Security Of Control Systems Research Articles

Research and application of power marketing operation safety control technology

In order to improve the safety and efficiency of power marketing operation, the power marketing operation safety control technology is studied and applied. Through in-depth analysis of the connotation of power marketing and power marketing operation safety management and control technology, combined with advanced technology methods, the design strategy of security management and control system platform is put forward. It is hoped that this study can provide strong technical support and solutions for the operation security control of the power market.

Research on the Construction of Campus Security Prevention and Control System Based on Internet of Things Technology

Abstract Campus safety is related to the healthy growth of students, and the research focus of this paper is to explore the impact of Internet of Things (IoT) technology on campus safety prevention and control. Based on the correlation between ISM and DEMATEL methods, this paper constitutes an integrated DEMATEL-ISM model by using neighbor matrix and reachable matrix to transform each other. It constructs a risk factor model for campus security prevention and control evaluation based on Internet of Things technology according to the modeling steps after soliciting experts’ suggestions through questionnaires. Combined with the SEM model to estimate students’ campus risk identification ability, the path index was used to construct the college security awareness score index to explore the relationship between latent variables (influencing factors) and observed variables (risk identification ability). The results show that every 1% increase in the safety climate of the social environment will lead to the rise of 0.58%, 0.20%, and 0.52% in the on-campus environment factor, the campus safety management team building factor, and the students’ literacy factor, respectively. A 0.17% increase in the on-campus environment will occur with every 1% increase in students’ literacy in higher education. This study contributes to a deeper understanding of the role of IoT technology in enhancing campus security prevention and control. It can provide deep research references for subsequent risk grading evaluation, risk warning prevention and control, and supervision in campus risk management.

経路改ざん検知と動的ゾーニングを組み合わせた制御システム向けセキュリティ強化手法

経路改ざん検知と動的ゾーニングを組み合わせた制御システム向けセキュリティ強化手法

Construction of Big Data Information Security Protection System in Industrial Internet Environment

Abstract With the continuous development and integration of information technology and industrialization-related technologies, industrial Internet control system security attacks occur frequently, and it is more and more important to build an information security protection system. This study focuses on the research improvement from two aspects of access control and intrusion prevention and designs an industrial Internet security access control strategy based on the homomorphic encryption algorithm of the Hyper Elliptic Curve Cryptosystem (HCC) and the key splitting algorithm based on threshold. Meanwhile, the convolutional neural network, two-way gating loop unit, and multi-head attention mechanism are integrated to construct the CMAG intrusion detection model. The encryption algorithm and CMAG model are applied and analyzed. The encryption and decryption times of this paper’s algorithm are both relatively smooth, with an average time consumption of about 1.93ms and 0.46ms, respectively, and significantly better than other algorithms with the increase in the number of bits. The throughput of this paper’s encryption algorithm is 13.68 KB/s, which is approximately 2 times, 19 times, and 29 times higher than the throughput of GM, ElGamal, and Paillier algorithms, respectively. The other algorithms cannot match its throughput rate during decryption. The CMAG model has an accuracy of 99.14%, which is better than that of the other models, and its average checking accuracy, average recall, and average F1-Score are 0.9889, 0.9783, and 0.9834, respectively, which are 1.25%-5.16%, 4.31%-7.19%, and 3.32%, respectively, compared with that of the other three algorithms. 7.19% and 3.32%-6.76%, respectively. This paper is of great practical significance for the construction and optimization of a big data information security protection system in an industrial Internet environment.

Proposal for the Possibility of Teaching Programming in the Subject of Computer Science using Autodesk Tinkercad

In today's world, we are witnessing a rapid boom in the implementation of various elements of robotics, intelligent, learning and other systems in our daily lives. The emphasis is on a multidisciplinary approach. These systems build on both hardware and software. Therefore, the question of programming is topical and we meet processors at every step. Our goal is to show within a few lessons the possibility of learning the principles of processor programming in a simple way, without the need for deeper knowledge of electronics or hardware. The use of the Arduino platform appears to be advantageous in this regard. It provides enough power and flexibility for educational purposes, while the Arduino IDE development environment is simple enough. Due to its diversity in terms of robustness and performance, Arduino is also widely used in practice, usually as an extension of existing systems. As an example, we can mention e.g. unmanned UAVs, camera or security systems, control and signaling systems, etc. Therefore, we see the sense of dealing with Arduino in education as well.

