A Cross-Layer Defense Method for Blockchain Empowered CBTC Systems Against Data Tampering Attacks

Abstract

Due to the high integration of wireless communication and networking technologies, the communication-based train control (CBTC) systems are exposed to additional cyber-attack surfaces, allowing sophisticated attackers to combine cyber attack vectors with physical attack means to achieve malicious goals. Notably, the decentralized authentication features are missing in existing communication protocols which make the CBTC be easily compromised by data tampering attacks, and lead to serious operational accidents. With outstanding advantages in decentralized authentication, blockchain provides new effective solutions for decentralized identity authentication in CBTC. Consequently, it is critical to study the complex physical consequences of cyber breaches from a cross-layer defense perspective. In this paper, we propose a novel cross-layer defense method for cyber security in blockchain empowered CBTC against data tampering attacks. In the physical layer, the joint Kalman filter and <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\chi ^{2} $ </tex-math></inline-formula> detector is proposed for the train state estimation and detection. In the cyber layer, an asymmetric encryption-based secure communication protocol with identity authentication and the blockchain-based distributed key management system with the adaptive consensus mechanism are designed for data communication security. Considering the unavailable direct observation of the CBTC cyber security states, a partially observable Markov (POMDP) decision model is constructed to derive the optimal adaptive consensus strategies for balancing cyber security and efficiency. Extensive simulation results show that the proposed blockchain empowered CBTC cross-layer defense method can effectively improve the cyber security protection capability and minimize the impact of data tampering attacks on the train operation.