YOLO: frequently resetting cyber-physical systems for security

Miguel A. Arroyo; M. Tarek Ibn Ziad; Hidenori Kobayashi; Junfeng Yang; Simha Sethumadhavan

doi:10.1117/12.2518909

2 May 2019 YOLO: frequently resetting cyber-physical systems for security

Miguel A. Arroyo, M. Tarek Ibn Ziad, Hidenori Kobayashi, Junfeng Yang, Simha Sethumadhavan

Proceedings Volume 11009, Autonomous Systems: Sensors, Processing, and Security for Vehicles and Infrastructure 2019; 110090P (2019) https://doi.org/10.1117/12.2518909
Event: SPIE Defense + Commercial Sensing, 2019, Baltimore, MD, United States

Abstract

A Cyber-Physical System (CPS) is defined by its unique interactions between digital (cyber) computation and physical motion. Their hybrid nature introduces new attack vectors, but also provides an opportunity to design new security defenses. In this paper, we present a new domain-specific security mechanism, YOLO, that leverages physical properties such as inertia to improve security. YOLO is simple to describe. It goes through two operations: Reset and Diversify, as frequently as possible – typically in the order of a few seconds. Resets mitigate attacks that aim to achieve persistence and enhance the power of diversification techniques. Due to inertia, CPSs can remain safe even under frequent resets. We introduce an analytical approach to evaluate the feasibility of a YOLO-ized system. Using this analytical model we define the constraints on reset periods in order to maintain the CPS’s stability. We evaluate our approach in simulation and on two real systems: an engine control unit (ECU) of a car and a flight controller (FC) of a quadcopter. From our experiments, we determine that resets can be triggered frequently, as fast as every 125ms for the ECU and every second for the FC, without violating safety.

Conference Presentation

Citation Download Citation

Miguel A. Arroyo, M. Tarek Ibn Ziad, Hidenori Kobayashi, Junfeng Yang, and Simha Sethumadhavan "YOLO: frequently resetting cyber-physical systems for security", Proc. SPIE 11009, Autonomous Systems: Sensors, Processing, and Security for Vehicles and Infrastructure 2019, 110090P (2 May 2019); https://doi.org/10.1117/12.2518909

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available