Physical Security Systems Research Articles

H∞ control for cyber physical systems under DoS attacks via tracking-removed autoencoder

In this paper, we consider cyber physical systems security control problems under DoS attacks via the tracking-removed autoencoder. The DoS attack model is described by the switch signal, which occurs in the controller-actuator transmission channel. Then, the linear matrix inequality theory is used to solve the average dwell time of the attack mode that the system can tolerate. Moreover, when the attack dwell time exceeds the tolerance range, a tracking-removed autoencoder is chosen to train to get the control signal. And it can be proved that the closed-loop system with the controller based on the tracking-removed autoencoder is asymptotically stable with H ∞ performance index. Finally, the correctness and advancement of the theory are proved by an example.

A Survey on Cyber–Physical Systems Security

A Survey on Cyber–Physical Systems Security

Onto-CARMEN: Ontology-driven approach for Cyber–Physical System Security Requirements meta-modelling and reasoning

In the last years, Cyber–physical systems (CPS) have attracted substantial mainstream, especially in the industrial sector, since they have become the focus of cyber-attacks. CPS are complex systems that encompass a great variety of hardware and software components with a countless number of configurations and features. For this reason, the construction, validation, and diagnosis of security in CPS become a major challenge. An invalid security requirement for the CPS can produce partial or incomplete configuration, even misconfigurations, and hence catastrophic consequences. Therefore, it is crucial to ensure the validation of the security requirements specification from the earlier design stages. To this end, Onto-CARMEN is proposed, a semantic approach that enables the automatic verification and diagnosis of security requirements according to the ENISA and OWASP recommendations. Our approach provides a mechanism for the specification of security requirements on top of ontologies, and automatic diagnosis through semantic axioms and SPARQL rules. The approach has been validated using security requirements from a real case study.

Fortifying the Internet of Things: A Comprehensive Security Review

A variety of new technologies and their related capabilities have entered daily life in the long run of the IoT technology. Various industrial sectors, including healthcare, facility management, agriculture, energy, and transportation, use IoT technologies. Interconnected networks are starting to include IoT devices like wearables, commercial appliances, connected electronics, smart grids, smart automobiles, etc. These gadgets produce enormous amounts of data, which are gathered, examined, recorded, and kept on the networks. IoT security is challenging to secure since the devices employ basic processors and operating systems that may not be compatible with advanced security measures. The information and the devices that are used by organizations as a part of their network must be protected against hackers. In this paper, we discuss about overall review of IoT systems that contains the scope of IoT in the future era, Some of the characteristics of IoT systems, layers including the working Architecture of IoT. We will also discuss some of the vulnerabilities and surface area attacks, application areas regarding IoT. Potential weaknesses in the IoT system could cause serious issues for enterprises. The majority of Internet of Things (IoT) devices have security flaws, including incorrect physical security systems, lack of lock-out mechanisms, weak encryption schemes, improper key management systems, and improper authentication mechanisms, or the use of default credentials. As in the evolving era, security issues are becoming a major problem so some of the security threats of IoT are also mentioned here. This paper also provides the methods for addressing the vulnerabilities to IoT systems' security.

Security- and Reliability-Guaranteed Transmission Control of Time-Sensitive Physical Layer Security Systems.

In this paper, we consider information transmission over a three-node physical layer security system. Based on the imperfect estimations of the main channel and the eavesdropping channel, we propose reducing the outage probability and interception probability by hindering transmissions in cases where the main channel is too strong or too weak, which is referred to as an SNR-gated transmission control scheme. Specifically, Alice gives up its chance to transmit a packet if the estimated power gain of the main channel is smaller than a certain threshold so that possible outages can be avoided; Alice also becomes silent if the estimated power gain is larger than another threshold so that possible interceptions at Eve can be avoided. We also consider the timeliness of the network in terms of the violation probability of the peak age of information (PAoI). We present the outage probability, interception probability, and PAoI violation probability explicitly; we also investigate the trade-off among these probabilities, considering their weight sum. Our numerical and Monte Carlo results show that by using the SNR-gated transmission control, both the outage probability and the interception probability are reduced.

