{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T03:19:47Z","timestamp":1783567187722,"version":"3.55.0"},"reference-count":46,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2020,5,22]],"date-time":"2020-05-22T00:00:00Z","timestamp":1590105600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100007297","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-17-1-2012, N00014-17-1-2504"],"award-info":[{"award-number":["N00014-17-1-2012, N00014-17-1-2504"]}],"id":[{"id":"10.13039\/100007297","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100007515","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1652544,CNS-1505701"],"award-info":[{"award-number":["CNS-1652544,CNS-1505701"]}],"id":[{"id":"10.13039\/100007515","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Cyber-Phys. Syst."],"published-print":{"date-parts":[[2020,7,31]]},"abstract":"<jats:p>\n            Defense mechanisms against network-level attacks are commonly based on the use of cryptographic techniques, such as lengthy message authentication codes (MAC) that provide data integrity guarantees. However, such mechanisms require significant resources (both computational and network bandwidth), which prevents their continuous use in resource-constrained cyber-physical systems (CPS). Recently, it was shown how physical properties of controlled systems can be exploited to relax these stringent requirements for systems where sensor measurements and actuator commands are transmitted over a potentially compromised network; specifically, that merely intermittent use of data authentication (i.e., at occasional time points during system execution), can still provide strong Quality-of-Control (QoC) guarantees even in the presence of false-data injection attacks, such as\n            <jats:italic>Man-in-the-Middle<\/jats:italic>\n            (MitM) attacks. Consequently, in this work, we focus on integrating security into existing resource-constrained CPS, in order to protect against MitM attacks on a system where a set of control tasks communicates over a real-time network with system sensors and actuators. We introduce a design-time methodology that incorporates requirements for QoC in the presence of attacks into end-to-end timing constraints for real-time control transactions, which include data acquisition and authentication, real-time network messages, and control tasks. This allows us to formulate a mixed integer linear programming-based method for direct synthesis of schedulable tasks and message parameters (i.e., deadlines and offsets) that do not violate timing requirements for the already deployed controllers, while adding a sufficient level of protection against network-based attacks; specifically, the synthesis method also provides suitable intermittent authentication policies that ensure the desired QoC levels under attack. To additionally reduce the security-related bandwidth overhead, we propose the use of cumulative message authentication at time instances when the integrity of messages from subsets of sensors should be ensured. Furthermore, we introduce a method for the opportunistic use of the remaining resources to further improve the overall QoC guarantees while ensuring system (i.e., task and message) schedulability. Finally, we demonstrate applicability and scalability of our methodology on synthetic automotive systems as well as a real-world automotive case-study.\n          <\/jats:p>","DOI":"10.1145\/3380866","type":"journal-article","created":{"date-parts":[[2020,5,25]],"date-time":"2020-05-25T21:26:46Z","timestamp":1590442006000},"page":"1-27","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":32,"title":["Integrating Security in Resource-Constrained Cyber-Physical Systems"],"prefix":"10.1145","volume":"4","author":[{"given":"Vuk","family":"Lesi","sequence":"first","affiliation":[{"name":"Duke University, Durham, North Carolina"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ilija","family":"Jovanov","sequence":"additional","affiliation":[{"name":"Duke University, Durham, North Carolina"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Miroslav","family":"Pajic","sequence":"additional","affiliation":[{"name":"Duke University, Durham, North Carolina"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2020,5,22]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"1994 SAE Handbook Vol. 2 pp. 23.366--23.272. Class C Application Requirement Considerations.  1994 SAE Handbook Vol. 2 pp. 23.366--23.272. Class C Application Requirement Considerations."},{"key":"e_1_2_1_2_1","volume-title":"2009 30th IEEE Real-Time Systems Symposium. 3--12","author":"Anta A."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s11241-006-4961-9"},{"key":"e_1_2_1_4_1","volume-title":"Howell","author":"Baruah Sanjoy K.","year":"1990"},{"key":"e_1_2_1_5_1","volume-title":"On handling indicator constraints in mixed integer programming. Computational Optimization and Applications 65, 3 (1","author":"Belotti Pietro","year":"2016"},{"key":"e_1_2_1_6_1","volume-title":"19th Euromicro Conference on Real-Time Systems (ECRTS\u201907)","author":"Bini E."