Multi-stage Attack and Proactive Defense for CBTC

摘要

CBTC is one of the most advanced signal systems at present. The security of the CBTC systems are crucial for its close relation with people's livelihood, thus the defense methods study is necessary. The information attacks in the CBTC systems have two main attributes: multi-stage and cyber-physical fusion which makes the consequence of failed defense enormous, and more importantly, the traditional passive defense that only statically defense against network domain attacks that can hardly achieve effective defense anymore. Therefore, we adopt proactive defense to solve this problem. In this paper, an in-depth analysis of the multi-stage feature of attacks in the CBTC systems has been made, based on which, we propose a multistage game model framework to describe the attack-defense interaction in each stage and obtain the optimal defense strategies by calculating the game equilibrium. Finally, the result reveals the effectiveness and superiority of the proposed method.