Face recognition based physical layer security system for next-generation wireless communication

Security system in every sector all over the world is a most demandable and crucial issue to protect the fake user especially in wireless communication system. The most common feature in current wireless communication system is only transmitted users’ information; consequently, it is difficult to identify the actual sender to attain the desired security. Face recognition is one of the most popular security systems in biometric authentication, which can detect intruders to restricted or high-security areas in wireless communication sector, and help in minimizing the face user. In this paper, we proposed a system that is the senders will transmit message information with their image to confirm the original senders. A face-recognition algorithm will be implemented at the receiver end. When a senders’ transmitted information enters to the receiver section, the image of sender will be separated from original message signal and sent to the face-recognition algorithm to be analysed and compared with an existing database of trusted user. An alarm goes off if the user is not recognized.

Analisis Keamanan Fisik Data Prodi Sistem Informasi UIN Sumatera Utara Medan Menggunakan Standar ISO 27001

Physical security is the first step in computer security. If physical storage is not properly secured, data, even the computer applications themselves, cannot be guaranteed to be secure. Analysis of Physical Data Security of the Information Systems Study Program UIN North Sumatra Medan using point A.9 of the ISO 27001 Standard. Analysis of the physical security of the information system study program data was carried out through literature review, use of ISO 27001 points, interviews with related parties regarding the physical security of the current study program data. This study aims to find out the details and problems faced by the Medan North Sumatra UIN Information Systems Study Program in using its physical security system.

A Dynamic Risk Framework for the Physical Security of Nuclear Power Plants

This paper describes ongoing work within the Light Water Reactor Sustainability pathway at Idaho National Laboratory (INL) to optimize the security and cost of nuclear power plants. It introduces the dynamic risk assessment tool developed at INL, Event Modeling Risk Assessment using Linked Diagrams (EMRALD). EMRALD is leveraged to optimize the security posture of a nuclear power plant by integrating force-on-force (FOF) simulations and operator mitigation actions, including dynamic and flexible coping strategies (FLEX). To illustrate the methodology, four attack scenarios are modeled in a commercially available FOF simulation tool using a hypothetical nuclear power plant facility. The simulation results provide valuable insights into possible attack outcomes, as well as the probabilistic risk of a core damage event given these outcomes. Safety mitigation procedures are modeled in EMRALD dependent on the attack outcomes by considering human operator uncertainties. The results demonstrate that the number of armed responders can be optimized, while still maintaining the same protection level as the initial security posture. The proposed modeling and simulation framework of integrating FLEX equipment with FOF models enables the nuclear power plants to credit FLEX portable equipment in the plant security posture, resulting in an efficient and optimized physical security system.

Managing Security Threats through Touchless Security Technologies: An Overview of the Integration of Facial Recognition Technology in the UAE Oil and Gas Industry

Throughout the past few years, the oil and gas industry in the United Arab Emirates has grown significantly, and is currently one of the top ten oil producers in the world. As a result, it is at risk of physical security threats, including theft, unauthorized access, vandalism, espionage, and other incidents which could disrupt its operation. Consequently, significant investments in the latest security technologies are necessary to protect this critical infrastructure and maintain its international standing. Therefore, the main objective of this study is to examine whether integrating facial recognition technology (FRT) with a physical security system in this sector would improve physical security performance and efficiently mitigate potential threats. A quantitative approach was applied to collect the essential information with a sample size of 371 selected through a simple random sampling method to ensure the validity and reliability of the research results. In addition, regression analysis was conducted using Smart-PLS version 3.3.9 based on (SEM) to define the significant relationships between the hypothesis applied in the conceptual model. Furthermore, the findings were significant as they provided the basis for future studies for the practical application of FRT to enhance the UAE oil and gas company’s resilience to physical security threats.

