Effect of Intrusion Detection and Response on Reliability of Cyber Physical Systems

• Published in: IEEE transactions on reliability Vol. 62; no. 1; pp. 199 - 210
• Main Authors: Mitchell, R., Chen, I.
• Format: Journal Article
• Language: English
• Published: New York IEEE 01.03.2013; The Institute of Electrical and Electronics Engineers, Inc. (IEEE)
• Subjects: Actuators; Computer information security; Control systems; Cyber physical systems; Infrastructure; Intrusion; Intrusion detection; intrusion response; Mathematical models; Mobile nodes; performance analysis; Reliability; Sensor phenomena and characterization; Stochasticity; Strength
• ISSN: 0018-9529; 1558-1721
• DOI: 10.1109/TR.2013.2240891

In this paper we analyze the effect of intrusion detection and response on the reliability of a cyber physical system (CPS) comprising sensors, actuators, control units, and physical objects for controlling and protecting a physical infrastructure. We develop a probability model based on stochastic Petri nets to describe the behavior of the CPS in the presence of both malicious nodes exhibiting a range of attacker behaviors, and an intrusion detection and response system (IDRS) for detecting and responding to malicious events at runtime. Our results indicate that adjusting detection and response strength in response to attacker strength and behavior detected can significantly improve the reliability of the CPS. We report numerical data for a CPS subject to persistent, random and insidious attacks with physical interpretations given.