Abstraction-Based Control Under Quantized Observation With Approximate Opacity Using Symbolic Control Barrier Functions

Mizoguchi, Masashi; Ushio, Toshimitsu

doi:10.1109/lcsys.2021.3135082

Cited by 6 publications

(5 citation statements)

References 29 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Based on these notions, one can synthesize opacity-enforcing controllers directly by applying existing synthesis algorithms to the finite abstractions that opacity-preserving alternatively simulate the concrete systems. In [129], the authors propose a two-stage approach for enforcing opacity for CPS. First, a controller ensuring the LTL mission requirement is synthesized based on the standard alternating simulation relations without considering opacity.…”

Section: 2mentioning

confidence: 99%

Secure-by-Construction Synthesis of Cyber-Physical Systems

Liu¹,

Trivedi²,

Yin³

2022

Preprint

View full text Add to dashboard Cite

Correct-by-construction synthesis is a cornerstone of the confluence of formal methods and control theory towards designing safety-critical systems. Instead of following the time-tested, albeit laborious (re)design-verify-validate loop, correct-by-construction methodology advocates the use of continual refinements of formal requirements-connected by chains of formal proofs-to build a system that assures the correctness by design. A remarkable progress has been made in scaling the scope of applicability of correct-byconstruction synthesis-with a focus on cyber-physical systems that tie discrete-event control with continuous environment-to enlarge control systems by combining symbolic approaches with principled state-space reduction techniques. Unfortunately, in the security-critical control systems, the security properties are verified ex post facto the design process in a way that undermines the correct-by-construction paradigm. We posit that, to truly realize the dream of correct-by-construction synthesis for security-critical systems, security considerations must take center-stage with the safety considerations. Moreover, catalyzed by the recent progress on the opacity sub-classes of security properties and the notion of hyperproperties capable of combining security with safety properties, we believe that the time is ripe for the research community to holistically target the challenge of secure-by-construction synthesis. This paper details our vision by highlighting the recent progress and open challenges that may serve as bricks for providing a solid foundation for secure-by-construction synthesis of cyber-physical systems.The revolution in miniaturized communication devices in the beginning of this millennium contributed towards a revolution in the internet-of-things (IoT) and the networked systems woven around them: the cyber-physical systems (CPS). CPS are marked by a close-knit interaction of discrete computation and continuous control over a network and are playing critical roles in virtually every aspect of our modern experience ranging from consumer electronics to implantable medical devices, from smart cars to smart hospitals, and from controlling our power systems to safeguarding our nuclear rectors. These systems are clearly safety-critical as a bug in their design could be life threatening, but given their societal implications, they are also security-critical where a bug in their design may have the potential to jeopardize the privacy, trust, and economic interests of society built around them." We believe that the security considerations should be elevated as primary design drivers along with safety ones to tackle the design challenge of modern CPS and call for a need to expand the correct-byconstruction paradigm of designing safety-critical systems to encompass security: we call this paradigm secure-by-construction. This paper synthesizes ideas from three research communities: discrete event systems (DES), control systems (CS), and formal methods (FM) to pose and study central problems supporting...

show abstract

Section: 2mentioning

confidence: 99%

Secure-by-Construction Synthesis of Cyber-Physical Systems

Liu¹,

Trivedi²,

Yin³

2022

Preprint

View full text Add to dashboard Cite

show abstract

“…A security property is not a property of individual state sequences but a hyperproperty that is a set of the subsets of sequences. For example, opacity is a useful notion in the analysis of cryptographic protocols [36], and it is applied to multiple classes of systems such as discrete event systems [37], [38], [39] and cyber-physical systems [40], [41], [42]. Intuitively, opacity is defined such that, for each state sequence with a secret, there exists a different sequence without a secret whose leaked information is the same as that of the secret sequence.…”

Section: Introductionmentioning

confidence: 99%

Finite-Horizon Shield for Path Planning Ensuring Safety/Co-Safety Specifications and Security Policies

