The coupling of physical systems with information technologies infrastructure in a networked control system (NCS) has a number of advantages such as remote control, reduced system complexity, low maintenance cost and improved system efficiency. But these benefits come at the cost of making the NCS vulnerable to cyberphysical attacks on the communication layer. One such class of attacks is the zero-dynamics attack (ZDA) which targets the internal dynamics of an NCS with the potential to cause serious damage to the physical system while remaining stealthy. A better understanding of how ZDAs are constructed will enable more effective countermeasures. In this paper, we discuss two approaches for constructing a ZDA and demonstrate using three industrial processes studied in this context perhaps for the first time.

在网络控制系统 (NCS) 中，物理系统与信息技术基础设施的耦合具有许多优点，例如远程控制、降低系统复杂性、低维护成本和提高系统效率。但这些好处的代价是使 NCS 容易受到通信层的网络物理攻击。一类这样的攻击是零动态攻击 (ZDA)，它针对 NCS 的内部动态，有可能对物理系统造成严重损坏，同时保持隐身。更好地了解 ZDA 的构建方式将有助于采取更有效的对策。在本文中，我们讨论了构建 ZDA 的两种方法，并演示了使用在此背景下研究的三个工业过程，这可能是第一次。