Secure Control of Linear Controllers Using Fully Homomorphic Encryption

In actual operation, there are security risks to the data of the network control system, mainly in the form of possible eavesdropping of signals in the transmission channel and parameters in the controller leading to data leakage. In this paper, we propose a scheme for encrypting linear controllers using fully homomorphic encryption, which effectively removes these security risks and substantially improves the security of networked control systems. Meanwhile, this paper uses precomputation to handle data encryption, which eliminates the encryption time and solves the drawback of fully homomorphic encryption that it is difficult to apply due to the efficiency problem. Compared to previous schemes with precomputation, for the first time, we propose two methods to mitigate the problem of the slight security degradation caused by precomputation, which makes our scheme more secure. Finally, we provide numerical simulation results to support our scheme, and the data show that the encrypted controller achieves normal control and improves safety and efficiency.

Threat Attribution and Reasoning for Industrial Control System Asset

Due to the widespread use of the industrial internet of things, the industrial control system has steadily transformed into an intelligent and informational one. To increase the industrial control system's security, based on industrial control system assets, this paper provides a method of threat modeling, attributing, and reasoning. First, this method characterizes the asset threat of an industrial control system by constructing an asset security ontology based on the asset structure. Second, this approach makes use of machine learning to identify assets and attribute the attacker's attack path. Subsequently, inference rules are devised to replicate the attacker's attack path, thereby reducing the response time of security personnel to threats and strengthening the semantic relationship between asset security within industrial control systems. Finally, the process is used in the simulation environment and real case scenario based on the power grid, where the assets and attacks are mapped. The actual attack path is deduced, and it demonstrates the approach's effectiveness.

Observer‐based event‐triggered security control for nonlinear networked control systems with cyber attacks

SummaryThis paper investigates the observer‐based security control problem for interval type‐2 nonlinear networked control systems with deception attacks and replay attacks. Firstly, to alleviate the communication burden of the network, a novel adaptive event‐triggered communication (ETC) mechanism is proposed. Compared with existing observer‐based adaptive ETC security control techniques, the threshold of the proposed adaptive ETC scheme can be adjusted dynamically depending on the value of adjustable parameters and estimation error. In particular, the adjustable parameters can change the sensitivity of the threshold flexibly. Then, taking the influence of the adaptive ETC mechanism and cyber attacks into consideration, an observer‐based security controller is developed under the co‐designed method. Furthermore, by utilizing the Lyapunov stability theory, sufficient conditions for asymptotically mean‐square stable of the closed‐loop system are obtained. Ultimately, the feasibility of the designed control approach can be proved via a simulation example.

IOT PENGENDALIAN KEAMANAN PINTU RUMAH OTOMATIS MENGGUNAKAN E-KTP BERBASIS MIKROKONTROLER ESP32

Internet of Things (IoT) is a concept that connects electronic devices to the internet and enables the exchange of data between these devices. In this context, this study aims to develop an automatic door security control system using an ESP32 microcontroller-based e-KTP. The proposed system uses e-KTP as a substitute for a physical key on the door of the house. e-KTP will be connected to the ESP32 microcontroller which acts as the brain of the system. Personal data from the e-KTP, such as identity numbers, will be stored securely and used for user authentication. The ESP32 microcontroller will communicate with the server using the WiFi protocol to send and receive data. Users will be able to access the door of the house wirelessly via a mobile application connected to the server. This mobile application will provide an intuitive user interface to control door access and view security status. This system is also equipped with various security features. In addition, users can also monitor home security in real-time through a mobile application, even when they are not at home.

