.png){kind=icon}
返回
Constructing Cyber-Physical System Testing Suites Using Active Sensor Fuzzing
.png){kind=icon}
OA
AI
DOI：10.1109/TSE.2023.3309330.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Cyber-physical systems (CPSs) automating critical public infrastructure face a pervasive threat of attack, motivating research into different types of countermeasures. Assessing the effectiveness of these countermeasures is challenging, however, as benchmarks are difficult to construct manually, existing automated testing solutions often make unrealistic assumptions, and blindly fuzzing is ineffective at finding attacks due to the enormous search spaces and resource requirements. In this work, we propose active sensor fuzzing, a fully automated approach for building test suites without requiring any a prior knowledge about a CPS. Our approach employs active learning techniques. Applied to a real-world water treatment system, our approach manages to find attacks that drive the system into 15 different unsafe states involving water flow, pressure, and tank levels, including nine that were not covered by an established attack benchmark. Furthermore, we successfully generate targeted multi-point attacks which have been long suspected to be possible. We reveal that active sensor fuzzing successfully extends the attack benchmarks generated by our previous work, an ML-guided fuzzing tool, with two more kinds of attacks. Finally, we investigate the impact of active learning on models and the reason that the model trained with active learning is able to discover more attacks.
Keyword:
Fuzzing
Benchmark testing
Actuators
Predictive models
Space exploration
Data models
Process control
Cyber-physical systems
fuzzing
testing
machine learning
metaheuristic optimisation
期刊
IF:
5.6
论文数:
2.8K
被引数:
1.1W
机构
引用论文
.png){kind=icon}
分享收藏
Amphiphilic Iron(II) and Nickel(II) Complexes Based on Alkylated Diazaoxa‐ and Triazacyclononane
PREAI
分享收藏
查看更多内容