A systematic security analysis of real-time cyber-physical systems

Easwaran, Arvind; Chattopadhyay, Anupam; Bhasin, Shivam

doi:10.1109/aspdac.2017.7858321

Cited by 9 publications

(4 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There has been some work on security integration in RTS [30], [31], [32], [33], [34], [35]. Most of the work focused on defence techniques against general attacks.…”

Section: Related Workmentioning

confidence: 99%

On Scheduler Side-Channels in Dynamic-Priority Real-Time Systems

Chen,

Mohan,

Pellizzoni

et al. 2020

Preprint

View full text Add to dashboard Cite

While the existence of scheduler side-channels has been demonstrated recently for fixed-priority real-time systems (RTS), there have been no similar explorations for dynamicpriority systems. The dynamic nature of such scheduling algorithms, e.g., EDF, poses a significant challenge in this regard. In this paper we demonstrate that side-channels exist in dynamic priority real-time systems. Using this side-channel, our proposed DyPS algorithm is able to effectively infer, with high precision, critical task information from the vantage point of an unprivileged (user space) task. Apart from demonstrating the effectiveness of DyPS, we also explore the various factors that impact such attack algorithms using a large number of synthetic task sets. We also compare against the state-of-the-art and demonstrate that our proposed DyPS algorithms outperform the ScheduLeak algorithms in attacking the EDF RTS.

show abstract

“…There has been some work on security integration in RTS [30], [31], [32], [33], [34], [35]. Most of the work focused on defence techniques against general attacks.…”

Section: Related Workmentioning

confidence: 99%

On Scheduler Side-Channels in Dynamic-Priority Real-Time Systems

Chen,

Mohan,

Pellizzoni

et al. 2020

Preprint

View full text Add to dashboard Cite

show abstract

“…References Approaches CPS Abad et al 31 System-level simplex extended technique Mohan et al 32 S3A Easwaran et al 33 Security analysis structure Automotive systems Lin et al 34,35 Security-aware design technique Kiran et al 36 Integrated MILP formulation Apvrille and Roudier 37 SysML-Sec Clusters Xie et al 38 Security overhead model Xie and Qin 39 TAPADS Tripathi et al 40 Schedule algorithm…”

Section: Classi¯cationmentioning

confidence: 99%

“…Real-time CPSs attacks may only a®ect the timing behavior, which results in the missing deadlines of the system hardware/software components without e®ecting functionality, and then leads to serious consequences. To solve this challenging problem, Easwaran et al 33 proposed a new security analysis structure by utilizing ASD, which is displayed by¯nding new attack possibilities and mapping the existing attack to link the intermediate components, an attack's ultimate performances and sources, to describe the attack surface in real-time CPS clearly. ASD stands for standard sequence diagram which captures and illustrates the deadline attacks, and it consists of a set of objects which can communicate with each other by message.…”

Section: Cpssmentioning

confidence: 99%

“…Recently, the researchers concentrate on developing security-aware energy-e±cient task scheduling mechanisms [20][21][22][23][24][25][26][27][28][29][30] that cannot only promote the system safety performance but also improve the system energy e±ciency. The third category to realize a secure system is investigating the safety issues in speci¯c applications such as cyber-physical systems (CPSs), [31][32][33] automotive systems, [34][35][36][37] clusters, [38][39][40] grids, [41][42][43] etc. Contribution and organization: A large amount of state-of-art approaches designed for security-aware RTES are summarized in this paper.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

A Short Review of Security-Aware Techniques in Real-Time Embedded Systems

Chai

Zhang

Zhou

et al. 2018

J CIRCUIT SYST COMP

View full text Add to dashboard Cite

With the rapid development of embedded systems, users and services have been greatly facilitated while also experiencing security threats as a result of cyber-attacks and system vulnerabilities. Currently, the real-time embedded system (RTES) focus is to deal with these security issues. In this paper, we introduce a short review of security-aware techniques for RTES. We mainly discuss two common approaches to improve the security of RTESs. The first approach is achieved by exploring specific attacks. The second approach is realized by deploying security-guaranteed services. However, improving the security of embedded systems may cause excessive energy consumption at the same time. Therefore, we investigate the secure and energy-aware RTESs on a wide range of research. In addition, we study a number of common applications used in secure RETSs. This paper stands for providing awareness and better understanding of the current RTES research status as well as technical theory behind it. Hence, the RTES security issues are resolved.

show abstract