Analysis of Modern Methods to Ensure Data Integrity in Cyber-Physical System Management Protocols

Abstract

At present, the problem of creating methodological security of cyberphysical systems, in particular, the design and implementation of information security subsystems is acute. At the same time, the landscape of threats and vulnerabilities typical for a wide range of hardware and software technologies used in cyberphysical systems is extremely wide and complex. In this context, the security of application layer protocols is of paramount importance, as these protocols are the basis for interaction between applications and services running on different devices, as well as in cloud infrastructures. With the constant interaction of the systems under study with the real physical infrastructure, the challenge is to determine effective measures to ensure the integrity of the transferred control commands, as disruption of the performed critical processes can affect human life and health. The paper provides an analytical review of the main methods of data integrity assurance in management protocol of cyberphysical systems, as well as an overview of application layer protocols vulnerabilities widely used in cyberphysical systems of different types. Classical methods of data integrity assurance, new methods, in particular, blockchain, as well as the main directions of increasing the efficiency of data integrity protocols in cyberphysical systems are considered. Analysis of application layer vulnerabilities is carried out on the example of the most popular MQTT, CoAP, AMQP, DDS, XMPP specifications and their implementations. It is established that despite the presence of basic security mechanisms in all these protocols, researchers continue to regularly identify vulnerabilities in popular implementations, that often endangers critical infrastructure services. In the course of preparing the review of the existing methods of data integrity assurance for the examined class of systems, the key problems of these methods integration and ways of their solution were defined.

Survey on Behavioral Strategies of Cyber-Physical Systems in Case of Loss of Integrity

“…Malfunctions of the CPS [2] can be caused by such damages as failure of one or more system nodes, loss of connectivity, loss of integrity, or modification of data transmitted by nodes [3]. To solve these problems, various methods and algorithms can be applied [4], capable of fully or partially eliminating violations and allowing the CPS to function as expected. Currently, the most popular way to solve the problems of integrity loss consists in the utilization of the architectures that allow the CPS to retain operability in the case of failure of several nodes [5].…”