CoChat
Sign Up
Cited by 211Smart Grid Security and ResilienceInformation and Cyber SecurityNetwork Security and Intrusion Detection

State of the art of cyber-physical systems security: An automatic control perspective

Open access
Zacchia Lun, Yuriy, D’Innocenzo, Alessandro, Smarra, Francesco, Malavolta, Ivano, Di Benedetto, Maria Domenica·2019·Journal of Systems and Software
DOI 10.1016/j.jss.2018.12.006

Published version of a preprint

Open this paper in CoChat — free account

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1016/j.jss.2018.12.006

Cites

219 of 219 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 76

  1. [7][7] E. Lee, 'Cyber physical systems: Design challenges,' in ISORC , 2008, pp. 363-369. -
  2. [8][8] --, 'CPS foundations,' in DAC , 2010, pp. 737-742. -
  3. [11][11] N. Wiener, Cybernetics or Control and Communication in the Animal and the Machine . MIT press, 1965, vol. 25. -
  4. [14][14] R. Rajkumar, I. Lee, L. Sha, and J. Stankovic, 'Cyber-physical systems: The next computing revolution,' in Proceedings of the 47th Design Automation Conference , ser. DAC '10. ACM, 2010, pp. 731-736. -
  5. [15][15] K. Koscher, A. Czeskis, F. Roesner, S. Patel, T. Kohno, S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, and S. Savage, 'Experimental security analysis of a modern automobile,' in Security and Privacy (SP), 2010 IEEE Symposium on . IEEE, 2010, pp. 447462. -
  6. [16][16] D. Halperin, T. Heydt-Benjamin, B. Ransford, S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. Maisel, 'Pacemakers and Implantable Cardiac Defibrillators: Software Radio Attacks and ZeroPower Defenses,' in Security and Privacy, 2008. SP 2008. IEEE Symposium on , May 2008, pp. 129-142. -
  7. [18][18] A. Teixeira, D. P´ erez, H. Sandberg, and K. Johansson, 'Attack Models and Scenarios for Networked Control Systems,' in Proceedings of the 1st International Conference on High Confidence Networked Systems , ser. HiCoNS '12. ACM, 2012, pp. 55-64. -
  8. [19][19] D. Denning, 'An Intrusion-Detection Model,' IEEE Trans. Softw. Eng. , vol. 13, no. 2, pp. 222-232, February 1987. -
  9. [20][20] A. Carcano, A. Coletta, M. Guglielmi, M. Masera, I. Fovino, and A. Trombetta, 'A Multidimensional Critical State Analysis for Detecting Intrusions in SCADA Systems,' Industrial Informatics, IEEE Transactions on , vol. 7, no. 2, pp. 179-186, May 2011. -
  10. [24][24] J. Mirkovic and P. Reiher, 'A Taxonomy of DDoS Attack and DDoS Defense Mechanisms,' SIGCOMM Comput. Commun. Rev. , vol. 34, no. 2, pp. 39-53, April 2004. -
  11. [25][25] C. Kwon, W. Liu, and I. Hwang, 'Security analysis for Cyber-Physical Systems against stealthy deception attacks,' in American Control Conference (ACC), 2013 , June 2013, pp. 3344-3349. -
  12. [26][26] K. Tiri, 'Side-channel attack pitfalls,' in Proceedings of the 44th Annual Design Automation Conference , ser. DAC '07. New York, NY, USA: ACM, 2007, pp. 15-20. -
  13. [27][27] P. Kocher, R. Lee, G. McGraw, and A. Raghunathan, 'Security as a new dimension in embedded system design,' in Proceedings of the 41st Annual Design Automation Conference , ser. DAC '04. New York, NY, USA: ACM, 2004, pp. 753-760, moderator - S. Ravi. -
  14. [28][28] M. Bishop, The Art and Science of Computer Security . Boston, MA, USA: Addison-Wesley Longman Publishing Co., Inc., 2002. -
  15. [29][29] J. Alves-Foss, P. Oman, C. Taylor, and W. Harrison, 'The MILS architecture for high-assurance embedded systems,' International journal of embedded systems , vol. 2, no. 3, pp. 239-247, 2006. -
  16. [30][30] E. Bakolas and J. Saleh, 'Augmenting defense-in-depth with the concepts of observability and diagnosability from control theory and discrete event systems,' Reliability Engineering & System Safety , vol. 96, no. 1, pp. 184-193, 2011, special Issue on Safecomp 2008. -
  17. [31][31] V. Casola, A. De Benedictis, and M. Albanese, 'A multi-layer moving target defense approach for protecting resource-constrained distributed devices,' in Integration of Reusable Systems , ser. Advances in Intelligent Systems and Computing, T. Bouabana-Tebibel and S. Rubin, Eds. Springer International Publishing, 2014, vol. 263, pp. 299-324. -