Sensor deception attacks against security in supervisory control systems

This paper investigates the problem of synthesizing sensor deception attacks against security in the context of supervisory control of discrete-event systems (DES). We consider a DES plant controlled by a supervisor, whose security requirement is to maintain the initial-secret of the system undetected, i.e., it does not want to reveal the fact that it was initiated from a secret state. On the other hand, there exists an active attacker that can tamper with the observations received by the supervisor by, e.g., hacking into the communication channel between the sensors and the supervisor. The objective of the attacker is to deceive the supervisor such that the initial-secret is revealed due to incorrect control actions. We investigate the problem from the attacker’s point of view and focus on synthesizing attack strategies that threaten the security of the system. We consider two levels of success of the attacker: one requires that the attacker can detect the initial-secret of the system “almost surely” and the other only requires that the attacker has the possibility to detect the initial-secret of the system. For both cases, we present algorithms for synthesizing successful attack strategies. Our approach is based on the All Attack Structure (AAS) which records state estimates for both the supervisor and the attacker. Structural properties of the security requirements are also leveraged to reduce the synthesis complexity. A running academic example is provided to illustrate the proposed synthesis procedures.

Dynamic event–triggered security control for stochastic partial differential equation systems via a unified pointwise measurement/control strategy

This article focuses on the security control for parabolic partial differential equation systems driven by fractional Brownian motion based on a unified pointwise measurement/control strategy. Initially, by employing the Takagi–Sugeno fuzzy rule, nonlinear stochastic systems are transformed into a series of linear subsystems. Then, based on the improved dynamic event-triggered mechanism and pointwise measurements method, a security controller is presented to resist deception attacks. In addition, the Lyapunov direct method and some novel inequalities are used to ensure the considered system is mean-square exponentially stable, and the gain of the point controller is obtained. Finally, an application example is provided to verify the effectiveness of the proposed method.

A robust crow search algorithm based power system state estimation

The State Estimation (SE) computational procedure plays a crucial role in modern electric power system security control by monitoring and analyzing operational conditions and predicting any emergency. In order to estimate state variables, Power System State Estimation (PSSE) takes into account the magnitudes and phases of voltage on each bus. To address the state estimation challenges in power systems, in this paper, we propose a novel application of the Crow Search Algorithm (CSA) specifically tailored for the state estimation problem. We have assessed the introduced algorithm using the frameworks of both the IEEE 14-bus and IEEE 30-bus test systems. The first formulation is the Weighted Least Square (WLS) method, and the second is the Weighted Least Absolute Value (WLAV) method, both of which are objective function formulations. By comparing the results, it is clear that CSA-based SE is superior to the other metaheuristic algorithms considered, namely Genetic Algorithm (GA), Particle Swarm Optimization (PSO), and Artificial Bee Swarm Optimization (ABSO). As a point of comparison, we use the Newton–Raphson method for calculating load flow. It has been shown that the proposed CSA-based SE technique has better accuracy than the other two algorithms in all different test systems. With this study, the power system is operated more accurately and reliably by the operators operating the system.

Smarter Evolution: Enhancing Evolutionary Black Box Fuzzing with Adaptive Models.

Smart production ecosystems are a valuable target for attackers. In particular, due to the high level of connectivity introduced by Industry 4.0, attackers can potentially attack individual components of production systems from the outside. One approach to strengthening the security of industrial control systems is to perform black box security tests such as network fuzzing. These are applicable, even if no information on the internals of the control system is available. However, most security testing strategies assume a gray box setting, in which some information on the internals are available. We propose a new approach to bridge the gap between these gray box strategies and the real-world black box setting in the domain of industrial control systems. This approach involves training an adaptive machine learning model that approximates the information that is missing in a black box setting. We propose three different approaches for the model, combine them with an evolutionary testing approach, and perform an evaluation using a System under Test with known vulnerabilities. Our evaluation shows that the model is indeed able to learn valuable information about a previously unknown system, and that more vulnerabilities can be uncovered with our approach. The model-based approach using a Decision Tree was able to find a significantly higher number of vulnerabilities than the two baseline fuzzers.

