弹性事件驱动的网络化系统自律安全控制研究

Secure control problem under vulnerability network environments has attracted considerable attention by international academia. Due to the threat of network attaches, the fundamental assumptions of analysis and control for traditional networked control systems, namely, confidentiality, integrity and availability of sensor and control signals, are difficultly guaranteed again. Considering the constraints of communication and security of complex networked control systems, four fields will be studied in this project: 1) Under consideration of the diversity and concealment of network attacks, an integrated model is established for the NCS, which includes the effects of network attacks on sensors and actuators. 2) Resilient event-triggered communication strategies with certain immunity for network attacks are presented, which can provide strong supports for exploiting advantages of event-triggered communication scheme to save limited network resources. 3) Series of state estimation and reconstruction algorithms for network attacks are proposed. They have certain self-recovery function to security attaches and can provide nondestructive and reliable information for control and decision layers. 4) Self-disciplined and self-coordinated security controllers are designed by use of the resilient event-triggered communication scheme, which can ensure the safe and optimization operation of the NCS. Based on the proposed theoretical methods and technical routes, experimental verification is carried out for complex controlled objects such as, the micro-grid; under consideration of network security attacks, control modules and corresponding communication strategies of the NCS are developed, and demo platform is built for networked control. In summary, the practical and available secure control and efficient communication schemes are provided for guaranteeing the safe and efficient operation of the NCS.

脆弱通信环境下网络化控制系统（NCS）的安全控制问题受到国际学术界的高度重视。由于网络安全的威胁，NCS传统分析与控制的基本假设，即传感与控制信号的有效性、完整性、安全性都难以保证。针对通信与安全受限的复杂NCS，拟从四个方面进行深入研究：1）考虑攻击的多样性、隐蔽性等特征，建立包含网络攻击对通信、传感与执行等环节影响的NCS综合模型； 2）构建对网络攻击具有一定免疫性的弹性事件触发通信策略，为提高NCS通信与计算效率提供方法支撑；3）设置对网络攻击具有一定自恢复能力的状态估计与重构算法，为控制层提供无损、可靠信息；4）建立具有自律可控与自律可协调的事件驱动NCS安全控制设计策略，保证NCS安全优化运行。基于提出的理论方法与技术路线，针对微电网等复杂对象进行实验验证，开发出考虑网络攻击的NCS控制模块和相应的通信策略，建立网络控制应用示范平台,为NCS安全高效运行奠定理论与应用基础。

研究工作按照项目计划进行，取得了预期成果。本项目成果主要包含：1)考虑攻击的多样性、隐蔽性等特征，建立了网络攻击对通信、传感与执行等环节影响的NCS综合模型；2)提出了对网络攻击具有一定免疫性的弹性事件触发通信策略设计,在系统受到一定DoS攻击和数据注入攻击下，采用设计的弹性事件触发器仍然能够保证期望的NCS 综合性能。3)针对攻击发生后如何补偿攻击的负面影响，从控制角度，研究对受攻击影响信号具有一定自恢复功能的估计与重构算法，为控制或决策层提供了无损、可靠信息；4）搭建发电系统网络化控制平台与微电网实验平台，模拟网络攻击与相应的安全控制策略，验证上述理论研究，通过半实物仿真进一步完善了理论成果；目前为止标注项目号资助的发表论文40篇，其中SCI收录论文35篇EI收录论文5篇。发表论文中包含控制学科两大顶级期刊 Automatica与IEEE Transaction On Automatic Control。项目部分成果获得上海市自然科学二等奖1项（排名第一）和中国自动化学会自然科学奖一等奖1项（排名第三）。