Kanashima

Ushio

2023

IEEE Access

Self Cite

View full text Add to dashboard Cite

With the development of network technology, security in path planning problems has attracted widespread attention. We consider a path planning problem in which a planner computes a finite path that satisfies a specification. We assume that the specification includes mandatory safety/co-safety specifications. Moreover, we consider a security policy for this path. However, we assume that the information leaked to an intruder is not known beforehand. Then, we propose an enforcement mechanism referred to as a finitehorizon shield. This mechanism modifies the path computed by the planner as small as possible to satisfy the safety/co-safety specifications and security policy under the leaked information. We assume that the safety/co-safety specifications are described by LTL f formulas and the security policy by a hyperLTL f formula. Subsequently, we convert the formulas into quantified formulas and compute the modified path using a satisfiability modulo theories solver. As an example, we consider an opacity problem where there is another path whose leaked information is the same as that of the modified path. By simulations, it confirms that the output of shield depends on the leaked information and the modified path may have additional movements to ensure opacity. We also compare the computation time of the shield with that of a security-aware planning by simulation.

show abstract

“…Related work. Over the past years, there has been a growing interest in analyzing opacity for continuous-space control systems [2,[31][32][33][34][35][36][37][38]. Concretely, [33] extended the concept of opacity in discrete-event systems (DES) to continuous-space cyber-physical systems (CPS) by introducing the notion of approximate opacity for metric systems, which takes into account the imprecision of external observations.…”

Section: Introductionmentioning

confidence: 99%

“…Subsequently, various methods were developed to verify whether a given control system is approximately opaque [33][34][35]39]. However, only a few recent results [32,38,40,41] address the problem of controller synthesis for opacity properties over CPS. Among these works, [40] proposed an abstraction-based controller synthesis approach for CPS with finite state sets, leveraging opacity-preserving alternating simulation relations between the original systems and their abstractions.…”

Section: Introductionmentioning

confidence: 99%

“…It is important to note that all the aforementioned results focus on verification or controller synthesis with respect to opacity, without taking safety considerations into account. More recently, [38] proposed a two-stage controller synthesis scheme to enforce safety and approximate opacity in control systems with finite output sets. Specifically, they first synthesized an abstraction-based safety controller without considering opacity properties.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Synthesizing Safety Controllers for Uncertain Linear Systems: A Direct Data-driven Approach

Zhong

Caccamo

2022

2022 IEEE Conference on Control Technology and Applications (CCTA)

View full text Add to dashboard Cite

In this paper, we present the synthesis of secure-by-construction controllers that address safety and security properties simultaneously in cyber-physical systems. Our focus is on studying a specific security property called opacity, which characterizes the system's ability to maintain plausible deniability of its secret behavior in the presence of an intruder. These controllers are synthesized based on a concept of so-called (augmented) control barrier functions, which we introduce and discuss in detail. We propose conditions that facilitate the construction of the desired (augmented) control barrier functions and their corresponding secure-by-construction controllers. To compute these functions, we propose an iterative scheme that leverages iterative sum-of-square programming techniques. This approach enables efficient computation of these functions, particularly for polynomial systems. Moreover, we demonstrate the flexibility of our approach by incorporating user-defined cost functions into the construction of secure-by-construction controllers. Finally, we validate the effectiveness of our results through two case studies, illustrating the practical applicability and benefits of our proposed approach.

show abstract

Abstraction-Based Control Under Quantized Observation With Approximate Opacity Using Symbolic Control Barrier Functions

Cited by 6 publications

References 29 publications

Secure-by-Construction Synthesis of Cyber-Physical Systems

Secure-by-Construction Synthesis of Cyber-Physical Systems

Finite-Horizon Shield for Path Planning Ensuring Safety/Co-Safety Specifications and Security Policies

Synthesizing Safety Controllers for Uncertain Linear Systems: A Direct Data-driven Approach

Contact Info

Product

Resources

About