Cyber-Physical System Checkpointing and Recovery

Abstract

Transitioning to more open architectures has been making Cyber-Physical Systems (CPS) vulnerable to malicious attacks that are beyond the conventional cyber attacks. This paper studies attack-resilience enhancement for a system under emerging attacks in the environment of the controller. An effective way to address this problem is to make system state estimation accurate enough for control regardless of the compromised components. This work follows this way and develops a procedure named CPS checkpointing and recovery, which leverages historical data to recover failed system states. Specially, we first propose a new concept of physical-state recovery. The essential operation is defined as rolling the system forward starting from a consistent historical system state. Second, we design a checkpointing protocol that defines how to record system states for the recovery. The protocol introduces a sliding window that accommodates attackdetection delay to improve the correctness of stored states. Third, we present a use case of CPS checkpointing and recovery that deals with compromised sensor measurements. At last, we evaluate our design through conducting simulator-based experiments and illustrating the use of our design with an unmanned vehicle case study. DisciplinesComputer Engineering | Computer Sciences Abstract-Transitioning to more open architectures has been making Cyber-Physical Systems (CPS) vulnerable to malicious attacks that are beyond the conventional cyber attacks. This paper studies attack-resilience enhancement for a system under emerging attacks in the environment of the controller. An effective way to address this problem is to make system state estimation accurate enough for control regardless of the compromised components. This work follows this way and develops a procedure named CPS checkpointing and recovery, which leverages historical data to recover failed system states. Specially, we first propose a new concept of physical-state recovery. The essential operation is defined as rolling the system forward starting from a consistent historical system state. Second, we design a checkpointing protocol that defines how to record system states for the recovery. The protocol introduces a sliding window that accommodates attack-detection delay to improve the correctness of stored states. Third, we present a use case of CPS checkpointing and recovery that deals with compromised sensor measurements. At last, we evaluate our design through conducting simulator-based experiments and illustrating the use of our design with an unmanned vehicle case study.

Optimum Interval for Application-level Checkpoints

“…Thus a time dependent value of the failure probability g will need to be considered in this case. Finally, as far as security is concerned, ALCR can be used to disrupt attackers (e.g., [40]), while it can be also exploited by malicious individuals to increase the workload of the system, potentially leading to a form of Denial of Service through workload saturation. Thus the interaction of ALCR and checkpointing in general, and security, is also a worthwhile subject of investigation.…”

IoTRepair: Systematically Addressing Device Faults in Commodity IoT (Extended Paper)

“…For this reason, our rollback fails if any actuator that needs to be changed is currently faulty (lines 6-7). We note that this captures the heterogeneous nature of IoT devices when compared to similar functions in distributed systems [28] and cyber-physical systems [32]. We also implement a data rollback as part of the system rollback.…”

Resilient architecture to dynamically manage unmanned aerial vehicle networks under attack

“…The focus of this work relies on resilient architectures taking into account that the resilient attribute is relevant to maintain the operation level of a stabilized UAV, even in the case of successful exploration (CHEN et al, 2019;ORDOUKHANIAN;MADNI, 2019;KONG et al, 2018;YOON et al, 2017;ORDOUKHANIAN;MADNI, 2016;VEGA et al, 2015).…”

“…The authors Kong et al (2018) address the improvement of system resilience to emerging attacks in the controlled environment, such as sensor attacks. Consequently, the authors developed a procedure called checkpoint and recovery, using historical data to recover the failed system states.…”

“…• Resilience: Resilient architectures should be highlighted (KONG et al, 2018;YOON et al, 2017) because they are seen as a relevant security attribute to maintain the operation level of a stabilized UAV system, even under a successful attacks (ORDOUKHANIAN; MADNI, 2019;ORDOUKHANIAN;MADNI, 2016;VEGA et al, 2015).…”