User Perceptions of Information Security: Evidence from Takoradi Technical University

This study related to the importance of information and information technology in today's global business. The global nature of information systems also exposes them to threats which make them prone to security breaches. Information risks are several internal and external, making it almost impossible for only information security professionals to handle. This therefore reinforces the need to involve end-users in by educating them to be aware of threats, and their role in curbing those threats. Related information security literature was reviewed to establish the business problem theoretically. Using focus group discussions and open-ended interview guide, data was collected from non-security employees from Takoradi Polytechnic. The data provided understanding of the employees' present security needs, employees perception of information security, employees' personal security initiative, and level of information security awareness. The key findings in the study suggested that, currently some arrangements have been made to ensure information security; however, there is the need for more non-computer-based arrangements such as physical security, training and data backup systems. Further, because some respondents did not perceive the current security arrangement to be adequate, they took personal initiatives like using passwords, using formal communication channels for obtaining information which falls outside their domain or function, and seldom reporting any perceived security threats. These personal initiatives seemed to be the basis for the employees' self-rating of their level of information security awareness, not some training they had acquired.
 
 Received: 8 September 2022 / Accepted: 29 October 2022 / Published: 5 November 2022

Optimization of pre-equalized time reversal security transmission systems assisted with artificial noise

Time reversal (TR) transmission technology can focus the power of a signal in both time and space domains and reduce signal energy leakage to unintended receivers, making it suitable for physical layer security systems. By adding a pre-equalizer to the transmitter and optimizing it, the performance of multi-antenna TR transmission system can be improved obviously with an acceptable optimization complexity. In this paper, the pre-equalizer and artificial noise (AN) are jointly optimized to improve the security performance of pre-equalized TR (ETR) systems when eavesdropping channel state information (ECSI) is unknown or known. When ECSI is unknown, null-space AN is adopted, and the pre-equalizer is optimized to minimize the signal power under the constraint of the minimum signal-to-interference-plus-noise ratio (SINR) of the legitimate receiver, so the AN power and the interference with the eavesdropper are maximized. The optimization problem is transformed into the problem of finding the maximum generalized eigenvalue of a matrix pencil. When ECSI is known, under the minimum SINR constraint of the legitimate receiver, the pre-equalizer and AN’s covariance matrix are jointly optimized to minimize the SINR of the eavesdropper. The optimization problem is non-convex and is transformed into a convex problem, which can be solved using the CVX toolbox. The optimization complexity is independent of the number of transmit antennas. Simulation results demonstrate that compared with TR systems, by optimizing the pre-equalizer, the security performance of ETR multi-antenna systems can be significantly improved, and the optimization complexity is acceptable.

Computing Physical Security System Effectiveness at Commercial Reactors

The use of advanced security technologies, such as modeling and simulation in support of vulnerability assessment, has continued to find acceptance in both the operator and the regulatory realms. A critical component to gaining acceptance for modeling and simulation is employing a proven analysis process using best practices and proven tools. These processes and tools allow security managers to be responsive to changing threats and management/financial constraints by quantifying a site’s level of security under different attack scenarios and defensive configurations. Based on best practices and performance data from government agencies, modeling and simulation experts have proposed a process to compute security system effectiveness for commercial nuclear sites. This process will allow decision makers to use a risk-informed approach to quantify security risk at their sites. This also includes a formal accreditation and review process that will provide decision makers and regulators confidence into the development of the defense strategy. Providing a consistent means to assess security, using government-provided or other agreed-upon performance data, will allow sites to compare new and more cost-effective strategies directly with existing/approved strategies to perform a cost-benefit analysis and return on investment estimate.

Research on Game Theory of Air Traffic Management Cyber Physical System Security

For the air traffic management cyber physical system, if an attacker successfully obtains authority or data through a cyber attack, combined with physical attacks, it will cause serious consequences. Game theory can be applied to the strategic interaction between two parties, especially if the two parties have different goals. The offensive and defensive game process of the air traffic management cyber physical system is a non-cooperative and incomplete information dynamic game. The attacker can choose to camouflage the type of attack launched. The attack detection device configured in the system has a certain probability that the attack type can be successfully detected. According to the type of attack detected, the defender updates the posterior belief of the attack type and selects the corresponding protective strategies. According to the game process of offense and defense, a dynamic Bayesian game model of the air traffic management cyber physical system is established, the possible perfect Bayesian Nash equilibrium and its existence conditions are solved, and a complete mathematical model is constructed. The analysis shows that the dynamic Bayesian game model of the air traffic management cyber physical system can help the system defender to quickly obtain an equilibrium strategy and reduce the loss of the system as much as possible.

