Game-theoretic methods for security and resilience in cyber-physical systems

Modern critical infrastructures are highly integrated systems composed of many complex interactions between different system modules or agents including cyber and physical components as well as human factors. Their growing complexity demands novel design techniques for scalable and efficient control and computations for providing system security and resilience. This dissertation develops new game-theoretic frameworks for addressing security and resilience problems residing at multiple layers of the cyber-physical systems including robust and resilient control, secure network routing and management of information security and smart grid energy systems. Hybrid distributed reinforcement learning algorithms are developed as practical modeling tools for defense systems with different levels of rationality and intelligence at different times. The learning algorithms enable online computations of defense strategies, such as routing decisions and configuration policies, for nonzero-sum security games with incomplete information. In addition, games-in-games frameworks are proposed for system-wide modeling of complex hierarchical systems, where games played at different levels interact through their outcomes, action spaces, and costs. This concept is applied to robust and resilient control of power systems in which a zero-sum differential game for physical robust control design is nested in and coupled with a zero-sum stochastic game for security policy design. At the networking layer of the system, multi-hop secure routing games also exhibit the games-in-games structure, and their equilibrium solutions are characterized by backward induction solving a sequence of nested games. This approach leads to a distributed secure routing protocol that enables the resilience of network routing and self-recovery mechanisms in face of adversarial attacks. Finally, in order to address emerging energy management issues of the smart grid, we establish a fundamental game-theoretic framework for analyzing system equilibrium under distributed generations, renewable energy sources and active participation of utility users. Furthermore, we develop a novel game framework and its equilibrium solution, named mirror Stackelberg equilibrium, for modeling the demand response management in the smart grid. This approach enables quantitative study of the value of demand response brought by emerging smart grid technologies as compared to the current supply-side economic dispatch model. It facilitates fundamental understanding of pricing, energy policies and infrastructural investment decision in future highly interconnected and interdependent energy systems. Examples from power systems, cognitive radio communication networks, and the smart grid are used as driving examples for illustrating new solution concepts, distributed algorithms and analytical techniques presented in this dissertation.

[1]  D. Kirschen,et al.  Fundamentals of power system economics , 1991 .

[2]  Quanyan Zhu,et al.  Management of Control System Information SecurityI: Control System Patch Management , 2011 .

[3]  Quanyan Zhu,et al.  A multi-resolution large population game framework for smart grid demand response management , 2011, International Conference on NETwork Games, Control and Optimization (NetGCooP 2011).

[4]  Vincent W. S. Wong,et al.  Autonomous Demand-Side Management Based on Game-Theoretic Energy Consumption Scheduling for the Future Smart Grid , 2010, IEEE Transactions on Smart Grid.

[5]  Fernando A. Kuipers,et al.  An overview of constraint-based path selection algorithms for QoS routing , 2002 .

[6]  Sanjo Zlobec,et al.  Stable Parametric Programming , 2001 .

[7]  Eitan Altman,et al.  A survey on networking games in telecommunications , 2006, Comput. Oper. Res..

[8]  James S. Thorp,et al.  Computer Relaying for Power Systems , 2009 .

[9]  W. Chan,et al.  Pollaczek-Khinchin formula for the M/G/1 queue in discrete time with vacations , 1997 .

[10]  Frank Kelly,et al.  Rate control for communication networks: shadow prices, proportional fairness and stability , 1998, J. Oper. Res. Soc..

[11]  David J. Hill,et al.  Transient stability enhancement and voltage regulation of power systems , 1993 .

[12]  Quanyan Zhu,et al.  Deceptive routing games , 2012, 2012 IEEE 51st IEEE Conference on Decision and Control (CDC).

[13]  Tansu Alpcan,et al.  Network Security , 2010 .

[14]  S. Kami Makki,et al.  Multiconstrained QoS Routing: A Norm Approach , 2007, IEEE Transactions on Computers.

