This paper addresses the design of an active cyberattack detection architecture based on multiplicative watermarking, allowing for detection of covert attacks. We propose an optimal design problem, relying on the so-called output-to-output l2-gain, which characterizes the maximum gain between the residual output of a detection scheme and some performance output. Although optimal, this control problem is non-convex. Hence, we propose an algorithm to design the watermarking filters by solving the problem suboptimally via LMIs. We show that, against covert attacks, the output-to-output l2-gain is unbounded without watermarking, and we provide a sufficient condition for boundedness in the presence of watermarks.
翻译:本文论述基于多倍化水标记的积极网络攻击探测结构的设计,以便发现隐蔽攻击。 我们提出一个最佳的设计问题,依靠所谓的产出到产出的I2-gain,这是探测办法剩余输出与某些性能输出之间最大收益的特点。 尽管最佳,但这种控制问题是非隐形的。 因此,我们提出一种算法,通过LMIs解决水标记过滤器的次要问题。 我们表明,针对隐性攻击,输出到产出的I2-gain是没有水标记的,我们为存在水标记时的界限提供了充分的条件。