Enhanching Security in the Future Cyber Physical Systems

Cyber Physical System (CPS) is a system where cyber and physical components work in a complex co-ordination to provide better performance. By exploiting the communication infrastructure among the sensors, actuators, and control systems, attackers may compromise the security of a CPS. In this dissertation, security measures for different types of attacks/ faults in two CPSs, water supply system (WSS) and smart grid system, are presented. In this context, I also present my study on energy management in Smart Grid. The techniques for detecting attacks/faults in both WSS and Smart grid system adopt Kalman Filter (KF) and χ2 detector. The χ2 -detector can detect myriad of system fault- s/attacks such as Denial of Service (DoS) attack, short term and long term random attacks. However, the study shows that the χ2 -detector is unable to detect the intelligent False Data Injection attack (FDI). To overcome this limitation, I present a Euclidean detector for smart grid which can effectively detect such injection attacks. Along with detecting attack/faults I also present the isolation of the attacked/faulty nodes for smart grid. For isolation the Gen- eralized Observer Scheme (GOS) implementing Kalman Filter is used. As GOS is effective in isolating attacks/faults on a single sensor, it is unable to isolate simultaneous attacks/faults on multiple sensors. To address this issue, an Iterative Observer Scheme (IOS) is presented which is able to detect attack on multiple sensors. Since network is an integral part of the future CPSs, I also present a scheme for pre- serving privacy in the future Internet architecture, namely MobilityFirst architecture. The proposed scheme, called Anonymity in MobilityFirst (AMF), utilizes the three-tiered ap- proach to effectively exploit the inherent properties of MF Network such as Globally Unique Flat Identifier (GUID) and Global Name Resolution Service (GNRS) to provide anonymity to the users. While employing new proposed schemes in exchanging of keys between different tiers of routers to alleviate trust issues, the proposed scheme uses multiple routers in each tier to avoid collaboration amongst the routers in the three tiers to expose the end users

Combined signal and model-based sensor fault diagnosis for a doubly fed induction generator

The problem of multiplicative and/or additive fault detection and isolation (FDI) in the current sensors of a doubly fed induction generator (DFIG) is considered in the presence of model uncertainty. A residual generator based on the DFIG model is proposed using the structure of the classical generalized observer scheme. However, each observer in this scheme is replaced by a robust H-/H8 fault detection filter followed by a Kalman-like observer. The latter further attenuates the effect of the modeling uncertainties on the residuals. It exploits the specific pattern induced by the balanced three-phase nature of all the electric signals. It turns out that the FDI problem then amounts to detecting an abrupt change in the mean of the residual vector in the additive fault case, or the appearance of sine waves superimposed on a white noise vector in the multiplicative fault case. A decision algorithm made of a combination of generalized likelihood ratio algorithms allows us to detect and isolate the additive and multiplicative sensor faults. The complete FDI system is tested through simulations on a controlled DFIG. © 2012 IEEE.SCOPUS: ar.jinfo:eu-repo/semantics/publishe