[15]  G.N. Ericsson,et al.  On requirements specifications for a power system communications system , 2005, IEEE Transactions on Power Delivery.

[16]  Piet Van Mieghem,et al.  Concepts of exact QoS routing algorithms , 2004, IEEE/ACM Transactions on Networking.

[17]  Kun Ji,et al.  Resilient industrial control system (RICS): Concepts, formulation, metrics, and insights , 2010, 2010 3rd International Symposium on Resilient Control Systems.

[18]  Dirk Ifenthaler,et al.  Stochastic Models of Learning , 2012 .

[19]  Jacob Engwerda,et al.  The solution set of the N-player scalar feedback Nash algebraic Riccati equations , 2000, IEEE Trans. Autom. Control..

[20]  Quanyan Zhu,et al.  Robust and resilient control design for cyber-physical systems with an application to power systems , 2011, IEEE Conference on Decision and Control and European Control Conference.

[21]  R. Gibbons Game theory for applied economists , 1992 .

[22]  T. Basar,et al.  H∞-0ptimal Control and Related Minimax Design Problems: A Dynamic Game Approach , 1996, IEEE Trans. Autom. Control..

[23]  H. Peyton Young,et al.  Learning by trial and error , 2009, Games Econ. Behav..

[24]  Quanyan Zhu,et al.  Secure routing in smart grids , 2011 .

[25]  T. Başar Minimax control of switching systems under sampling , 1994, Proceedings of 1994 33rd IEEE Conference on Decision and Control.

[26]  Ariel Rubinstein,et al.  A Course in Game Theory , 1995 .

[27]  P.T. Krein,et al.  Distributed dynamic energy resource control , 2009, 2009 IEEE Electric Ship Technologies Symposium.

[28]  Quanyan Zhu,et al.  Prices of Anarchy, Information, and Cooperation in Differential Games , 2011, Dyn. Games Appl..

[29]  Edward J. Davison,et al.  The Optimal Output Feedback Control of a Synchronous Machine , 1971 .

[30]  David S. Leslie,et al.  Individual Q-Learning in Normal Form Games , 2005, SIAM J. Control. Optim..

[31]  Quanyan Zhu,et al.  Towards a unifying security framework for cyber-physical systems , 2011 .

[32]  Thomas J. Overbye,et al.  Tutorial - power system simulation - understanding small- and large-system operations , 2004 .

[33]  Kevin Tomsovic,et al.  Designing the Next Generation of Real-Time Control, Communication, and Computations for Large Power Systems , 2005, Proceedings of the IEEE.

[34]  Quanyan Zhu,et al.  Value of demand response in the smart grid , 2013, 2013 IEEE Power and Energy Conference at Illinois (PECI).

[35]  Eitan Altman,et al.  Multiuser rate-based flow control , 1998, IEEE Trans. Commun..

[36]  P. Holmes,et al.  Nonlinear Oscillations, Dynamical Systems, and Bifurcations of Vector Fields , 1983, Applied Mathematical Sciences.

[37]  Clark W Gellings,et al.  The Smart Grid: Enabling Energy Efficiency and Demand Response , 2020 .

[38]  William F. Tinney,et al.  Optimal Power Flow Solutions , 1968 .

[39]  Yao-nan Yu,et al.  Application of an Optimal Control Theory to a Power System , 1970 .

[40]  Quanyan Zhu,et al.  Price of anarchy and price of information in N-person linear-quadratic differential games , 2010, Proceedings of the 2010 American Control Conference.

[41]  B.F. Wollenberg,et al.  Toward a smart grid: power delivery for the 21st century , 2005, IEEE Power and Energy Magazine.

[42]  Harold J. Kushner,et al.  wchastic. approximation methods for constrained and unconstrained systems , 1978 .

[43]  Lun Li,et al.  Cross-layer optimization in TCP/IP networks , 2005, IEEE/ACM Transactions on Networking.

