论文标题
在虚假数据注射攻击下对大规模网络的安全防御:攻击检测计划方法
Security Defense of Large Scale Networks Under False Data Injection Attacks: An Attack Detection Scheduling Approach
论文作者
论文摘要
在大规模网络中,节点之间的通信链接很容易由对手注入错误数据。本文从攻击检测计划的角度提出了一种新颖的安全防御策略,以确保网络的安全性。根据提出的策略,每个传感器可以直接将可疑传感器排除在其相邻集合中。首先,选择可疑传感器的问题是作为组合优化问题,即非确定性多项式时间(NP-HARD)。为了解决此问题,原始函数被转换为supporular函数。然后,我们提出了基于顺序的下义优化理论的攻击检测计划算法,该算法结合了\ emph {专家问题},以更好地利用历史信息来指导当前时刻的传感器选择任务。对于不同的攻击策略,理论结果表明,所提出的算法的平均优化速率具有下限,并且错误期望是有限的。此外,在两种不安全感条件下,提出的算法可以从增强估计错误的角度来保证整个网络的安全性。最后,通过数值模拟和实际实验验证了开发方法的有效性。
In large-scale networks, communication links between nodes are easily injected with false data by adversaries. This paper proposes a novel security defense strategy from the perspective of attack detection scheduling to ensure the security of the network. Based on the proposed strategy, each sensor can directly exclude suspicious sensors from its neighboring set. First, the problem of selecting suspicious sensors is formulated as a combinatorial optimization problem, which is non-deterministic polynomial-time hard (NP-hard). To solve this problem, the original function is transformed into a submodular function. Then, we propose an attack detection scheduling algorithm based on the sequential submodular optimization theory, which incorporates \emph{expert problem} to better utilize historical information to guide the sensor selection task at the current moment. For different attack strategies, theoretical results show that the average optimization rate of the proposed algorithm has a lower bound, and the error expectation is bounded. In addition, under two kinds of insecurity conditions, the proposed algorithm can guarantee the security of the entire network from the perspective of the augmented estimation error. Finally, the effectiveness of the developed method is verified by the numerical simulation and practical experiment.