新型ADETCS下工业信息物理系统综合安全控制

Integrated security control of industrial cyber-physical systems based on new type ADETCS

针对一类虚假数据注入(FDI)攻击与故障共存的工业信息物理系统(ICPS),在新型自适应离散事件触发通信机制(ADETCS)下,研究了综合安全控制与通信的协同设计问题。引入ADETCS取代传统离散事件触发通信机制,构建安全与通信可自适应协同优化运行的ICPS架构;通过对ADETCS中阈值函数的优化设计,获得一种可随系统动态行为双向连续变化的新型ADETCS;在该机制下,基于主动容侵和容错的思想,通过构造Lyapunov泛函,借助新型Bessel-Legebdre不等式、锥补线性化(CCL)等少保守性技术,在统一的自适应变采样框架下,推证出鲁棒估计器与综合安全控制器的求解方法,使ICPS可同时防御FDI攻击与故障,并具有更优的自适应通信调节能力。仿真结果表明:新型ADETCS中阈值函数的巧妙设计及CCL的应用,相较现存通信机制和设计方法,可使ICPS的综合安全控制性能与资源节约获得更优的折中平衡。

For industrial cyber-physical system(ICPS)with false data injection(FDI)attacks and faults,the collaborative design of integrated security control and communication in the new type adaptive discrete eventtriggered communication scheme(ADETCS)was studied.Firstly,the ADETCS was introduced to replace the traditional discrete event-triggered communication scheme,and an ICPS architecture with adaptive collaborative optimization of security control and communication was constructed.Secondly,through the optimization design of the threshold function in ADETCS,a new type ADETCS was obtained,which could change continuously in both directions with the system’s dynamic behaviors.Then,based on the active attack-tolerant and active fault-tolerant ideas,the Lyapunov function was constructed,and less conservative techniques such as new Bessel-Legebdre inequality and cone complementarity linearization(CCL)were used.Under the unified adaptive variable sampling framework,the solution methods of the robust estimator and integrated security controller were derived so that ICPS could defend against FDI attacks and faults at the same time and have better adaptive communication regulation ability.The simulation results show that the ingenious design of threshold function in the new type ADETCS and the application of CCL can achieve a better compromise between the integrated security control performance and resource saving of ICPS.