[44]  Mark Fabro,et al.  Control Systems Cyber Security: Defense-in-Depth Strategies , 2006 .

[45]  Quanyan Zhu,et al.  Dynamic policy-based IDS configuration , 2009, Proceedings of the 48h IEEE Conference on Decision and Control (CDC) held jointly with 2009 28th Chinese Control Conference.

[46]  Xiaoming Feng,et al.  Getting Smart , 2010, IEEE Power and Energy Magazine.

[47]  Quanyan Zhu,et al.  Hybrid Learning in Stochastic Games and Its Application in Network Security , 2013 .

[48]  C. S. Holling,et al.  Panarchy Understanding Transformations in Human and Natural Systems , 2002 .

[49]  Jeff S. Shamma,et al.  Dynamic fictitious play, dynamic gradient play, and distributed convergence to Nash equilibria , 2005, IEEE Transactions on Automatic Control.

[50]  Quanyan Zhu,et al.  Dependable Demand Response Management in the Smart Grid: A Stackelberg Game Approach , 2013, IEEE Transactions on Smart Grid.

[51]  William A. Arbaugh,et al.  Dynamic spectrum access in cognitive radio networks , 2006 .

[52]  Mohsen Jafari,et al.  An integrated security system of protecting Smart Grid against cyber attacks , 2010, 2010 Innovative Smart Grid Technologies (ISGT).

[53]  J. Nash Equilibrium Points in N-Person Games. , 1950, Proceedings of the National Academy of Sciences of the United States of America.

[54]  Quanyan Zhu,et al.  End‐to‐end DWDM optical link power‐control via a Stackelberg revenue‐maximizing model , 2008, Int. J. Netw. Manag..

[55]  Tilman Börgers,et al.  Learning Through Reinforcement and Replicator Dynamics , 1997 .

[56]  E. J. Collins,et al.  Convergent multiple-timescales reinforcement learning algorithms in normal form games , 2003 .

[57]  D. Kirschen Demand-side view of electricity markets , 2003 .

[58]  R. Chandramouli,et al.  Stochastic Learning Solution for Distributed Discrete Power Control Game in Wireless Data Networks , 2008, IEEE/ACM Transactions on Networking.

[59]  William H. Sandholm,et al.  Population Games And Evolutionary Dynamics , 2010, Economic learning and social evolution.

[60]  David Salt,et al.  Resilience Thinking : Sustaining Ecosystems and People in a Changing World , 2017 .

[61]  Quanyan Zhu,et al.  A Lagrangian approach to constrained potential games: Theory and examples , 2008, 2008 47th IEEE Conference on Decision and Control.

[62]  J. Neumann,et al.  Theory of games and economic behavior , 1945, 100 Years of Math Milestones.

[63]  Quanyan Zhu,et al.  Theory of Linear Games with Constraints and Its Application to Power Control of Optical Networks , 2008, IEEE INFOCOM 2008 - The 27th Conference on Computer Communications.

[64]  Samuel Greengard,et al.  The new face of war , 2010, Commun. ACM.

[65]  Miles A. McQueen,et al.  Ideal Based Cyber Security Technical Metrics for Control Systems , 2007, CRITIS.

[66]  Quanyan Zhu,et al.  A hierarchical security architecture for cyber-physical systems , 2011, 2011 4th International Symposium on Resilient Control Systems.

[67]  Jacob Engwerda,et al.  LQ Dynamic Optimization and Differential Games , 2005 .

[68]  Marija D. Ilic,et al.  From Hierarchical to Open Access Electric Power Systems , 2007, Proceedings of the IEEE.

[69]  Thomas J. Overbye,et al.  Agent Technologies for Control Applications in the Power Grid , 2010, 2010 43rd Hawaii International Conference on System Sciences.

[70]  Tamer Basar,et al.  Efficient signal proportional allocation (ESPA) mechanisms: decentralized social welfare maximization for divisible resources , 2006, IEEE Journal on Selected Areas in Communications.

