Physical-Cyber Vulnerability Identification

Differentiating from conventional cybersecurity approaches, the Physical-Cyber System penetration test, PCS-PenTest, evaluates physical side-channel attacks where RF energy is injected into the system and received on unintended antennas, transduced by accidental RF receivers, and causes abnormal system operation and/or state changes. Finding these vulnerabilities is challenging. Given that the potential attack surface is consists of all frequencies and angles, the automated tool will computationally explore the space faster and more thoroughly than possible with physical experimentation. This automation approach uses standard engineering languages for system description (SysML for system architecture, 3D CAD for physical modeling, EagleCAD and ODB++ for circuit layout, and State machines for behavior capture). The analysis approach uses a set of widely-used engineering tools, including Ansys SI-Wave, Ansys HFSS, UPPAAL, PRISM, Spice, Modelica, Simulink and others. The tool is intended to be used by system vendors and CPS security professionals. Models are automatically created and executed for the domain engineering tools, eliminating the need for specific tool training.