Model-Checking BNDC Properties in Cyber-Physical Systems
Ravi Akella, Bruce McMillin · 2009
In cyber-physical systems, which are the integrations of computational and physical processes, it is hard to realize certain security properties. Fundamentally, physically observable behavior leads to violations of confidentiality. We focus on analyzing certain noninterference based security properties to ensure that interactions between the cyber and physical processes preserve confidentiality. A considerable barrier to this analysis is representing the physical systempsilas interactions. In this paper, these physical system properties are encoded into a discrete event system and the combined cyber-physical system is described using the process algebra SPA. The model checker, CoPS shows BNDC (bisimulation based non deducibility on compositions) properties,which are a variant of noninterference properties, to check the systempsilas security against all high level potential interactions. We consider a model problem of invariant pipeline flow to examine the BNDC properties and their applicability for cyber-physical systems.