Security and Privacy in the Emerging Cyber-Physical World: A Survey

Abstract

With the emergence of low-cost smart and connected IoT devices, the area of cyber-physical security is becoming increasingly important. Past research has demonstrated new threat vectors targeting the transition process between the cyber and physical domains, where the attacker exploits the sensing system as an attack surface for signal injection or extraction of private information. Recently, there have been attempts to characterize an abstracted model for signal injection, but they primarily focus on the path of signal processing. This paper aims to systematize the existing research on security and privacy problems arising from the interaction of cyber world and physical world, with the context of broad CPS applications. The primary goals of the systematization are to (1) reveal the attack patterns and extract a general attack model of existing work, (2) understand possible new attacks, and (3) motivate development of defenses against the emerging cyber-physical threats.

arXiv commentAccepted by IEEE Communications Surveys & Tutorials (2021)

References in corpus (19)

• A Survey of Distributed Consensus Protocols for Blockchain Networks
• Voice Recognition Algorithms using Mel Frequency Cepstral Coefficient (MFCC) and Dynamic Time Warping (DTW) Techniques
• A Survey of COVID-19 Contact Tracing Apps
• DolphinAtack: Inaudible Voice Commands
• Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving
• Deep Neural Network Compression for Aircraft Collision Avoidance Systems
• Information Leakage from Optical Emanations
• Mobile Device Identification via Sensor Fingerprinting
• COVID-19 Contact-tracing Apps: a Survey on the Global Deployment and Challenges
• Invisible Mask: Practical Attacks on Face Recognition with Infrared
• Synesthesia: Detecting Screen Content via Remote Acoustic Side Channels
• Trick or Heat? Manipulating Critical Temperature-Based Control Systems Using Rectification Attacks
• Injected and Delivered: Fabricating Implicit Control over Actuation Systems by Spoofing Inertial Sensors
• A Framework for Evaluating Security in the Presence of Signal Injection Attacks
• Detecting Cyber-Physical Attacks in Additive Manufacturing using Digital Audio Signing
• A Survey on the Security and the Evolution of Osmotic and Catalytic Computing for 5G Networks
• Deep-Spying: Spying using Smartwatch and Deep Learning
• Elastic Pathing: Your Speed is Enough to Track You
• Sensor Defense In-Software (SDI):Practical Software Based Detection of Spoofing Attacks on Position Sensor