Abstract
Cyber-Physical Systems (CPS) are heterogeneous in nature and are composed of numerous components and embedded subsystems that are interacting with each other and with the physical world. The interaction of hardware and software components at each level, expose them to attack surfaces, which need novel methods to secure against. To ensure safety and security of high integrity CPSs, we present a multilevel runtime monitor approach where there are monitors at each level of processing and integration. In the proposed multi-level monitoring framework, some monitoring properties are formally defined using Event Calculus. We then demonstrate the need for multilevel monitors for faster detection and isolation of attacks by performing data attack and fault injection on a Simulink CPS model.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Cyber physical systems and Internet of Things program. NIST, 09 March 2016. https://www.nist.gov/programs-projects/cyber-physical-systems-and-internet-things-program. Accessed 18 May 2020
Combemale, B., Wimmer, M.: Towards a model-based DevOps for cyber-physical systems. In: Bruel, J.-M., Mazzara, M., Meyer, B. (eds.) DEVOPS 2019. LNCS, vol. 12055, pp. 84–94. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-39306-9_6
Kane, A.: Runtime monitoring for safety-critical embedded systems. Carnegie Mellon University (2015)
Gautham, S., Bakirtzis, G., Leccadito, M.T., Klenke, R.H., Elks, C.R.: A multilevel cybersecurity and safety monitor for embedded cyber-physical systems: WIP abstract. In: Proceedings of the 10th ACM/IEEE International Conference on Cyber-Physical Systems, New York, NY, USA, pp. 320–321 (2019). https://doi.org/10.1145/3302509.3313321
Pellizzoni, R., Meredith, P., Caccamo, M., Rosu, G.: BusMOP: a runtime monitoring framework for PCI peripherals, p. 23 (2008)
Convent, L., Hungerecker, S., Scheffel, T., Schmitz, M., Thoma, D., Weiss, A.: Hardware-based runtime verification with embedded tracing units and stream processing. In: Colombo, C., Leucker, M. (eds.) RV 2018. LNCS, vol. 11237, pp. 43–63. Springer, Cham (2018). https://doi.org/10.1007/978-3-030-03769-7_5
Lu, T., Lin, J., Zhao, L., Li, Y., Peng, Y.: A security architecture in cyber-physical systems: security theories, analysis, simulation and application fields. IJSIA 9(7), 1–16 (2015). https://doi.org/10.14257/ijsia.2015.9.7.01
Goodloe, A.E., Pike, L.: Monitoring distributed real-time systems: a survey and future directions, (NASA/CR-2010-216724), p. 49, July 2010
Whalen, M.W., Murugesan, A., Rayadurgam, S., Heimdahl, M.P.E.: Structuring simulink models for verification and reuse. In: Proceedings of the 6th International Workshop on Modeling in Software Engineering - MiSE 2014, Hyderabad, India, pp. 19–24 (2014). https://doi.org/10.1145/2593770.2593776
Lee, E.A., Seshia, S.A.: Introduction to Embedded Systems: A Cyber-Physical Systems Approach, 2nd edn. MIT Press, Cambridge (2017)
Fournaris, A.P., Komninos, A., Lalos, A.S., Kalogeras, A.P., Koulamas, C., Serpanos, D.: Design and run-time aspects of secure cyber-physical systems. In: Biffl, S., Eckhart, M., Lüder, A., Weippl, E. (eds.) Security and Quality in Cyber-Physical Systems Engineering, pp. 357–382. Springer, Cham (2019). https://doi.org/10.1007/978-3-030-25312-7_13
Effects of communication delays on an ABS control system - MATLAB & Simulink. https://www.mathworks.com/help/simevents/examples/effects-of-communication-delays-on-an-abs-control-system.html. Accessed 18 May 2020
Shanahan, M.: The event calculus explained. In: Wooldridge, M.J., Veloso, M. (eds.) Artificial Intelligence Today. LNCS (LNAI), vol. 1600, pp. 409–430. Springer, Heidelberg (1999). https://doi.org/10.1007/3-540-48317-9_17
Potluri, S., Diedrich, C., Roy Nanduru, S.R., Vasamshetty, K.: Development of injection attacks toolbox in MATLAB/Simulink for attacks simulation in industrial control system applications. In: 2019 IEEE 17th International Conference on Industrial Informatics (INDIN), July 2019, vol. 1, pp. 1192–1198 (2019). https://doi.org/10.1109/indin41052.2019.8972171
Jayakumar, A.V.: Systematic model-based design assurance and property-based fault injection for safety critical digital systems. Theses and Dissertations, January 2020. https://scholarscompass.vcu.edu/etd/6239
Lokman, S.-F., Othman, A.T., Abu-Bakar, M.-H.: Intrusion detection system for automotive Controller Area Network (CAN) bus system: a review. EURASIP J. Wirel. Commun. Network. 2019(1), 1–17 (2019). https://doi.org/10.1186/s13638-019-1484-3
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2020 Springer Nature Switzerland AG
About this paper
Cite this paper
Gautham, S., Jayakumar, A.V., Elks, C. (2020). Multilevel Runtime Security and Safety Monitoring for Cyber Physical Systems Using Model-Based Engineering. In: Casimiro, A., Ortmeier, F., Schoitsch, E., Bitsch, F., Ferreira, P. (eds) Computer Safety, Reliability, and Security. SAFECOMP 2020 Workshops. SAFECOMP 2020. Lecture Notes in Computer Science(), vol 12235. Springer, Cham. https://doi.org/10.1007/978-3-030-55583-2_14
Download citation
DOI: https://doi.org/10.1007/978-3-030-55583-2_14
Published:
Publisher Name: Springer, Cham
Print ISBN: 978-3-030-55582-5
Online ISBN: 978-3-030-55583-2
eBook Packages: Computer ScienceComputer Science (R0)