PENERAPAN FACE RECOGNITION DENGAN ALGORITMA VIOLA JONES DALAM SISTEM PRESENSI KEHADIRAN SISWA DAN GURU PADA SEKOLAH IDN BOARDING SCHOOL JONGGOL

The Viola-Jones algorithm is one algorithm that is often used to detect faces. The human face recognition system is an important technology that functions as a security system, control system, and others. This is in accordance with the research objectives, namely to determine the application of the Viola-Jones algorithm in detecting the faces of students and teachers at SMK IDN Boarding School. This research aims to develop a student and teacher attendance system at IDN Boarding School Jonggol using face recognition technology with the Viola-Jones algorithm. The developed attendance system aims to increase the effectiveness and efficiency in managing the attendance of students and teachers. Then identify attendance by comparing face images registered in the system database. The application used by the face recognition program is PyCharm Community 2023 Version 1.4 with the macOS operating system. The test used various expressions totaling 200 images of 20 people. The percentage of successful face recognition process is 95%. Some factors that affect the success of recognition are lighting, face distance and face position.

Security Baseline for Substation Automation Systems.

The use of information technology and the automation of control systems in the energy sector enables a more efficient transmission and distribution of electricity. However, in addition to the many benefits that the deployment of intelligent and largely autonomous systems brings, it also carries risks associated with information and cyber security breaches. Technology systems form a specific and critical communication infrastructure, in which powerful control elements integrating IoT principles and IED devices are present. It also contains intelligent access control systems such as RTU, IDE, HMI, and SCADA systems that provide communication with the data and control center on the outer perimeter. Therefore, the key question is how to comprehensively protect these specialized systems and how to approach security implementation projects in this area. To establish rules, procedures, and techniques to ensure the cyber security of smart grid control systems in the energy sector, it is necessary to understand the security threats and bring appropriate measures to ensure the security of energy distribution. Given the use of a wide range of information and industrial technologies, it is difficult to protect energy distribution systems using standard constraints to protect common IT technologies and business processes. Therefore, as part of a comprehensive approach to cyber security, specifics such as legislative framework, technological constraints, international standards, specialized protocols or company processes, and many others need to be considered. Therefore, the key question is how to comprehensively protect these specialized systems and how to approach security implementation projects in this area. In this article, a basic security concept for control systems of power stations, which are part of the power transmission and distribution system, is presented based on the Smart Grid domain model with emphasis on substation intelligence, according to the Purdue model. The main contribution of the paper is the comprehensive design of mitigation measures divided into mandatory and recommended implementation based on the standards defined within the MITRE ATT&CK matrix specified, concerning the specifications of intelligent distribution substations. The proposed and industry-tested solution is mapped to meet the international security standards ISO 27001 and national legislation reflecting the requirements of NIS2. This ensures that the security requirements will be met when implementing the proposed Security Baseline.

Switched-type unknown input observer-based fault-tolerant control for cyber-physical systems in the presence of denial of service attack

The problem of security control for cyber-physical systems (CPSs) is gradually becoming a popular research topic. In the presence of the denial-of-service (DoS) attack, this paper investigates the switched-type unknown input observer-based fault-tolerant control problem for multi-channel CPSs. Firstly, based on the sampling mechanism, a switched-type unknown input observer (SUIO) which can discard the outdated information is designed to obtain state/fault estimations, and converting the estimation error system stability analysis under DoS attack into that under SUIO. Then, to compensate the effect of actuator fault, an SUIO-based fault-tolerant controller is designed. And the input-to-state stability of the CPSs is analyzed. In comparison with the existing UIO studies, this paper considers the case of DoS attack affecting the transmission channel, and the impact of DoS attack on estimation effect can be effectively reduced by introducing the switching mechanism. Finally, based on the simulation results of the given experiments, the effectiveness of the proposed method is illustrated.