Cyber-Physical Systems and their Security Issues

Broadly, cyber physical systems are systems that integrate computing into the physical world. Control systems, the increase in their intersection with information technology networks and the variety of communication methods also cause the threat vectors in cyber physical systems security to change and increase. This shows that traditional information technology security measures, new generation information technology security solutions or security solutions specific to control systems will be insufficient alone, and the need for integrated security solutions that include all components in the cyber physical systems network and include operational scenarios. In this work, it was cover a couple of definitions of cyber physical systems and it was present an overview of cyber physical systems, what they are, where they are found, and how they are used. It also includes some information on the specific reasons cyber physical systems present greater security demands. The stakes are higher, the components are much more difficult to maintain and update, and the systems are more complex. The goal is to understand these systems well enough to design effective security measures to counter potential attacks.

Learning Algorithm Recommendation Framework for IS and CPS Security

Artificial intelligence and machine learning have recently made outstanding contributions to the performance of information system and cyber--physical system security. There has been a plethora of research in this area, resulting in an outburst of publications over the past two years. Choosing the right algorithm to solve a complex security problem in a very precise industrial context is a challenging task. Therefore, in this paper, we propose a Learning Algorithm Recommendation Framework that, for a clearly defined situation, guides the selection of learning algorithm and scientific discipline (e.g. RNN, GAN, RL, CNN,...) which have sparked great interest to the scientific community and which therefore offers preponderant elements and benefits for further deployments. This framework has the advantage of having been generated from an extensive analysis of the literature, as illustrated by this paper for the recurrent neural networks and their variations.

PSPS: A Step toward Tamper Resistance against Physical Computer Intrusion.

Cyberattacks are increasing in both number and severity for private, corporate, and governmental bodies. To prevent these attacks, many intrusion detection systems and intrusion prevention systems provide computer security by monitoring network packets and auditing system records. However, most of these systems only monitor network packets rather than the computer itself, so physical intrusion is also an important security issue. Furthermore, with the rapid progress of the Internet of Things (IoT) technology, security problems of IoT devices are also increasing. Many IoT devices can be disassembled for decompilation, resulting in the theft of sensitive data. To prevent this, physical intrusion detection systems of the IoT should be considered. We here propose a physical security system that can protect data from unauthorized access when the computer chassis is opened or tampered with. Sensor switches monitor the chassis status at all times and upload event logs to a cloud server for remote monitoring. If the system finds that the computer has an abnormal condition, it takes protective measures and notifies the administrator. This system can be extended to IoT devices to protect their data from theft.

Problems and solutions regarding generalized functional safety in cyberspace

The common endogenous security problems in cyberspace and related attack threats have posed subversive challenges to conventional theories and methods of functional safety. In the current design of the cyber physical system (CPS), functional safety and cyber security are increasingly intertwined and inseparable, which evolve into the generalized functional safety (S&S) problem. The conventional reliability and cybersecurity technologies are unable to provide security assurance with quantifiable design and verification metrics in response to the cyberattacks in hardware and software with common endogenous security problems, and the functional safety of CPS facilities or device has become a frightening ghost. The dynamic heterogeneity redundancy (DHR) architecture and coding channel theory (CCT) proposed by the cyberspace endogenous security paradigm could handle random failures and uncertain network attacks in an integrated manner, and its generalized robust control mechanism can solve the universal problem of quantitative design for functional safety under probability or improbability perturbation. As a generalized functional safety enabling structure, DHR opens up a new direction to solve the common endogenous security problems in the cross-disciplinary fields of cyberspace.