  18. [32][32] J. Saltzer and M. Schroeder, 'The protection of information in computer systems,' Proceedings of the IEEE , vol. 63, no. 9, pp. 1278-1308, September 1975. -
  19. [33][33] E. Wang, Y. Ye, X. Xu, S. Yiu, L. K. Hui, and K. Chow, 'Security Issues and Challenges for Cyber Physical System,' in Proceedings of the 2010 IEEE/ACM Int'L Conference on Green Computing and Communications & Int'L Conference on Cyber, Physical and Social Computing , ser. GREENCOM-CPSCOM '10. Washington, DC, USA: IEEE Computer Society, 2010, pp. 733-738. -
  20. [34][34] M. Pajic, J. Weimer, N. Bezzo, P. Tabuada, O. Sokolsky, I. Lee, and G. Pappas, 'Robustness of attack-resilient state estimators,' in CyberPhysical Systems (ICCPS), 2014 ACM/IEEE International Conference on , April 2014, pp. 163-174. -
  21. [35][35] P. Manadhata and J. Wing, 'An attack surface metric,' Software Engineering, IEEE Transactions on , vol. 37, no. 3, pp. 371-386, May 2011. -
  22. [36][36] E. LeMay, M. Ford, K. Keefe, W. Sanders, and C. Muehrcke, 'Modelbased security metrics using ADversary VIew Security Evaluation (ADVISE),' in Quantitative Evaluation of Systems (QEST), 2011 Eighth International Conference on , September 2011, pp. 191-200. -
  23. [37][37] K. Sallhammar, 'Stochastic models for combined security and dependability evaluation,' Ph.D. dissertation, Norwegian University of Science and Technology, 2007. -
  24. [38][38] S. Zonouz, C. Davis, K. Davis, R. Berthier, R. Bobba, and W. Sanders, 'SOCCA: A security-oriented cyber-physical contingency analysis in power infrastructures,' Smart Grid, IEEE Transactions on , vol. 5, no. 1, pp. 3-13, January 2014. -
  25. [39][39] B. Beckert and R. H¨ ahnle, 'Reasoning and verification: State of the art and current trends,' IEEE Intelligent Systems , vol. 29, no. 1, pp. 20-29, January 2014. -
  26. [40][40] D. Bresolin, L. Di Guglielmo, L. Geretti, R. Muradore, P. Fiorini, and T. Villa, 'Open Problems in Verification and Refinement of Autonomous Robotic Systems,' in Digital System Design (DSD), 2012 15th Euromicro Conference on , September 2012, pp. 469-476. -
  27. [41][41] S. Wang, F. Nielson, and H. Nielson, 'Denial-of-Service Security Attack in the Continuous-Time World,' in Formal Techniques for Distributed Objects, Components, and Systems , ser. Lecture Notes in Computer Science, E. ´ Abrah´ am and C. Palamidessi, Eds. Springer Berlin Heidelberg, 2014, vol. 8461, pp. 149-165. -
  28. [42][42] T. Sommestad, G. Ericsson, and J. Nordlander, 'SCADA system cyber security - A comparison of standards,' in Power and Energy Society General Meeting, 2010 IEEE , July 2010, pp. 1-8. -
  29. [43][43] R. Mitchell and I.-R. Chen, 'A survey of intrusion detection techniques for cyber-physical systems,' ACM Comput. Surv. , vol. 46, no. 4, pp. 55:1-55:29, 2014. -
  30. [47][47] I. Malavolta and H. Muccini, 'A study on MDE approaches for engineering wireless sensor networks,' in Software Engineering and Advanced Applications (SEAA), 2014 40th EUROMICRO Conference on . IEEE, 2014, pp. 149-157. -
  31. [50][50] Y. Mo and B. Sinopoli, 'Secure control against replay attacks,' in Communication, Control, and Computing, 2009. Allerton 2009. 47th Annual Allerton Conference on , September 2009, pp. 911-918. -
  32. [51][51] S. Sridhar and G. Manimaran, 'Data integrity attacks and their impacts on SCADA control system,' in Power and Energy Society General Meeting, 2010 IEEE , July 2010, pp. 1-6. -
  33. [53][53] S. Sridhar and G. Manimaran, 'Data integrity attack and its impacts on voltage control loop in power grid,' in Power and Energy Society General Meeting, 2011 IEEE , July 2011, pp. 1-6. -
  34. [54][54] L. Mili, T. Van Cutsem, and M. Ribbens-Pavella, 'Bad data identification methods in power system state estimation - a comparative study,' Power Apparatus and Systems, IEEE Transactions on , vol. PAS-104, no. 11, pp. 3037-3049, November 1985. -
  35. [56][56] B. Zhu and S. Sastry, 'SCADA-specific intrusion detection/prevention systems: A survey and taxonomy,' in Preprints of the First Workshop on Secure Control Systems, CPS Week , Stockholm, Sweden, April 2010. -