Approaches to the intellectualization of information and telecommunication networks security control in transport

The specifics of modern information and telecommunication networks in transport, as an object of information security control, are investigated. The main trends in the development of information and telecommunication network protection technologies (TNPT) have been identified. The presence of the interrelation of the main integrative properties: readiness, mobility, throughput, stealth, accessibility, manageability, which is a consequence of the convergence of information transmission and processing technologies, is noted. A new integrative property of ITCS has become the presence and characteristics of distributed system memory, which allows storing transmitted messages for a certain time. An important feature of modern TNPT is the presence of artificial intelligence, which is formed on the basis of information and algorithmic support of modern TNPT, providing flexibility of the system behavior. These trends indicate the transformation of TNPT into a supersystem, the management tasks of which are insufficiently investigated at present. The purpose of this work is to study new approaches to ensuring the safety management of modern TNPT critical infrastructure, which includes modern systems of sea and river transport, taking into account their features. The object of the study is the information security control system of modern TNPT. The subject of the study is the scientific and methodological support of the TNPT critical infrastructure control. The research objectives are to analyze existing and develop new conceptual frameworks, as well as approaches to improving the TNPT information security control system based on intellectualization methods. The analysis of the existing methodology for managing complex organizational and technical systems and information security control technologies is carried out. The concept of TNPT information security control is formalized schematically. The analysis of the existing approach to the organization of the TNPT information security control process is carried out. The tasks of control intellectualization are defined. The problem of ensuring the efficiency and reliability of the TNPT control is formulated. The main scientific tasks of the development of the TNPT information security control methodology are defined.

Attacks detection and security control for cyber-physical systems under false data injection attacks

This paper is concerned with the attack detection and security control problem for discrete-time nonlinear cyber-physical systems (CPSs) under false data injection (FDI) attacks, which can bypass the traditional error detection mechanism. With the help of the T–S fuzzy models, a novel robust extended state observer with H∞ performance is proposed to estimate this kind of attack. The attacks are included inside the observer as an internal state variable and the estimation of the FDI attack can be obtained from the outputs of the observer. By utilizing the observation of the FDI attack, a compensator is designed to negate the attack. Additionally, a controller is proposed to bring on the attack ineffective. Finally, simulation examples are given to illustrate the effectiveness of the developed schemes.

A New 8D Lorenz-like Hyperchaotic System: Computer Modelling, Circuit Design and Arduino Uno Board Implementation

This paper presents the construction of Matlab-Simulink and LabView models for a novel nonlinear dynamic system of equations in an eight-dimensional (8D) phase space. The Lyapunov exponent spectrum and Kaplan-York dimension were calculated with fixed parameters of the 8D dynamical system. The presence of two positive Lyapunov exponents indicates hyperchaotic behavior. The fractional Kaplan-York dimension shows the fractal structure of strange attractors. An adaptive controller was used to stabilize the 8D chaotic system with unknown system parameters, and an active control method was derived to achieve global chaotic synchronization of two identical 8D chaotic systems with unknown system parameters. Using the results from Matlab-Simulink and LabView models, a chaotic signal generator for the 8D chaotic system was implemented in the Multisim environment. The simulation results of chaotic behavior in the Multisim environment demonstrate similar behavior compared to simulation results from Matlab-Simulink and LabView models. To visualize the new 8D chaotic system, we employed an Arduino Uno board along with eight light-emitting diodes (LEDs). Furthermore, we demonstrated the capability to simulate the new 8D chaotic system in the Proteus 8 environment using the Arduino Uno microcontroller. This advancement in the understanding and implementation of chaotic systems opens doors to numerous possibilities in the realm of secure communication and control systems.

ENSURING FOOD SECURITY OF KAZAKHSTAN IN THE CONDITIONS OF THE EAEU

The level of food security of the member countries of the Eurasian Economic Union lags behind the developed countries, despite the fact that the Eurasian Economic Union occupies a significant place among international economic organizations. The problem of food security of the Eurasian Economic Union is the focus of the member countries and each of them independently acts against economic and political risks and threats on the way to ensuring the country&s national food security. Each of them has formulated and applies its own food security assessment and control systems. However, due to the complex nature of the problem of ensuring food security in the conditions of the Eurasian Economic Union, it must be considered and solved through the implementation of state programs not only within the country, but also within the framework of the Eurasian Economic Union as a whole. The article examines topical issues of ensuring food security in the conditions of the Union, assessment, and also identifies the main obstacles.