Enforcement of opacity security properties for ship information system
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
In this paper, we consider the cybersecurity issue of ship information system (SIS) from a new perspective which is called opacity. For a SIS, its confidential information (named as “secret”) may be leaked through the working behaviors of each Distributed Control Unit (DCU) from an outside observer called an “intruder” which is able to determine ship's mission state by detecting the source of each data flow from the corresponding DCUs in SIS. Therefore we proposed a dual layer mechanism to enforce opacity by activating non-essential DCU during secret mission. This mechanism is calculated by two types of insertion functions: Safety-assured insertion function ( fIS) and Admissibility-assured insertion function ( fIA). Due to different objectives, fIS is designed to confuse intruder by constructing a non-secret behaviors from a unsafe one, and the division of fIA is to polish the modified output behaviors back to normal. We define the property of “I2eEnforceability” that dual layer insertion functions has the ability to enforce opacity. By a given mission map of SIS and the marked secret missions, we propose an algorithm to select fIS and compute its matchable fIA and then the DCUs which should be activated to release non-essential data flow in each step is calculable.
Abstract
In this paper, we consider the cybersecurity issue of ship information system (SIS) from a new perspective which is called opacity. For a SIS, its confidential information (named as “secret”) may be leaked through the working behaviors of each Distributed Control Unit (DCU) from an outside observer called an “intruder” which is able to determine ship's mission state by detecting the source of each data flow from the corresponding DCUs in SIS. Therefore we proposed a dual layer mechanism to enforce opacity by activating non-essential DCU during secret mission. This mechanism is calculated by two types of insertion functions: Safety-assured insertion function ( fIS) and Admissibility-assured insertion function ( fIA). Due to different objectives, fIS is designed to confuse intruder by constructing a non-secret behaviors from a unsafe one, and the division of fIA is to polish the modified output behaviors back to normal. We define the property of “I2eEnforceability” that dual layer insertion functions has the ability to enforce opacity. By a given mission map of SIS and the marked secret missions, we propose an algorithm to select fIS and compute its matchable fIA and then the DCUs which should be activated to release non-essential data flow in each step is calculable.
참고문헌 (19)
- Ben-Kalefa, M., "Supervisory control for opacity of discrete event systems", Communication, Control, and Computing (Allerton), 2011 49th Annual Allerton Conference on, pp.1113~1119 (2011), IEEE
- Bryans, J. W., "Opacity generalised to transition systems", Int. J. Inf. Secur, 7(6), pp.421~435 (2008)
- Cassez, F., "Synthesis of opaque systems with static and dynamic masks", Formal Methods Syst. Des, 40(1), pp.88~115 (2012)
- Dubreil, J., "Supervisory control for opacity, automatic control", IEEE Trans, 55(5), pp.1089~1100 (2010)
- Falcone, Y., "Enforcement and validation (at runtime) of various notions of opacity", Discret. Event Dyn. Syst, 25(4), pp.531~570 (2015)
- Jacob, R., "Opacity of discrete event systems: models, validation and quantification", IFAC-PapersOnLine, 48(7), pp.174~181 (2015)
- Kumari, S., "More secure smart card-based remote user password authentication scheme with user anonymity", Secur. Commun. Netw, 7(11), pp.2039~2053 (2014)
- Liang, Y., "Information theoretic security", Found. Trends Commun. Inf. Theory, 5(4-5), pp.355~580 (2009)
- Lin, F., "Opacity of discrete event systems and its applications", Automatica, 47(3), pp.496~503 (2011)
- Sheng Liu, "Ship information system: overview and research trends", International Journal of Naval Architecture and Ocean Engineering, 6(3), pp.670~684 (2014), 대한조선학회
- Mazare, L., "Using unification for opacity properties", Proceedings of the 4th IFIP WG1, 7, pp.165~176 (2004)
- Rabbachin, A., "Wireless network intrinsic secrecy", Netw. IEEE ACM Trans, 23(1), pp.56~69 (2015)
- Takai, S., "A formula for the supremal controllable and opaque sublanguage arising in supervisory control", SICE J. Control Meas. Syst. Integr, 1(4), pp.307~311 (2008)
- Wang, D., "On the anonymity of two-factor authentication schemes for wireless sensor networks: attacks, principle and solutions", Comput. Netw, 73, pp.41~57 (2014)
- Wu, Y. -C., "Enforcement of opacity properties using insertion functions", Decision and Control (CDC), 2012 IEEE 51st Annual Conference on, pp.6722~6728 (2012), IEEE
- Wu, Y. -C., "Comparative analysis of related notions of opacity in centralized and coordinated architectures", Discret. Event Dyn. Syst, 23(3), pp.307~339 (2013)
- Wu, Y. -C., "Synthesis of insertion functions for enforcement of opacity security properties", Automatica, 50(5), pp.1336~1348 (2014)
- Xing, B., "Actuator channel setting strategy for ship information systems based on reachability analysis and physical characteristic", Environment and Electrical Engineering (EEEIC), 2015 IEEE 15th International Conference on, pp.932~937 (2015), IEEE
- Xing, B., "Design of sensor data flow for ship information system", J. Ship Prod. Des