},{"key":"e_1_2_1_7_1","volume-title":"Hard Real-Time Computing Systems: Predictable Scheduling Algorithms and Applications","author":"Buttazzo G. C.","edition":"3"},{"key":"e_1_2_1_8_1","volume-title":"Proceedings of USENIX Security","volume":"4","author":"Checkoway Stephen","year":"2011"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/1978246.1978332"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2017.00023"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2014.2303233"},{"key":"e_1_2_1_12_1","unstructured":"A. Greenberg. 2015. Hackers Remotely Kill a Jeep on the Highway Wired Magazine.  A. Greenberg. 2015. Hackers Remotely Kill a Jeep on the Highway Wired Magazine."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/EMWRTS.1998.684945"},{"key":"e_1_2_1_14_1","volume-title":"2016 IEEE Real-Time Systems Symposium (RTSS). 123--134","author":"Hasan M."},{"key":"e_1_2_1_15_1","volume-title":"2017 IEEE 56th Annual Conference on Decision and Control (CDC). 163--169","author":"Jovanov I."},{"key":"e_1_2_1_16_1","volume-title":"2018 IEEE Conference on Decision and Control (CDC). 2074--2079","author":"Jovanov I."},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2019.2898510"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.2514\/1.I010201"},{"key":"e_1_2_1_20_1","first-page":"49","article-title":"Stuxnet: Dissecting a cyberwarfare weapon. Security 8 Privacy","volume":"9","author":"Langner Ralph","year":"2011","journal-title":"IEEE"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS.2017.00012"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/3126518"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(80)90123-4"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2009.2014055"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2016.2573039"},{"key":"e_1_2_1_26_1","volume-title":"49th IEEE Conference on Decision and Control (CDC). 5967--5972","author":"Mo Y."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/32.637146"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/VETECF.2008.259"},{"key":"e_1_2_1_29_1","unstructured":"Gurobi Optimization Inc. 2014. Gurobi optimizer reference manual. (2014).  Gurobi Optimization Inc. 2014. Gurobi optimizer reference manual. (2014)."},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2016.2607420"},{"key":"e_1_2_1_31_1","first-page":"2","article-title":"Design and implementation of attack-resilient cyberphysical systems: With a focus on attack-resilient state estimators","volume":"37","author":"Pajic M.","year":"2017","journal-title":"IEEE Control Systems"},{"key":"e_1_2_1_32_1","volume-title":"ACM\/IEEE International Conference on Cyber-Physical Systems (ICCPS). 163--174","author":"Pajic M."},{"key":"e_1_2_1_33_1","volume-title":"Proceedings 19th IEEE Real-Time Systems Symposium. 26--37","author":"Palencia J. C.","year":"1998"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/TAC.2013.2266831"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2000.848446"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2014.2349498"},{"key":"e_1_2_1_38_1","doi-asserted-by":"crossref","volume-title":"Vehicle Dynamics and Control","author":"Rajamani Rajesh","DOI":"10.1007\/978-1-4614-1433-9"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/3078621"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.3182\/20110828-6-IT-1002.01721"},{"key":"e_1_2_1_42_1","doi-asserted-by":"crossref","unstructured":"John A. Stankovic Krithi Ramamritham and Marco Spuri. 1998. Deadline Scheduling for Real-Time Systems: EDF and Related Algorithms.  John A. Stankovic Krithi Ramamritham and Marco Spuri. 1998. Deadline Scheduling for Real-Time Systems: EDF and Related Algorithms.","DOI":"10.1007\/978-1-4615-5535-3"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1145\/2185505.2185515"},{"key":"e_1_2_1_44_1","unstructured":"Ken Tindell. 1994. Adding Time-offsets to Schedulability Analysis. Citeseer.  Ken Tindell. 1994. Adding Time-offsets to Schedulability Analysis. Citeseer."},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1145\/1275986.1275992"},{"key":"e_1_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1109\/TCAD.2016.2523937"},{"key":"e_1_2_1_47_1","doi-asserted-by":"crossref","first-page":"234","DOI":"10.1109\/TCOMM.1994.580218","article-title":"On the ability of establishing real-time channels in point-to-point packet-switched networks","volume":"42","author":"Zheng Qin","year":"1994","journal-title":"IEEE Transactions on Communications"},{"key":"e_1_2_1_48_1","doi-asserted-by":"publisher","DOI":"10.1109\/70.563654"}],"container-title":["ACM Transactions on Cyber-Physical Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3380866","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3380866","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3380866","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T22:32:45Z","timestamp":1750199565000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3380866"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,5,22]]},"references-count":46,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2020,7,31]]}},"alternative-id":["10.1145\/3380866"],"URL":"https:\/\/doi.org\/10.1145\/3380866","relation":{},"ISSN":["2378-962X","2378-9638"],"issn-type":[{"value":"2378-962X","type":"print"},{"value":"2378-9638","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,5,22]]},"assertion":[{"value":"2018-11-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2020-01-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2020-05-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}