利用开关噪声实现硬件认证与异常检测,提升宽禁带器件安全防护能力。
Adapting Noise-Driven PUF and AI for Secure WBG ICS: A Proof-of-Concept Study
- 从宽禁带器件固有噪声中提取熵值,构建抗仿冒物理指纹
- 在100kHz噪声下实现95%检测准确率,响应延迟低于毫秒级
- 适合工业控制系统中高可靠性、低延迟安全需求场景
宽禁带(WBG)技术显著提升电力系统效率、体积与性能,但也带来工业控制系统的传感器污染和网络安全风险,尤其受高频噪声及复杂网络物理攻击影响。本概念验证(PoC)研究将噪声驱动的物理不可克隆函数(PUF)与机器学习(ML)辅助异常检测框架适配至WBG ICS传感链路。通过从不可避免的WBG开关噪声(最高达100 kHz)中提取熵作为PUF源,并同步将其用作实时威胁指标,所提系统融合硬件级认证与异常检测功能。方法结合混合机器学习模型与自适应贝叶斯滤波,具备对自然电磁干扰(EMI)和主动对抗性操纵双重鲁棒性的低延迟检测能力。通过对良性与攻击场景(包括EMI注入、信号篡改、节点冒用)下的WBG模块进行详细仿真,实现95%检测准确率与亚毫秒级处理延迟。结果表明,基于物理特性的双用途噪声利用是一种可扩展的工业控制系统防御基础。研究为下一代融合硬件特性与人工智能的智能保护策略奠定基础。
原文摘要 · Abstract (English)
Wide-bandgap (WBG) technologies offer unprecedented improvements in power system efficiency, size, and performance, but also introduce unique sensor corruption and cybersecurity risks in industrial control systems (ICS), particularly due to high-frequency noise and sophisticated cyber-physical threats. This proof-of-concept (PoC) study demonstrates the adaptation of a noise-driven physically unclonable function (PUF) and machine learning (ML)-assisted anomaly detection framework to the demanding environment of WBG-based ICS sensor pathways. By extracting entropy from unavoidable WBG switching noise (up to 100 kHz) as a PUF source, and simultaneously using this noise as a real-time threat indicator, the proposed system unites hardware-level authentication and anomaly detection. Our approach integrates hybrid machine learning (ML) models with adaptive Bayesian filtering, providing robust and low-latency detection capabilities resilient to both natural electromagnetic interference (EMI) and active adversarial manipulation. Through detailed simulations of WBG modules under benign and attack scenarios--including EMI injection, signal tampering, and node impersonation--we achieve 95% detection accuracy and sub-millisecond processing latency. These results demonstrate the feasibility of physics-driven, dual-use noise exploitation as a scalable ICS defense primitive. Our findings lay the groundwork for next-generation security strategies that leverage inherent device characteristics, bridging hardware and artificial intelligence (AI) for enhanced protection of critical ICS infrastructure.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。