We propose a new clock synchronization architecture for systems under time transfer attacks. Facilitated by a feedforward control with feedback trim --based clock adjustment, coupled with packet filtering and frequency shaping techniques, our proposed architecture bounds the clock errors in the presence of a powerful network attacker capable of attacking packets between a master and a client. A key advantage is consistent measurements, timely coordination, and synchronized actuation in distributed systems. In contrast, current time synchronization architectures behave poorly under attacks due to assumptions that the network is benign and delays are symmetric. The usage of feedback controllers aggravates poor performance. We provide an architecture that is indifferent to delays and eases the integration to traditional protocols. We implement a delay attack--resistant precision time protocol and validate the results on a hardware-supported testbed.

中文翻译：

---

使用反馈微调来减轻时间转移攻击的前馈控制案例

我们为受到时间转移攻击的系统提出了一种新的时钟同步架构。由一个促进带反馈微调的前馈控制--基于时钟的调整，加上包过滤和频率整形技术，我们提出的架构在强大的网络攻击者存在的情况下限制时钟错误，该攻击者能够攻击主机和客户端之间的数据包。一个关键优势是分布式系统中的一致测量、及时协调和同步驱动。相反，由于假设网络是良性的并且延迟是对称的，当前的时间同步架构在攻击下表现不佳。反馈控制器的使用加剧了性能不佳。我们提供了一种不受延迟影响的架构，并简化了与传统协议的集成。我们实施了一种抗延迟攻击的精确时间协议，并在硬件支持的测试平台上验证了结果。