Behavioral Function Generation for Control System Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing control system security assessments, such as those using model inspection tools, are inadequate for complex systems with multiple sensors, as they fail to comprehensively verify safety and detect potential attack scenarios effectively.
Innovation Solution
An information processing apparatus that acquires configuration and behavioral log data from systems with multiple sensors and actuators, generates behavioral functions representing temporal changes, and creates a system model to enable thorough model inspection and verification of safety against potential attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If model inspection is applied to control systems with multiple sensors, then security assessment coverage is improved, but system complexity increases
Solution Approach 1:
The patent segments the control system into distinct components (sensors, actuators, controllers) and generates separate behavioral functions for each sensor-actuator pair. This segmentation allows the complex multi-sensor system to be analyzed through modular, manageable units rather than as an monolithic complex system.
Solution Approach 2:
The patent creates behavioral function copies for each sensor-actuator combination based on template behavioral functions. Instead of developing unique inspection logic for each sensor, the system generates customized copies of standardized behavioral models, reducing the overall complexity while maintaining comprehensive coverage.
2Measurement precision
If behavioral functions are generated for each sensor-actuator combination, then measurement precision is improved, but computational complexity increases
Solution Approach 1:
The patent changes parameters of standardized behavioral function templates to generate specific behavioral functions for each sensor-actuator combination. By adjusting parameters rather than creating entirely new functions, the system achieves precise behavioral verification while minimizing computational overhead.
Solution Approach 2:
The patent develops universal behavioral function templates that can serve multiple sensor-actuator combinations. These multi-functional templates reduce computational complexity by eliminating redundant calculations while maintaining the precision needed for each specific combination through parameter customization.
3Difficulty of detecting and measuring
If comprehensive model inspection is performed, then detection capability is improved, but processing time increases
Solution Approach 1:
The patent performs preliminary actions by pre-defining standardized behavioral functions and attack scenario templates before actual inspection. This preparation work enables faster execution during actual security assessment, as the system only needs to instantiate and verify pre-prepared models rather than creating everything from scratch.
Solution Approach 2:
The patent skips redundant verification steps by using standardized behavioral functions that have already been validated. Common behavioral patterns across different sensors are verified once in the template and then reused, allowing the system to rush through repetitive verification processes while maintaining comprehensive detection capability.
Data Source
AI summary
A control system (10) includes plural sensors (14), plural actuators (16), and a controller (18). An information processing apparatus (2000) acquires configuration information representing a configuration of the control system (10), a control rule representing a rule of control of each actuator (16) by the controller (18), and behavior log data indicating a combination of time-series data of an observed value of the sensor (14), and a state of each actuator (16) at each time. The information processing apparatus (2000) generates, for each combination of states of the actuators (16) and for the each sensor (14), a behavioral function representing a temporal change of the observed value of the sensor (14) regarding the combination of states of the plural actuators, using the behavioral log data, and generates a system model of the control system (10) using the configuration information, the control rule, and the behavioral function.