Sensitivity analysis of the sequential test for detecting cyber-physical attacks

Long, Van; Fillatre, Lionel

doi:10.1109/eusipco.2015.7362787

Cited by 5 publications

(3 citation statements)

References 9 publications

(5 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…We assume that observations { X n ; n = 1, 2, ...} are independent and identically distributed with prechange

N (0, σ^{2})

and postchange

N (θ, σ^{2})

distributions, respectively, so that

L (X_{n}) = \exp \{\frac{θ}{σ^{2}} X_{n} - \frac{θ^{2}}{2 σ^{2}}\}

and F ∞ in Equation 4 is the LogNormal CDF with parameters

(- \frac{θ^{2}}{2 σ^{2}}, \frac{θ^{2}}{σ^{2}})

. Notice that the Gaussian assumption is rather standard model for plants and CPS. This is not only due to its mathematical tractability, but is also motivated by the fact that the processes under surveillance are often physical variables subject to measurement noise (for which the Gaussian is the leading model) or are anyway the result of several independent contributions so again the central limit theorem suggests, in absence of more reliable models or contradicting evidence, the Gaussian assumption.…”

Section: Simulation Resultsmentioning

confidence: 99%

“…The CUSUM has been largely used for monitoring and quickly detecting changes in industrial plants, and more recently for securing CPS. In the latter case, examples of monitored variables are power flows in smart grids, or pressure in water treatment plants . Such signals can be deceived by different types of attacks, thus affecting in turn the correct functioning of the system .…”

Section: Quickest Change‐detection Approachesmentioning

confidence: 99%

“…Indeed, because many design assumptions are no longer valid when perturbations to the system are caused by an adversarial attacker rather than random or structured failures, DDoS attacks toward CPS are a rising threat . Several CUSUM‐based algorithms have been proposed for detecting attacks toward CPS, in particular supervisory control and data acquisition (SCADA) systems, power system lines, and smart grids , …”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An alternative procedure to cumulative sum for cyber‐physical attack detection

Coluccia

Fascista

2017

Internet Technology Letters

View full text Add to dashboard Cite

Motivated by the importance of change detection in cyber‐physical systems security, an alternative procedure to the classical cumulative sum (CUSUM) algorithm is explored. By capitalizing on recent results appeared in the statistical literature, it is shown that superior performance can be obtained in terms of reaction time while being robust against parameter mismatches. In order to translate such quickest‐detection‐theoretic advances into practical system‐engineering tools, a simple pseudocode is provided that ensures approximately flat response with respect to the change time. We believe the latter is a very important property that is missing in CUSUM‐based detection approaches.

show abstract

“…We assume that observations { X n ; n = 1, 2, ...} are independent and identically distributed with prechange