Noise matters: using sensor and process noise fingerprint to detect stealthy cyber attacks and authenticate sensors in CPS

Chuadhry Mujeeb Ahmed, Jianying Zhou, Aditya P. Mathur

Research output: Chapter in Book/Report/Conference proceedingConference contribution book

Abstract

A novel scheme is proposed to authenticate sensors and detect data integrity attacks in a Cyber Physical System (CPS). The proposed technique uses the hardware characteristics of a sensor and physics of a process to create unique patterns (herein termed as fingerprints) for each sensor. The sensor fingerprint is a function of sensor and process noise embedded in sensor measurements. Uniqueness in the noise appears due to manufacturing imperfections of a sensor and due to unique features of a physical process. To create a sensor's fingerprint a system-model based approach is used. A noise-based fingerprint is created during the normal operation of the system. It is shown that under data injection attacks on sensors, noise pattern deviations from the fingerprinted pattern enable the proposed scheme to detect attacks. Experiments are performed on a dataset from a real-world water treatment (SWaT) facility. A class of stealthy attacks is designed against the proposed scheme and extensive security analysis is carried out. Results show that a range of sensors can be uniquely identified with an accuracy as high as 98%. Extensive sensor identification experiments are carried out on a set of sensors in SWaT testbed. The proposed scheme is tested on a variety of attack scenarios from the reference literature which are detected with high accuracy
Original languageEnglish
Title of host publicationProceedings of the 34th Annual Computer Security Applications Conference - ACSAC 2018
Place of PublicationNew York, NY, USA
Pages566–581
Number of pages16
DOIs
Publication statusPublished - 7 Dec 2018
Event34th Annual Computer Security Applications Conference - ACSAC 2018 - San Juan, Puerto Rico
Duration: 3 Dec 20187 Dec 2018

Publication series

NameACSAC '18
PublisherAssociation for Computing Machinery

Conference

Conference34th Annual Computer Security Applications Conference - ACSAC 2018
Abbreviated titleACSAC2018
CountryPuerto Rico
CitySan Juan
Period3/12/187/12/18

Keywords

  • device fingerprinting
  • security
  • cyber physical systems
  • sensor fingerprinting
  • authentication
  • sensors and actuators
  • CPS/ICS security
  • attacks on sensors
  • physical attacks

Fingerprint

Dive into the research topics of 'Noise matters: using sensor and process noise fingerprint to detect stealthy cyber attacks and authenticate sensors in CPS'. Together they form a unique fingerprint.

Cite this