  36. [57][57] C. Wohlin, P. Runeson, M. H¨ ost, M. Ohlsson, B. Regnell, and A. Wessl´ en, Experimentation in Software Engineering , ser. Computer Science. Springer, 2012. -
  37. [59][59] V. Basili, G. Caldiera, and H. Rombach, 'The Goal Question Metric Approach,' in Encyclopedia of Software Engineering . Wiley, 1994, vol. 2, pp. 528-532. -
  38. [60][60] O. Dieste and O. Padua, 'Developing search strategies for detecting relevant experiments for systematic reviews,' in Empirical Software Engineering and Measurement, 2007. ESEM 2007. First International Symposium on , September 2007, pp. 215-224. -
  39. [64][64] B. Kitchenham and P. Brereton, 'A systematic review of systematic review process research in software engineering,' Information and software technology , vol. 55, no. 12, pp. 2049-2075, 2013. -
  40. [66][66] S. Jalali and C. Wohlin, 'Systematic literature studies: Database searches vs. backward snowballing,' in Proceedings of the ACMIEEE International Symposium on Empirical Software Engineering and Measurement , ser. ESEM '12. New York, NY, USA: ACM, 2012, pp. 29-38. -
  41. [67][67] C. Wohlin, 'Guidelines for snowballing in systematic literature studies and a replication in software engineering,' in Proceedings of the 18th International Conference on Evaluation and Assessment in Software Engineering , ser. EASE '14. New York, NY, USA: ACM, 2014, pp. 38:1-38:10. -
  42. [68][68] K. Petersen, R. Feldt, S. Mujtaba, and M. Mattsson, 'Systematic mapping studies in software engineering,' in Proceedings of the 12th International Conference on Evaluation and Assessment in Software Engineering , ser. EASE'08. Swinton, UK, UK: British Computer Society, 2008, pp. 68-77. -
  43. [70][70] E. Yuan, N. Esfahani, and S. Malek, 'A systematic survey of selfprotecting software systems,' ACM Trans. Auton. Adapt. Syst. , vol. 8, no. 4, pp. 17:1-17:41, January 2014. -
  44. [71][71] M. Yampolskiy, P. Horvath, X. Koutsoukos, Y. Xue, and J. Sztipanovits, 'Systematic analysis of cyber-attacks on cps-evaluating applicability of dfd-based approach,' in Resilient Control Systems (ISRCS), 2012 5th International Symposium on , August 2012, pp. 55-62. -
  45. [72][72] --, 'Taxonomy for description of cross-domain attacks on CPS,' in Proceedings of the 2Nd ACM International Conference on High Confidence Networked Systems , ser. HiCoNS '13. New York, NY, USA: ACM, 2013, pp. 135-142. -
  46. [73][73] B. Gonz´ alez-Pereira, V. Guerrero-Bote, and F. Moya-Aneg´ on, 'A new approach to the metric of journals' scientific prestige: The SJR indicator,' Journal of Informetrics , vol. 4, no. 3, pp. 379-391, 2010. -
  47. [74][74] C. Research and Education, 'CORE conference portal,' 2015. [Online]. Available: http://www.core.edu.au/index.php/conference-portal -
  48. [75][75] S. Khaitan, J. McCalley, and C. Liu, Cyber Physical Systems Approach to Smart Electric Power Grid . Springer, 2015. -
  49. [76][76] L. Micallef and P. Rodgers, 'euler ape: Drawing area-proportional 3venn diagrams using ellipses,' PloS one , vol. 9, no. 7, p. e101717, 2014. -
  50. [77][77] I. Lee and O. Sokolsky, 'Medical cyber physical systems,' in Proceedings of the 47th Design Automation Conference , ser. DAC '10. New York, NY, USA: ACM, 2010, pp. 743-748. -
  51. [78][78] A. Aviˇ zienis, J.-C. Laprie, B. Randell, and C. Landwehr, 'Basic concepts and taxonomy of dependable and secure computing,' Dependable and Secure Computing, IEEE Transactions on , vol. 1, no. 1, pp. 11-33, 2004. -
  52. [79][79] A. Abur and A. Exposito, Power system state estimation: theory and implementation . CRC Press, 2004. -
  53. [80][80] A. Wood and B. Wollenberg, Power generation, operation and control , 2nd ed. New York: John Wiley & Sons, 1996. -
  54. [81][81] P. Kundur, Power system stability and control . McGraw-Hill Professional, 1994. -
  55. [82][82] E. Page, 'Continuous inspection schemes,' Biometrika , vol. 41, no. 1/2, pp. 100-115, 1954. -
  56. [83][83] J. Lee and M. Verleysen, Nonlinear Dimensionality Reduction , 1st ed., ser. Information Science and Statistics. New York: Springer-Verlag, 2007. -
