPS Response to Attacks

Extensive experimentation on SWaT

ASPIRE_fig3.png

4. Attack Detection Approaches

  • Physics-based
  • Hardware-based Attestation
  • Integrated (Fig 4a)
  • Orthogonal Defence (ARGUS) (Fig 4b)
  • Time to Being Unsafe
  • (Hybrid) Simulation
  • Mini-CPS Simulation Testbed
  • Attack Launcher

ASPIRE_fig4a.png ASPIRE_fig4b.png

5. Cost models to implement security solutions in CPS

ASPIRE_fig5.png