[71]  Khosrow Moslehi,et al.  Power System Control Centers: Past, Present, and Future , 2005, Proceedings of the IEEE.

[72]  Quanyan Zhu,et al.  Dynamic Secure Routing Game in Distributed Cognitive Radio Networks , 2011, 2011 IEEE Global Telecommunications Conference - GLOBECOM 2011.

[73]  Alejandro D. Domínguez-García,et al.  A Generalized Fault Coverage Model for Linear Time-Invariant Systems , 2009, IEEE Transactions on Reliability.

[74]  David I. Gertman,et al.  Resilient control systems: Next generation design research , 2009, 2009 2nd Conference on Human System Interactions.

[75]  S. Cvijic,et al.  Optimal clustering for efficient computations of contingency effects in large regional power systems , 2012, 2012 IEEE Power and Energy Society General Meeting.

[76]  T. E. S. Raghavan,et al.  Algorithms for stochastic games — A survey , 1991, ZOR Methods Model. Oper. Res..

[77]  Eduardo Camponogara,et al.  Network control as a distributed, dynamic game , 2001, Proceedings of the 34th Annual Hawaii International Conference on System Sciences.

[78]  Quanyan Zhu,et al.  Distributed strategic learning with application to network security , 2011, Proceedings of the 2011 American Control Conference.

[79]  Marija D Ilić,et al.  Dynamic Monitoring and Decision Systems for Enabling Sustainable Energy Services , 2011, Proceedings of the IEEE.

[80]  G. Jakimoski,et al.  Denial-of-Service Attacks on Dynamic Spectrum Access Networks , 2008, ICC Workshops - 2008 IEEE International Conference on Communications Workshops.

[81]  V. Borkar Stochastic Approximation: A Dynamical Systems Viewpoint , 2008 .

[82]  David C. Yu,et al.  An Economic Dispatch Model Incorporating Wind Power , 2008, IEEE Transactions on Energy Conversion.

[83]  Miles McQueen,et al.  Empirical Estimates and Observations of 0Day Vulnerabilities , 2009 .

[84]  T. Charles Clancy,et al.  Security in Cognitive Radio Networks: Threats and Mitigation , 2008, 2008 3rd International Conference on Cognitive Radio Oriented Wireless Networks and Communications (CrownCom 2008).

[85]  V. V. Phansalkar,et al.  Decentralized Learning of Nash Equilibria in Multi-Person Stochastic Games With Incomplete Information , 1994, IEEE Trans. Syst. Man Cybern. Syst..

[86]  Onésimo Hernández-Lerma,et al.  Zero-Sum Stochastic Games in Borel Spaces: Average Payoff Criteria , 2000, SIAM J. Control. Optim..

[87]  Guevara Noubir,et al.  Linear programming models for jamming attacks on network traffic flows , 2008, WiOpt 2008.

[88]  Quanyan Zhu,et al.  A game-theoretic framework for control of distributed renewable-based energy resources in smart grids , 2012, 2012 American Control Conference (ACC).

[89]  Jim Kurose,et al.  Computer Networking: A Top-Down Approach (6th Edition) , 2007 .

[90]  David Woods,et al.  Resilience Engineering: Concepts and Precepts , 2006 .

[91]  Peter J. Denning,et al.  Fault Tolerant Operating Systems , 1976, CSUR.

[92]  Brian Randell,et al.  Reliability Issues in Computing System Design , 1978, CSUR.

[93]  Patrick D. McDaniel,et al.  Security and Privacy Challenges in the Smart Grid , 2009, IEEE Security & Privacy.

[94]  J. Doyle,et al.  Essentials of Robust Control , 1997 .

[95]  L. Shapley,et al.  Stochastic Games* , 1953, Proceedings of the National Academy of Sciences.

