Attacks on Perception-Based Control Systems: Modeling and Fundamental Limits

• 成果类型: Article
• 署名作者: Khazraei, Amir; Pfister, Henry D.; Pajic, Miroslav
• 署名单位: Duke University
• 刊物名称: IEEE TRANSACTIONS ON AUTOMATIC CONTROL
• ISSN/ISSBN: 0018-9286
• DOI: 10.1109/TAC.2024.3401022
• 发表日期: 2024
• 页码: 7726-7741
• 关键词: sensors; control systems; Linear systems; Perturbation methods; Cameras; Runtime; detectors; anomaly detection; attack-resilient control; learning-enabled control; nonlinear control; perception-based control; secure control; stealthy attacks

摘要

We study the performance of perception-based control systems in the presence of attacks and provide methods for modeling and analysis of their resiliency to stealthy attacks on both physical and perception-based sensing. Specifically, we consider a general setup with a nonlinear affine physical plant controlled with a perception-based controller that maps both the physical [e.g., inertial measurement units (IMUs)] and perceptual (e.g., camera) sensing to the control input; the system is also equipped with a statistical or learning-based anomaly detector (AD). We model the attacks in the most general form and introduce the notions of attack effectiveness and stealthiness independent of the used AD. In such a setting, we consider attacks with different levels of runtime knowledge about the plant. We find sufficient conditions for the existence of stealthy effective attacks that force the plant into an unsafe region without being detected by any AD. We show that as the open-loop unstable plant dynamics diverges faster and the closed-loop system converges faster to an equilibrium point, the system is more vulnerable to effective stealthy attacks. Also, depending on runtime information available to the attacker, the probability of the attack remaining stealthy can be arbitrarily close to one if the attacker's estimate of the plant's state is arbitrarily close to the true state; when an accurate estimate of the plant state is not available, the stealthiness level depends on the control performance in attack-free operation.