论文标题

检测电磁信号注射对执行器系统的攻击

Detection of Electromagnetic Signal Injection Attacks on Actuator Systems

论文作者

Zhang, Youqian, Rasmussen, Kasper

论文摘要

执行器是一种将电力转换为另一种能量(通常是物理运动)的设备。对于任何需要影响或修改物理世界的系统,它们都是至关重要的,并且用于全世界数百万个各种系统的系统,从汽车和航天器到工厂控制系统和关键基础架构。执行器是一种完全由周围电子产品(例如微控制器)控制的“愚蠢设备”,因此无法对其控制信号进行身份验证或执行任何其他形式的处理。我们在本文中看到的问题是如何将执行器连接到其控制电子设备的电线如何像天线一样起作用,从环境中拾取电磁信号。这使得远程攻击者可以无线注入信号(能量)将其注入这些电线,以绕过控制器并直接控制执行器。 为了检测此类攻击,我们提出了一种新颖的检测方法,该方法允许微控制器监视控制信号并将攻击作为偏离预期值的偏差。我们已经设法这样做,而无需微控制器以高速率采样信号或运行任何信号处理。这使我们的防御机制实用,易于整合到现有系统中。我们的方法是一般的,并且适用于任何类型的执行器(前提是满足了一些基本假设),并且可以处理具有任意高传输功率的对手。我们对两个不同实用系统实施检测方法,以显示其一般性,有效性和鲁棒性。

An actuator is a device that converts electricity into another form of energy, typically physical movement. They are absolutely essential for any system that needs to impact or modify the physical world, and are used in millions of systems of all sizes, all over the world, from cars and spacecraft to factory control systems and critical infrastructure. An actuator is a "dumb device" that is entirely controlled by the surrounding electronics, e.g., a microcontroller, and thus cannot authenticate its control signals or do any other form of processing. The problem we look at in this paper is how the wires that connect an actuator to its control electronics can act like antennas, picking up electromagnetic signals from the environment. This makes it possible for a remote attacker to wirelessly inject signals (energy) into these wires to bypass the controller and directly control the actuator. To detect such attacks, we propose a novel detection method that allows the microcontroller to monitor the control signal and detect attacks as a deviation from the intended value. We have managed to do this without requiring the microcontroller to sample the signal at a high rate or run any signal processing. That makes our defense mechanism practical and easy to integrate into existing systems. Our method is general and applies to any type of actuator (provided a few basic assumptions are met), and can deal with adversaries with arbitrarily high transmission power. We implement our detection method on two different practical systems to show its generality, effectiveness, and robustness.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源