[96]  Asuman E. Ozdaglar,et al.  Near-Optimal Power Control in Wireless Networks: A Potential Game Approach , 2010, 2010 Proceedings IEEE INFOCOM.

[97]  Daniel K. Molzahn,et al.  Examining the limits of the application of semidefinite programming to power flow problems , 2011, 2011 49th Annual Allerton Conference on Communication, Control, and Computing (Allerton).

[98]  P. Taylor,et al.  Evolutionarily Stable Strategies and Game Dynamics , 1978 .

[99]  P.T. Krein,et al.  Game-Theoretic Control of Small-Scale Power Systems , 2009, IEEE Transactions on Power Delivery.

[100]  Jose B. Cruz,et al.  Defending an Asset: A Linear Quadratic Game Approach , 2011, IEEE Transactions on Aerospace and Electronic Systems.

[101]  Ben J. A. Kröse,et al.  Learning from delayed rewards , 1995, Robotics Auton. Syst..

[102]  A. Bose,et al.  A failure to communicate: next generation communication requirements, technologies, and architecture for the electric power grid , 2005, IEEE Power and Energy Magazine.

[103]  J. Filar,et al.  Competitive Markov Decision Processes , 1996 .

[104]  Zhu Han,et al.  Securing Collaborative Spectrum Sensing against Untrustworthy Secondary Users in Cognitive Radio Networks , 2010, EURASIP J. Adv. Signal Process..

[105]  Jeffrey H. Reed,et al.  Defense against Primary User Emulation Attacks in Cognitive Radio Networks , 2008, IEEE Journal on Selected Areas in Communications.

[106]  Zhu Han,et al.  Dogfight in Spectrum: Jamming and Anti-Jamming in Multichannel Cognitive Radio Systems , 2009, GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference.

[107]  Quanyan Zhu,et al.  Dynamic Interference Minimization Routing Game for On-Demand Cognitive Pilot Channel , 2010, 2010 IEEE Global Telecommunications Conference GLOBECOM 2010.

[108]  Quanyan Zhu,et al.  Heterogeneous learning in zero-sum stochastic games with incomplete information , 2011, 49th IEEE Conference on Decision and Control (CDC).

[109]  S. M. Shahidehpour,et al.  Transaction analysis in deregulated power systems using game theory , 1997 .

[110]  Francisco D. Galiana,et al.  A survey of the optimal power flow literature , 1991 .

[111]  Craig G. Rieger Notional examples and benchmark aspects of a resilient control system , 2010, 2010 3rd International Symposium on Resilient Control Systems.

[112]  Richard S. Sutton,et al.  Reinforcement Learning: An Introduction , 1998, IEEE Trans. Neural Networks.

[113]  Ahmad Haidar,et al.  Robust stability criteria for Markovian jump singular systems with time-varying delays , 2008, 2008 47th IEEE Conference on Decision and Control.

[114]  Quanyan Zhu,et al.  A differential game approach to distributed demand side management in smart grid , 2012, 2012 IEEE International Conference on Communications (ICC).

[115]  Jacob Engwerda,et al.  Feedback Nash equilibria in the scalar infinite horizon LQ-game , 2000, Autom..

[116]  Quanyan Zhu,et al.  Game theory meets network security and privacy , 2013, CSUR.

[117]  W. Brian Arthur,et al.  On designing economic agents that behave like human agents , 1993 .

[118]  Quanyan Zhu,et al.  Hierarchical Network Formation Games in the Uplink of Multi-Hop Wireless Networks , 2009, GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference.

[119]  Juan M. Morales,et al.  Real-Time Demand Response Model , 2010, IEEE Transactions on Smart Grid.

[120]  Ariel Orda,et al.  QoS routing in networks with uncertain parameters , 1998, IEEE/ACM Trans. Netw..

[121]  Quanyan Zhu,et al.  Network Security Configurations: A Nonzero-Sum Stochastic Game Approach , 2010, Proceedings of the 2010 American Control Conference.