A Heterogeneous Redundant Architecture for Industrial Control System Security

Zhihao Dai1; Matthew Leeke1; Yulong Ding2; Shuang-hua Yang2

10.1109/PRDC55274.2022.00023

2022-11-28

1555-094X

978-1-6654-8556-2

2022 IEEE 27th Pacific Rim International Symposium on Dependable Computing (PRDC)

89-97

28 Nov.-1 Dec. 2022

Beijing, China

Component-level heterogeneous redundancy is gaining popularity as an approach for preventing single-point security breaches in Industrial Control Systems (ICSs), especially with regard to core components such as Programmable Logic Controllers (PLCs). To take control of a system with component-level heterogeneous redundancy, an adversary must uncover and concurrently exploit vulnerabilities across multiple versions of hardened components. As such, attackers incur increased costs and delays when seeking to launch a successful attack. Existing approaches advocate attack resilience via pairwise comparison among outputs from multiple PLCs. These approaches incur increased resource costs due to them having a high degree of redundancy and do not address concurrent attacks. In this paper we address both issues, demonstrating a data-driven component selection approach that achieves a trade-off between resources cost and security. In particular, we propose (i) a novel dual-PLC ICS architecture with native pairwise comparison which can offer limited yet comparable defence against single-point breaches, (ii) a machine-learning based selection mechanisms which can deliver resilience against non-concurrent attacks under resource constraints, (iii) a scaled up variant of the proposed architecture to counteract concurrent attacks with modest resource implications.

Industrial Control System Security Redundancy Programmable Logic Controller Machine Learning

其他

IEEE

1.Department of Computer Science, University of Warwick, Coventry, UK
2.Department of Computer Science and Engineering, Shenzhen Key Laboratory of Safety and Security for Next Generation of Industrial Internet, Southern University of Science and Technology, Shenzhen, China

Zhihao Dai,Matthew Leeke,Yulong Ding,et al. A Heterogeneous Redundant Architecture for Industrial Control System Security[C],2022:89-97.