Mitigating Emergent Safety and Security Incidents of CPS by a Protective Shell

In today's modern world, Cyber-Physical Systems (CPS) have gained widespread prevalence, offering tremendous benefits while also increasing society's dependence on them. Given the direct interaction of CPS with the physical environment, their malfunction or compromise can pose significant risks to human life, property, and the environment. However, as the complexity of CPS rises due to heightened expectations and expanded functional requirements, ensuring their trustworthy operation solely during the development process becomes increasingly challenging. This thesis introduces and delves into the novel concept of the 'Protective Shell' – a real-time safeguard actively monitoring CPS during their operational phases. The protective shell serves as a last line of defence, designed to detect abnormal behaviour, conduct thorough analyses, and initiate countermeasures promptly, thereby mitigating unforeseen risks in real-time. The primary objective of this research is to enhance the overall safety and security of CPS by refining, partly implementing, and evaluating the innovative protective shell concept. To provide context for collaborative systems working towards higher objectives — common within CPS as system-of-systems (SoS) — the thesis introduces the 'Emergence Matrix'. This matrix categorises outcomes of such collaboration into four quadrants based on their anticipated nature and desirability. Particularly concerning are outcomes that are both unexpected and undesirable, which frequently serve as the root cause of safety accidents and security incidents in CPS scenarios. The protective shell plays a critical role in mitigating these unfavourable outcomes, as conventional vulnerability elimination procedures during the CPS design phase prove insufficient due to their inability to proactively anticipate and address these unforeseen situations. Employing the design science research methodology, the thesis is structured around its iterative cycles and the research questions imposed, offering a systematic exploration of the topic. A detailed analysis of various safety accidents and security incidents involving CPS was conducted to retrieve vulnerabilities that led to dangerous outcomes. By developing specific protective shells for each affected CPS and assessing their effectiveness during these hazardous scenarios, a generic core for the protective shell concept could be retrieved, indicating general characteristics and its overall applicability. Furthermore, the research presents a generic protective shell architecture, integrating advanced anomaly detection techniques rooted in explainable artificial intelligence (XAI) and human machine teaming. While the implementation of protective shells demonstrate substantial positive impacts in ensuring CPS safety and security, the thesis also articulates potential risks associated with their deployment that require careful consideration. In conclusion, this thesis makes a significant contribution towards the safer and more secure integration of complex CPS into daily routines, critical infrastructures and other sectors by leveraging the capabilities of the generic protective shell framework.:1 Introduction 1.1 Background and Context 1.2 Research Problem 1.3 Purpose and Objectives 1.3.1 Thesis Vision 1.3.2 Thesis Mission 1.4 Thesis Outline and Structure 2 Design Science Research Methodology 2.1 Relevance-, Rigor- and Design Cycle 2.2 Research Questions 3 Cyber-Physical Systems 3.1 Explanation 3.2 Safety- and Security-Critical Aspects 3.3 Risk 3.3.1 Quantitative Risk Assessment 3.3.2 Qualitative Risk Assessment 3.3.3 Risk Reduction Mechanisms 3.3.4 Acceptable Residual Risk 3.4 Engineering Principles 3.4.1 Safety Principles 3.4.2 Security Principles 3.5 Cyber-Physical System of Systems (CPSoS) 3.5.1 Emergence 4 Protective Shell 4.1 Explanation 4.2 System Architecture 4.3 Run-Time Monitoring 4.4 Definition 4.5 Expectations / Goals 5 Specific Protective Shells 5.1 Boeing 737 Max MCAS 5.1.1 Introduction 5.1.2 Vulnerabilities within CPS 5.1.3 Specific Protective Shell Mitigation Mechanisms 5.1.4 Protective Shell Evaluation 5.2 Therac-25 5.2.1 Introduction 5.2.2 Vulnerabilities within CPS 5.2.3 Specific Protective Shell Mitigation Mechanisms 5.2.4 Protective Shell Evaluation 5.3 Stuxnet 5.3.1 Introduction 5.3.2 Exploited Vulnerabilities 5.3.3 Specific Protective Shell Mitigation Mechanisms 5.3.4 Protective Shell Evaluation 5.4 Toyota 'Unintended Acceleration' ETCS 5.4.1 Introduction 5.4.2 Vulnerabilities within CPS 5.4.3 Specific Protective Shell Mitigation Mechanisms 5.4.4 Protective Shell Evaluation 5.5 Jeep Cherokee Hack 5.5.1 Introduction 5.5.2 Vulnerabilities within CPS 5.5.3 Specific Protective Shell Mitigation Mechanisms 5.5.4 Protective Shell Evaluation 5.6 Ukrainian Power Grid Cyber-Attack 5.6.1 Introduction 5.6.2 Vulnerabilities in the critical Infrastructure 5.6.3 Specific Protective Shell Mitigation Mechanisms 5.6.4 Protective Shell Evaluation 5.7 Airbus A400M FADEC 5.7.1 Introduction 5.7.2 Vulnerabilities within CPS 5.7.3 Specific Protective Shell Mitigation Mechanisms 5.7.4 Protective Shell Evaluation 5.8 Similarities between Specific Protective Shells 5.8.1 Mitigation Mechanisms Categories 5.8.2 Explanation 5.8.3 Conclusion 6 AI 6.1 Explainable AI (XAI) for Anomaly Detection 6.1.1 Anomaly Detection 6.1.2 Explainable Artificial Intelligence 6.2 Intrinsic Explainable ML Models 6.2.1 Linear Regression 6.2.2 Decision Trees 6.2.3 K-Nearest Neighbours 6.3 Example Use Case - Predictive Maintenance 7 Generic Protective Shell 7.1 Architecture 7.1.1 MAPE-K 7.1.2 Human Machine Teaming 7.1.3 Protective Shell Plugin Catalogue 7.1.4 Architecture and Design Principles 7.1.5 Conclusion Architecture 7.2 Implementation Details 7.3 Evaluation 7.3.1 Additional Vulnerabilities introduced by the Protective Shell 7.3.2 Summary 8 Conclusion 8.1 Summary 8.2 Research Questions Evaluation 8.3 Contribution 8.4 Future Work 8.5 Recommendatio

