论文标题

面向情境意识的网络物理系统:基于区块链的数字双胞胎的安全性用例

Towards Situational Aware Cyber-Physical Systems: A Security-Enhancing Use Case of Blockchain-based Digital Twins

论文作者

Suhail, Sabah, Malik, Saif Ur Rehman, Jurdak, Raja, Hussain, Rasheed, Matulevičius, Raimundas, Svetinovic, Davor

论文摘要

网络物理系统(CPSS)中网络攻击的复杂性要求一种机制,可以评估关键基础架构的运营行为和安全性,而不会影响实时系统的运行。在这方面,数字双胞胎(DTS)通过监视,模拟,预测和优化CPS的状态提供了可行的见解。通过用例,包括系统测试和培训,检测系统错误配置以及安全性测试,DTS可以在整个产品生命周期内增强CPSS的安全性。但是,DTS的这些好处取决于对数据完整性和安全性的假设。数据可信度变得更加至关重要,同时在各种利益相关者拥有的不同DT之间集成了多个组件,以提供复杂物理系统的汇总视图。本文设想了一个基于区块链的DT框架作为可信赖的双胞胎,用于确保网络物理系统(TTS-CPS)。以汽车行业为CPS用例,我们在概念证明中证明了TTS-CPS框架的生存能力。为了利用可靠的系统规范数据来构建DTS的过程知识,我们通过完整性检查机制确保数据生成源的可信度。此外,从区块链中存储和检索了在模拟过程中评估的安全和安全规则,从而对基础系统做出的决策建立了更多的理解和信心。最后,我们对TTS-CPS进行正式验证。

The complexity of cyberattacks in Cyber-Physical Systems (CPSs) calls for a mechanism that can evaluate critical infrastructures' operational behaviour and security without affecting the operation of live systems. In this regard, Digital Twins (DTs) provide actionable insights through monitoring, simulating, predicting, and optimizing the state of CPSs. Through the use cases, including system testing and training, detecting system misconfigurations, and security testing, DTs strengthen the security of CPSs throughout the product lifecycle. However, such benefits of DTs depend on an assumption about data integrity and security. Data trustworthiness becomes more critical while integrating multiple components among different DTs owned by various stakeholders to provide an aggregated view of the complex physical system. This article envisions a blockchain-based DT framework as Trusted Twins for Securing Cyber-Physical Systems (TTS-CPS). With the automotive industry as a CPS use case, we demonstrate the viability of the TTS-CPS framework in a proof of concept. To utilize reliable system specification data for building the process knowledge of DTs, we ensure the trustworthiness of data-generating sources through integrity checking mechanisms. Additionally, the safety and security rules evaluated during simulation are stored and retrieved from the blockchain, thereby establishing more understanding and confidence in the decisions made by the underlying systems. Finally, we perform formal verification of the TTS-CPS.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源