Nonlinear cyber-physical system security control under false data injection attack