  57. [84][84] W. S. Levine, Ed., The Control Handbook , 2nd ed. CRC Press, December 2010. -
  58. [85][85] A. Gupta, C. Langbort, and T. Bas ¸ar, 'One-stage control over an adversarial channel with finite codelength,' in Decision and Control and European Control Conference (CDC-ECC), 2011 50th IEEE Conference on , December 2011, pp. 4072-4077. -
  59. [86][86] H. Sandberg, A. Teixeira, and K. Johansson, 'On security indices for state estimators in power networks,' in Preprints of the First Workshop on Secure Control Systems, CPSWEEK 2010 , April 2010. -
  60. [88][88] F. Pasqualetti, F. D¨ orfler, and F. Bullo, 'Cyber-physical security via geometric control: Distributed monitoring and malicious attacks,' in Decision and Control (CDC), 2012 IEEE 51st Annual Conference on , December 2012, pp. 3418-3425. -
  61. [89][89] S. Liu, D. Kundur, T. Zourntos, and K. Butler-Purry, 'Coordinated variable structure switching in smart power systems: Attacks and mitigation,' in Proceedings of the 1st International Conference on High Confidence Networked Systems , ser. HiCoNS '12. New York, NY, USA: ACM, 2012, pp. 21-30. -
  62. [95][95] J. Kleinberg and ´ E. Tardos, Algorithm design . Pearson AddisonWesley, 2006. -
  63. [96][96] J. Bondy and U. Murty, Graph theory with applications . Elsevier Science Ltd/North-Holland, 1976. -
  64. [97][97] R. Horst and P. Pardalos, Eds., Handbook of Global Optimization , ser. Nonconvex Optimization and Its Applications. Springer US, 1995, vol. 2. -
  65. [98][98] T. Cover and J. Thomas, Elements of Information Theory , 2nd ed. John Wiley & Sons, 2006. -
  66. [99][99] Y. Eldar and G. Kutyniok, Compressed sensing: theory and applications . Cambridge University Press, 2012. -
  67. [100][100] O. Maler and D. Nickovic, 'Monitoring temporal properties of continuous signals,' in Formal Techniques, Modelling and Analysis of Timed and Fault-Tolerant Systems , ser. Lecture Notes in Computer Science, Y. Lakhnech and S. Yovine, Eds. Springer Berlin Heidelberg, 2004, vol. 3253, pp. 152-166. -
  68. [101][101] C. Barrett, R. Sebastiani, S. Seshia, and C. Tinelli, 'Satisfiability modulo theories,' in Handbook of Satisfiability , ser. Frontiers in Artificial Intelligence and Applications, A. Biere, M. Heule, H. van Maaren, and T. Walsh, Eds. Amsterdam, Netherlands: IOS Press, 2009, vol. 185, ch. 26, pp. 825-885. -
  69. [102][102] S. Rao, Engineering optimization: theory and practice , 4th ed. John Wiley & Sons, 2009. -
  70. [104][104] M. Zhu and S. Mart´ ınez, 'Stackelberg-game analysis of correlated attacks in cyber-physical systems,' in American Control Conference (ACC), 2011 , June 2011, pp. 4063-4068. -
  71. [109][109] F. Li and R. Bo, 'Small test systems for power system economic studies,' in Power and Energy Society General Meeting, 2010 IEEE , July 2010, pp. 1-4. -
  72. [110][110] B. Venkatesh, R. Ranjan, and H. Gooi, 'Optimal reconfiguration of radial distribution systems to maximize loadability,' Power Systems, IEEE Transactions on , vol. 19, no. 1, pp. 260-266, February 2004. -
  73. [111][111] C. Grigg, P. Wong, P. Albrecht, R. Allan, M. Bhavaraju, R. Billinton, Q. Chen, C. Fong, S. Haddad, S. Kuruganty, W. Li, R. Mukerji, D. Patton, N. Rau, D. Reppen, A. Schneider, M. Shahidehpour, and C. Singh, 'The IEEE Reliability Test System-1996. A report prepared by the Reliability Test System Task Force of the Application of Probability Methods Subcommittee,' Power Systems, IEEE Transactions on , vol. 14, no. 3, pp. 1010-1020, August 1999. -
  74. [112][112] J. Pinheiro, C. Dornellas, M. Schilling, A. Melo, and J. Mello, 'Probing the new IEEE Reliability Test System (RTS-96): HL-II assessment,' Power Systems, IEEE Transactions on , vol. 13, no. 1, pp. 171-176, February 1998. -
  75. [115][115] L. Jiang, W. Yao, Q. Wu, J. Wen, and S. Cheng, 'Delay-dependent stability for load frequency control with constant and time-varying delays,' Power Systems, IEEE Transactions on , vol. 27, no. 2, pp. 932941, May 2012. -
  76. [122][122] H. Zhang and M. Ali Babar, 'Systematic reviews in software engineering: An empirical investigation,' Information and Software Technology , vol. 55, no. 7, pp. 1341-1354, 2013.

