Ontology-Based Formal Approach for Safety and Security Verification of Industrial Control Systems
Date of Final Oral Examination (Defense)
Type of Culminating Activity
Master of Science in Computer Science
Hoda Mehrpouyan, Ph.D.
Bogdan Dit, Ph.D.
Craig Rieger, Ph.D.
Control logics, as part of the Industrial Control Systems (ICS), are used to control the physical processes of the critical infrastructures such as power plants, water, and gas distribution, etc. Most commonly, the Programmable Logic Controller (PLC) manages these processes through actuators based on information received from sensor readings. Any safety issues or cyberattacks on these systems may have catastrophic consequences on human lives and the environment. In an effort to improve the resilience and security of control logics, this thesis provides algorithms and tools to formally define the safety and security requirements w.r.t. the physical processes, and the industrial domain. Web Ontology Language (OWL) is utilized to create semantic relationships between the elements of industrial processes and knowledge mapping of the input and output of the control logic. Description Logic (DL) knowledge bases derived from OWL allow us to reason about the semantic security and safety concepts to ensure their consistency. Next, these formal specifications are translated to Timed Computational Tree Logic (TCTL) queries for the verification of the control logic modeled in UPPAAL as a network of timed automata (TA). In the second part of the thesis, boundary conditions are checked to perform a model verification. Boundary checking is essential in ICS because the sensor’s readings and actuator’s values need to be within the safe range to ensure secure ICS operation.
For the proof of concept, we have studied a part of an industrial chemical process to implement our proposed approach. Experimental results in this work proved that the proposed method detects the inconsistencies in safety and security requirements and ensures that the input and output variables of the control logic are within a safe and secure range. The performance study of our implementations shows that the time grows linearly with the number of axioms in the ontology and the number of iterations in TA model simulations. Hence, the approach is scalable to have a practical implementation to help the technicians and engineers to create a safer and more secure control logic for ICS processes.
Neupane, Ramesh, "Ontology-Based Formal Approach for Safety and Security Verification of Industrial Control Systems" (2022). Boise State University Theses and Dissertations. 1983.
Available for download on Monday, August 12, 2024