Taxonomy for description of cross-domain attacks on CPS

Authors:
Mark Yampolskiy;Peter Horvath;Xenofon D. Koutsoukos;Yuan Xue;Janos Sztipanovits
Affiliations:
Vanderbilt University, Nashville, TN, USA;Vanderbilt University, Nashville, TN, USA;Vanderbilt University, Nashville, TN, USA;Vanderbilt University, Nashville, TN, USA;Vanderbilt University, Nashville, TN, USA
Venue:
Proceedings of the 2nd ACM international conference on High confidence networked systems
Year:
2013

Citing 7
Cited 0

A taxonomy of computer worms

Proceedings of the 2003 ACM workshop on Rapid malcode
Security in embedded systems: Design challenges

ACM Transactions on Embedded Computing Systems (TECS)
Trojan Detection using IC Fingerprinting

SP '07 Proceedings of the 2007 IEEE Symposium on Security and Privacy
Crossover: Online Pests Plaguing the Offline World

IEEE Security and Privacy
Research challenges for the security of control systems

HOTSEC'08 Proceedings of the 3rd conference on Hot topics in security
Power supply signal calibration techniques for improving detection resolution to hardware Trojans

Proceedings of the 2008 IEEE/ACM International Conference on Computer-Aided Design
Experimental Security Analysis of a Modern Automobile

SP '10 Proceedings of the 2010 IEEE Symposium on Security and Privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

The pervasiveness of Cyber-Physical Systems (CPS) in various aspects of the modern society grows rapidly. This makes CPS to increasingly attractive targets for various kinds of attacks. We consider cyber-security as an integral part of CPS security. Additionally, the necessity exists to investigate the CPS-specific aspects which are out of scope of cyber-security. Most importantly, attacks capable to cross the cyber-physical domain boundary should be analyzed. The vulnerability of CPS to such cross-domain attacks has been practically proven by numerous examples, e.g., by the currently most famous Stuxnet attack. In this paper, we propose taxonomy for description of attacks on CPS. The proposed taxonomy is capable of representing both conventional cyber-attacks as well as cross-domain attacks on CPS. Furthermore, based on the proposed taxonomy, we define the attack categorization. Several possible application areas of the proposed taxonomy are extensively discussed. Among others, it can be used to establish a knowledge base about attacks on CPS known in the literature. Furthermore, the proposed description structure will foster the quantitative and qualitative analysis of these attacks, both of which are necessarily to improve CPS security.