Design-time quantification of integrity in cyber-physical systems

Eric Rothstein Morris; C.G. Murguia Rendon; Martin  Ochoa

doi:10.1145/3139337.3139347

Design-time quantification of integrity in cyber-physical systems

Eric Rothstein Morris, C.G. Murguia Rendon, Martin Ochoa

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic

8 Citations (Scopus)

Abstract

In a software system it is possible to quantify the amount of information that is leaked or corrupted by analysing the flows of information present in the source code. In a cyber-physical system, information flows are not only present at the digital level but also at a physical level, and they are also present to and fro the two levels. In this work, we provide a methodology to formally analyse a composite, cyber-physical system model (combining physics and control) using an information flow-theoretic approach. We use this approach to quantify the level of vulnerability of a system with respect to attackers with different capabilities. We illustrate our approach by means of a water distribution case study.

Original language	English
Title of host publication	PLAS 2017 - Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, co-located with CCS 2017
Place of Publication	New York
Publisher	Association for Computing Machinery, Inc
Pages	63–74
Number of pages	12
ISBN (Electronic)	9781450350990
DOIs	https://doi.org/10.1145/3139337.3139347
Publication status	Published - 1 Oct 2017
Externally published	Yes
Event	PLAS '17: Workshop on Programming Languages and Analysis for Security - Dallas, United States Duration: 30 Oct 2017 → 30 Oct 2017

Conference

Conference	PLAS '17: Workshop on Programming Languages and Analysis for Security
Country/Territory	United States
City	Dallas
Period	30/10/17 → 30/10/17

Keywords

Control theory
Cyber-physical systems
Information flow
Noninterference

Access to Document

10.1145/3139337.3139347

Cite this

@inproceedings{2801bb3e4c944bf1a377ad74ca90eea5,

title = "Design-time quantification of integrity in cyber-physical systems",

abstract = "In a software system it is possible to quantify the amount of information that is leaked or corrupted by analysing the flows of information present in the source code. In a cyber-physical system, information flows are not only present at the digital level but also at a physical level, and they are also present to and fro the two levels. In this work, we provide a methodology to formally analyse a composite, cyber-physical system model (combining physics and control) using an information flow-theoretic approach. We use this approach to quantify the level of vulnerability of a system with respect to attackers with different capabilities. We illustrate our approach by means of a water distribution case study.",

keywords = "Control theory, Cyber-physical systems, Information flow, Noninterference",

author = "Morris, {Eric Rothstein} and {Murguia Rendon}, C.G. and Martin Ochoa",

year = "2017",

month = oct,

day = "1",

doi = "10.1145/3139337.3139347",

language = "English",

pages = "63–74",

booktitle = "PLAS 2017 - Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, co-located with CCS 2017",

publisher = "Association for Computing Machinery, Inc",

address = "United States",

note = "PLAS '17: Workshop on Programming Languages and Analysis for Security ; Conference date: 30-10-2017 Through 30-10-2017",

}

Morris, ER, Murguia Rendon, CG & Ochoa, M 2017, Design-time quantification of integrity in cyber-physical systems. in PLAS 2017 - Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, co-located with CCS 2017. Association for Computing Machinery, Inc, New York, pp. 63–74, PLAS '17: Workshop on Programming Languages and Analysis for Security, Dallas, United States, 30/10/17. https://doi.org/10.1145/3139337.3139347

Design-time quantification of integrity in cyber-physical systems. / Morris, Eric Rothstein; Murguia Rendon, C.G.; Ochoa, Martin .
PLAS 2017 - Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, co-located with CCS 2017. New York: Association for Computing Machinery, Inc, 2017. p. 63–74.

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic

TY - GEN

T1 - Design-time quantification of integrity in cyber-physical systems

AU - Morris, Eric Rothstein

AU - Murguia Rendon, C.G.

AU - Ochoa, Martin

PY - 2017/10/1

Y1 - 2017/10/1

N2 - In a software system it is possible to quantify the amount of information that is leaked or corrupted by analysing the flows of information present in the source code. In a cyber-physical system, information flows are not only present at the digital level but also at a physical level, and they are also present to and fro the two levels. In this work, we provide a methodology to formally analyse a composite, cyber-physical system model (combining physics and control) using an information flow-theoretic approach. We use this approach to quantify the level of vulnerability of a system with respect to attackers with different capabilities. We illustrate our approach by means of a water distribution case study.

AB - In a software system it is possible to quantify the amount of information that is leaked or corrupted by analysing the flows of information present in the source code. In a cyber-physical system, information flows are not only present at the digital level but also at a physical level, and they are also present to and fro the two levels. In this work, we provide a methodology to formally analyse a composite, cyber-physical system model (combining physics and control) using an information flow-theoretic approach. We use this approach to quantify the level of vulnerability of a system with respect to attackers with different capabilities. We illustrate our approach by means of a water distribution case study.

KW - Control theory

KW - Cyber-physical systems

KW - Information flow

KW - Noninterference

UR - http://www.scopus.com/inward/record.url?scp=85043357763&partnerID=8YFLogxK

U2 - 10.1145/3139337.3139347

DO - 10.1145/3139337.3139347

M3 - Conference contribution

SP - 63

EP - 74

BT - PLAS 2017 - Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, co-located with CCS 2017

PB - Association for Computing Machinery, Inc

CY - New York

T2 - PLAS '17: Workshop on Programming Languages and Analysis for Security

Y2 - 30 October 2017 through 30 October 2017

ER -

Design-time quantification of integrity in cyber-physical systems

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this