Life Cycle Inventory of Softwood Lumber from the Inland Northwest US

As part of CORRIM Phase II life-cycle inventory (LCI) studies on forestry and wood products, this study completed a gate-to-gate life LCI for the production of softwood lumber produced in the Inland Northwest region of the US. Data were collected by surveying representative softwood lumber producers. Raw material use, heat energy, fuels, electrical consumption, and associated wood production emissions represented input data into the LCI. The combined annual production of the representative softwood manufacturers was 16% of the total annual regional production of 755,852 m3. Thermal energy requirements made a significant contribution to the total energy consumption for wood production. In this study, approximately 72% of the total energy was used for drying green lumber to 15% MC. Thermal energy was generated both from wood fuel and natural gas, representing 54 and 46% of the total, respectively

Combinations of idelalisib with rituximab and/or bendamustine in patients with recurrent indolent non-Hodgkin lymphoma

Key Points Combining phosphatidylinositol-3-kinase δ inhibition with rituximab, bendamustine, or both is feasible and active in relapsed iNHL. The safety of novel combinations should be proven in phase 3 trials before adoption in clinical practice.</jats:p

Scale decomposition in compressible turbulence

This work presents a rigorous framework based on coarse-graining to analyze highly compressible turbulence. We show how the requirement that viscous effects on the dynamics of large-scale momentum and kinetic energy be negligible ---an inviscid criterion--- naturally supports a density weighted coarse-graining of the velocity field. Such a coarse-graining method is already known in the literature as Favre filtering; however its use has been primarily motivated by appealing modeling properties rather than underlying physical considerations. We also prove that kinetic energy injection can be localized to the largest scales by proper stirring, and argue that stirring with an external acceleration field rather than a body force would yield a longer inertial range in simulations. We then discuss the special case of buoyancy-driven flows subject to a spatially-uniform gravitational field. We conclude that a range of scales can exist over which the mean kinetic energy budget is dominated by inertial processes and is immune from contributions due to molecular viscosity and external stirring.Comment: 31 pages, 1 figure, to appear in Physica

A novel fluorescent probe for NAD-consuming enzymes

A novel, fluorescent NAD derivative is processed as substrate by three different NAD-consuming enzymes. The new probe has been used to monitor enzymatic activity in a continuous format by changes in fluorescence and, in one case, to directly visualize alternative reaction pathways

Shock-heating of stellar envelopes: A possible common mechanism at the origin of explosions and eruptions in massive stars

Observations of transient phenomena in the Universe reveal a spectrum of mass-ejection properties associated with massive stars, covering from Type II/Ib/Ic core-collapse supernovae (SNe) to giant eruptions of Luminous Blue Variables (LBV) and optical transients. Here, we hypothesize that a fraction of these phenomena may have an explosive origin, the distinguishing ingredient being the ratio of the prompt energy release E_dep to the envelope binding energy E_binding. Using one-dimensional one-group radiation hydrodynamics and a set of 10-25Msun, massive-star models, we explore the dynamical response of a stellar envelope subject to a strong, sudden, and deeply-rooted energy release. Following energy deposition, a shock systematically forms, crosses the progenitor envelope on a day timescale, and breaks-out with a signal of hour-to-days duration and a 10^5-10^11 Lsun luminosity. For E_dep > E_binding, full envelope ejection results with a SN-like bolometric luminosity and kinetic energy, modulations being commensurate to the energy deposited and echoing the diversity of Type II-Plateau SNe. For E_dep ~ E_binding, partial envelope ejection results with a small expansion speed, and a more modest but year-long luminosity plateau, reminiscent of LBV eruptions or so-called SN impostors. For E_dep < E_binding, we obtain a "puffed-up" star, secularly relaxing back to thermal equilibrium. In parallel with gravitational collapse and Type II SNe, we argue that the thermonuclear combustion of merely a few 0.01Msun of C/O could power a wide range of explosions/eruptions in loosely-bound massive stars, as those in the 8-12Msun range, or in more massive ones owing to their proximity to the Eddington limit and/or critical rotation.Comment: 20 pages, 16 figures, 2 tables; accepted to MNRA

Topics in coarsening phenomena

These lecture notes give a very short introduction to coarsening phenomena and summarize some recent results in the field. They focus on three aspects: the super-universality hypothesis, the geometry of growing structures, and coarsening in the spiral kinetically constrained model.Comment: Lecture notes. Fundamental Problems in Statistical Physics XII, Leuven, Aug 30 - Sept 12, 200

New Insights from Seafloor Mapping of a Hawaiian Marine Monument

On 15 June 2006, when U.S. President George W. Bush signed the proclamation creating the Papahānaumokuākea Marine National Monument (PMNM), he probably wasn’t thinking about underwater morphology. To fully understand the coral reefs and marine ecosystems that the monument was created to protect, however, scientists need to have a detailed picture of the seafloor features, home to corals and other species, as well as the geologic history of the area. Thanks to a recent, multi-institution expedition, such a seafloor features that will not only inform conservation efforts but also enable geologists and geophysicists to revise their understanding of Hawaii’s complex geologic past. Specifically, data should help scientists answer fundamental questions about the area’s regional geology. For instance, which seamounts were truly formed because of Hawaiian hotspot volcanism, and which seamounts were not