A Cross-Layer Defense Method for Blockchain Empowered CBTC Systems Against Data Tampering Attacks
【Author】 Liang, Hao; Zhu, Li; Yu, F. Richard; Wang, Xuan
【Source】IEEE TRANSACTIONS ON INTELLIGENT TRANSPORTATION SYSTEMS
【影响因子】9.551
【Abstract】Due to the high integration of wireless communication and networking technologies, the communication-based train control (CBTC) systems are exposed to additional cyber-attack surfaces, allowing sophisticated attackers to combine cyber attack vectors with physical attack means to achieve malicious goals. Notably, the decentralized authentication features are missing in existing communication protocols which make the CBTC be easily compromised by data tampering attacks, and lead to serious operational accidents. With outstanding advantages in decentralized authentication, blockchain provides new effective solutions for decentralized identity authentication in CBTC. Consequently, it is critical to study the complex physical consequences of cyber breaches from a cross-layer defense perspective. In this paper, we propose a novel cross-layer defense method for cyber security in blockchain empowered CBTC against data tampering attacks. In the physical layer, the joint Kalman filter and chi(2) detector is proposed for the train state estimation and detection. In the cyber layer, an asymmetric encryption-based secure communication protocol with identity authentication and the blockchain-based distributed key management system with the adaptive consensus mechanism are designed for data communication security. Considering the unavailable direct observation of the CBTC cyber security states, a partially observable Markov (POMDP) decision model is constructed to derive the optimal adaptive consensus strategies for balancing cyber security and efficiency. Extensive simulation results show that the proposed blockchain empowered CBTC cross-layer defense method can effectively improve the cyber security protection capability and minimize the impact of data tampering attacks on the train operation.
【Keywords】CBTC; data tampering attacks; cross-layer defense; blockchain
【发表时间】
【收录时间】2022-11-04
【文献类型】实验仿真
【主题类别】
区块链应用-实体经济-交通领域
eliana
本文提出了一种新的基于区块链授权的CBTC(基于通信的列车控制系统)网络安全跨层防御方法,以对抗数据篡改攻击。在网络层,为数据通信安全设计了基于身份认证的非对称加密安全通信协议和基于区块链的自适应共识分布式密钥管理系统。针对CBTC网络安全状态无法直接观测的情况,构建了部分可观测马尔可夫(POMDP)决策模型,推导出平衡网络安全和效率的最优自适应共识策略。
回复eliana
test