Cyber-Physical Zero Trust Architecture for Industrial Cyber-Physical Systems

Abstract

In recent years, zero trust architecture (ZTA) has become an emerging security architecture. When deploying to industrial systems, an important consideration of the ZTA is the effective modeling of the cross-layer penetration between cyber and physical layers. An ineffective model of cross-layer penetration can lead to inferior performance in mitigating cross-layer failures. To tackle this issue, this paper develops a subset of the ZTA dedicated to industrial cyber-physical systems (ICPS), called the Cyber-Physical-ZTA, to model cross-layer penetration. Its uniqueness mainly consists of two innovative techniques, namely, a multi-layer access control engine and an integrated physical model-based and data-driven policy optimizer. The multi-layer access control engine can evaluate the trust scores for each component considering their cross-layer impact, while the integration of data-driven and model-based approaches can improve efficiency in optimizing access policies. Our simulations are conducted to demonstrate the effectiveness of Cyber-Physical-ZTA. In comparison to the standard ZTA, with no rules added to detect cross-layer penetration, the multi-access policy engine of the Cyber-Physical-ZTA increases the detection probability against false data injection (FDI) attacks by more than 31%.