Design of Secure Microcontroller-Based Systems: Application to Mobile Robots for Perimeter Monitoring.

This paper describes an original methodology for the design of microcontroller-based physical security systems and its application for the system of mobile robots. The novelty of the proposed methodology lies in combining various design algorithms on the basis of abstract and detailed system representations. The suggested design approach, which is based on the methodology, is modular and extensible, takes into account the security of the physical layer of the system, works with the abstract system representation and is looking for a trade-off between the security of the final solution and the resources expended on it. Moreover, unlike existing solutions, the methodology has a strong focus on security. It is aimed at ensuring the protection of the system against attacks at the design stage, considers security components as an integral part of the system and checks if the system can be designed in accordance with given requirements and limitations. An experimental evaluation of the methodology was conducted with help of its software implementation that consists of Python script, PostgreSQL database, Tkinter interface and available for download on our GitHub. As a use case, the system of mobile robots for perimeter monitoring was chosen. During the experimental evaluation, the design time was measured depending on the parameters of the attacker against which system security must be ensured. Moreover, the software implementation of the methodology was analyzed in compliance with requirements and compared with analogues. The advantages and disadvantages of the methodology as well as future work directions are indicated.

Cyber Physical Systems Security for Maritime Assets

The integration of IT, OT, and human factor elements in maritime assets is critical for their efficient and safe operation and performance. This integration defines cyber physical systems and involves a number of IT and OT components, systems, and functions that involve multiple and diverse communication paths that are technologically and operationally evolving along with credible cyber security threats. These cyber security threats and risks as well as a number of known security breach scenarios are described in this paper to highlight the evolution of cyber physical systems in the maritime domain and their emerging cyber vulnerabilities. Current industry and governmental standards and directives related to cyber security in the maritime domain attempt to enforce the regulatory compliance and reinforce asset cyber security integrity for optimum and safe performance with limited focus, however, in the existing OT infrastructure and systems. The use of outside-of-the-maritime industry security risk assessment tools and processes, such the API STD 780 Security Risk Assessment (SRA) and the Bow Tie Analysis methodologies, can assist the asset owner to assess its IT and OT infrastructure for cyber and physical security vulnerabilities and allocate proper mitigation measures assuming their similarities to ICS infrastructure. The application of cyber security controls deriving from the adaptation of the NIST CSF and the MITRE ATT&CK Threat Model can further increase the cyber security integrity of maritime assets, assuming they are periodically evaluated for their effectiveness and applicability. Finally, the improvement in communication among stakeholders, the increase in operational and technical cyber and physical security resiliency, and the increase in operational cyber security awareness would be further increased for maritime assets by the convergence of the distinct physical and cyber security functions as well as onshore- and offshore-based cyber infrastructure of maritime companies and asset owners.

Integrated Security System (ISS) Design and Evaluation for Commercial Nuclear Power Plant

Physical security system, which is also called physical protection system, is very crucial in the nuclear industry for protecting staff, visitors, buildings, assets, and nuclear materials against theft, sabotage, and harmful activities. Theft of nuclear materials has a major impact on the essence of nuclear safeguards. Sabotage of a nuclear facility could endanger the public at large. Reviewing the published literature, it is found that there are no complete physical security system designs based on an integrated network of electronic devices that are devoted to commercial NPPs. And there is no definite evaluation factor that was set to approve such a system. This paper is an evolving solution to this deficiency by proposing an unpreceded integrated security system design applicable to a commonly structured physical layout of any commercial NPP. This proposal provides comprehensive security coverage for the NPP boundaries employing a high level of integration for all subsystems communicated via an IP data network controlled by central management software. This paper is proposing also testing procedures to be followed to evaluate the proposed design. The security system effectiveness will be calculated using mathematical codes by assuming external intrusion attack scenarios. Attributes of each attack scenario will be numerically introduced to the evaluation software EASI and ASSESS codes developed by Sandia Labs, USA. This paper also proposes a threshold value of such security system effectiveness which should be achieved by the commercial NPP security system to achieve the so-called security license.