Cyber-Physical System Forensics for Cross-Domain Attack Analysis

A Cyber-Physical System (CPS) is a cross-domain system integrating sub-systems from multiple domains connected through communication networks. Today, CPSs can be found in security-sensitive areas such as aerospace, automotive, energy, healthcare, manufacturing transportation, entertainment, and consumer appliances. ". In the first part of this talk, I will be presenting our recent work on additive manufacturing systems (3D-printers), where we have demonstrated the vulnerability of a 3D-printer to confidentiality attacks. An additive manufacturing system is attacked through observable acoustic analog emissions in this work. See recent articles at Science (http://science.sciencemag.org/content/352/6282/132) and at ACM Communications (http://cacm.acm.org/news/199406-bad-vibrations-uci-researchers-find-security-breach-in-3d-printing-process/fulltext) about our work.
In the second half of the talk, I will discuss the bright side of the tight integration between cyber and physical domains, which may bring about the potential of physics-centric defense mechanisms to shield CPS against attackers. I will present how my group has achieved physical-layer security for V2X communication for an automotive cyber-physical system.