Cited by

Sorted by citations

Related

Authors
Zacchia Lun, Y., D’Innocenzo, A., Smarra, F., Malavolta, I., & Di Benedetto, M. D.
Affiliations
  • University of L'Aquila (IT)
  • Vrije Universiteit Amsterdam (NL)
Corresponding author
Malavolta, Ivano
ORCID
Venue
Journal of Systems and Software
Publisher
Elsevier BV
Published
2019-03
Volume
149
Pages
174-216
ISSN
0164-1212 (ISSN-L)
DOI
10.1016/j.jss.2018.12.006
OpenAlex
W2411925053
Cited by
211
References
219
Citations by year
2026: 7 · 2025: 16 · 2024: 21 · 2023: 20 · 2022: 33 · 2021: 36 · 2020: 36 · 2019: 27 · 2018: 7 · 2017: 7 · 2016: 1
FWCI
16.41
Type
journal article
Language
en
Open access
Licence
Locations
  • Journal of Systems and Software (publishedVersion)
  • VU Research Portal (publishedVersion, other-oa)
  • arXiv (Cornell University) (submittedVersion)
  • Archivio Istituzionale della Ricerca - Università degli Studi dell Aquila (submittedVersion)
  • Data Archiving and Networked Services (DANS) (submittedVersion, other-oa)
  • arXiv (Cornell University)
Topics
  • Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
  • Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
Keywords
cyber-physical systems, cyber-physical security, automatic control, attacks, defense strategy

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review