{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,19]],"date-time":"2026-06-19T15:46:17Z","timestamp":1781883977307,"version":"3.54.5"},"reference-count":32,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2017,2,20]],"date-time":"2017-02-20T00:00:00Z","timestamp":1487548800000},"content-version":"vor","delay-in-days":366,"URL":"http:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Global Research Laboratory Program","award":["2013K1A1A2A02078326"],"award-info":[{"award-number":["2013K1A1A2A02078326"]}]},{"name":"Intel-NSF Partnership for Cyber-Physical Systems Security and Privacy"},{"name":"ICT & Future Planning"},{"DOI":"10.13039\/100000185","name":"DARPA","doi-asserted-by":"crossref","award":["FA8750-12-2-0247"],"award-info":[{"award-number":["FA8750-12-2-0247"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"crossref"}]},{"name":"NSF","award":["CNS-1505799 and CNS-1505701"],"award-info":[{"award-number":["CNS-1505799 and CNS-1505701"]}]},{"name":"DGIST Research and Development Program (CPS Global Center) funded by the Ministry of Science"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2016,2,20]]},"abstract":"<jats:p>\n                    This article focuses on the design of safe and attack-resilient Cyber-Physical Systems (CPS) equipped with multiple sensors measuring the same physical variable. A malicious attacker may be able to disrupt system performance through compromising a subset of these sensors. Consequently, we develop a precise and resilient sensor fusion algorithm that combines the data received from all sensors by taking into account their specified precisions. In particular, we note that in the presence of a shared bus, in which messages are broadcast to all nodes in the network, the attacker\u2019s impact depends on what sensors he has seen before sending the corrupted measurements. Therefore, we explore the effects of communication schedules on the performance of sensor fusion and provide theoretical and experimental results advocating for the use of the\n                    <jats:italic toggle=\"yes\">Ascending<\/jats:italic>\n                    schedule, which orders sensor transmissions according to their precision starting from the most precise. In addition, to improve the accuracy of the sensor fusion algorithm, we consider the dynamics of the system in order to incorporate past measurements at the current time. Possible ways of mapping sensor measurement history are investigated in the article and are compared in terms of the confidence in the final output of the sensor fusion. We show that the precision of the algorithm using history is never worse than the no-history one, while the benefits may be significant. Furthermore, we utilize the complementary properties of the two methods and show that their combination results in a more precise and resilient algorithm. Finally, we validate our approach in simulation and experiments on a real unmanned ground robot.\n                  <\/jats:p>","DOI":"10.1145\/2847418","type":"journal-article","created":{"date-parts":[[2016,2,22]],"date-time":"2016-02-22T08:07:16Z","timestamp":1456128436000},"page":"1-24","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":58,"title":["Attack-Resilient Sensor Fusion for Safety-Critical Cyber-Physical Systems"],"prefix":"10.1145","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-4987-4836","authenticated-orcid":false,"given":"Radoslav","family":"Ivanov","sequence":"first","affiliation":[{"name":"University of Pennsylvania, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miroslav","family":"Pajic","sequence":"additional","affiliation":[{"name":"Duke University, NC, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Insup","family":"Lee","sequence":"additional","affiliation":[{"name":"University of Pennsylvania, PA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,2,20]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"Black-i Robotics. 2009. The LandShark. Retrieved from http:\/\/blackirobotics.com\/LandShark_UGV_UC0M.html."},{"key":"e_1_2_1_2_1","volume-title":"Proceedings of the 2010 13th Conference on Information Fusion (FUSION\u201910)","author":"Blank S.","unstructured":"S. Blank, T. Fohst, and K. Berns. 2010. A fuzzy approach to low level sensor fusion with limited system knowledge. In Proceedings of the 2010 13th Conference on Information Fusion (FUSION\u201910). 1--7."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/2.507632"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAES.1986.310699"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/2028067.2028073"},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the 10th Symposium on Reliable Distributed Systems (SRDS\u201991)","author":"Chew P.","unstructured":"P. Chew and K. Marzullo. 1991. Masking failures of multidimensional sensors. In Proceedings of the 10th Symposium on Reliable Distributed Systems (SRDS\u201991). 32--41."},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/984622.984681"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","unstructured":"R. Ivanov M. Pajic and I. Lee. 2014a. Attack-resilient sensor fusion. In DATE\u201914: Design Automation and Test in Europe.","DOI":"10.5555\/2616606.2616673"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","unstructured":"R. Ivanov M. Pajic and I. Lee. 2014b. Resilient multidimensional sensor fusion using measurement history. In High Confidence Networked Systems (HiCoNS\u201914). 10.1145\/2566468.2566475","DOI":"10.1145\/2566468.2566475"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/RELDIS.1994.336914"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2008.2007095"},{"key":"e_1_2_1_12_1","series-title":"Series D","volume-title":"A new approach to linear filtering and prediction problems. Transactions of the ASME--Journal of Basic Engineering 82","author":"Kalman R. E.","year":"1960","unstructured":"R. E. Kalman. 1960. A new approach to linear filtering and prediction problems. Transactions of the ASME--Journal of Basic Engineering 82, Series D (1960), 35--45."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2007.900165"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/128733.128735"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2004.02.002"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2011.03.013"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS.2014.6843720"},{"key":"e_1_2_1_19_1","volume-title":"Christian Science Monitor","author":"Peterson S.","year":"2011","unstructured":"S. Peterson and P. Faramarzi. 2011. Iran hijacked US drone, says Iranian engineer. Christian Science Monitor, December 15 (2011)."},{"key":"e_1_2_1_20_1","article-title":"Spoofers","author":"Rutkin A. H.","year":"2013","unstructured":"A. H. Rutkin. 2013. \u201cSpoofers\u201d Use Fake GPS Signals to Knock a Yacht Off Course. MIT Technology Review. (August 2014).","journal-title":"MIT Technology Review."},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/2435227.2435262"},{"key":"e_1_2_1_22_1","first-page":"30","article-title":"Drone hack","volume":"23","author":"Shepard D.","year":"2012","unstructured":"D. Shepard, J. Bhatti, and T. Humphreys. 2012. Drone hack. GPS World 23, 8 (2012), 30--33.","journal-title":"GPS World"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2007.898477"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_4"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40349-1_4"},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/2362336.2362347"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.5555\/795671.796912"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2012.06.092"},{"key":"e_1_2_1_29_1","first-page":"19","article-title":"A simple demonstration that the global positioning system (GPS) is vulnerable to spoofing","volume":"25","author":"Warner J.","year":"2003","unstructured":"J. Warner and R. Johnston. 2003. A simple demonstration that the global positioning system (GPS) is vulnerable to spoofing. Journal of Security Administration 25 (2003), 19--28.","journal-title":"Journal of Security Administration"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/1329539"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/1147685.1147698"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.automatica.2005.07.008"}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2847418","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2847418","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2847418","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,18]],"date-time":"2025-11-18T09:43:40Z","timestamp":1763459020000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2847418"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,2,20]]},"references-count":32,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2016,2,20]]}},"alternative-id":["10.1145\/2847418"],"URL":"https:\/\/doi.org\/10.1145\/2847418","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,2,20]]},"assertion":[{"value":"2014-08-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-11-01","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-02-20","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}