Method and architecture for providing integrated design of cyber-physical system with watermarking

A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for co-designing a controller and a watermarking signal for a cyber-physical system, the method comprising:

• determining a first set of values of a first set of parameters indicating operations of the controller based on an initial set of values of a second set of parameters representing the watermarking signal, wherein the watermarking signal is a type of signal combinable with a control signal from the controller for monitoring an output signal of the cyber-physical system for detecting malicious data at a plurality of time instances;
• determining a second set of values of the second set of parameters based on the first set of values;
• determining a state manager based on the first and second sets of values, wherein the state manager determines states of the cyber-physical system from the monitored output signal;
• and
• determining a detector capable of identifying presence of an attack from the states of the cyber-physical system at the plurality of time instances using the watermarking signal.

A computer system, comprising:

• a storage device;
• a processor;
• a non-transitory computer-readable storage medium storing instructions, which when executed by the processor causes the processor to perform a method for co-designing a controller and a watermarking signal for a cyber-physical system, the method comprising:
• determining a first set of values of a first set of parameters indicating operations of the controller based on an initial set of values of a second set of parameters representing the watermarking signal, wherein the watermarking signal is a type of signal combinable with a control signal from the controller for monitoring an output signal of the cyber-physical system for detecting malicious data at a plurality of time instances;
• determining a second set of values of the second set of parameters based on the first set of values;
• determining a state manager based on the first and second sets of values, wherein the state manager determines states of the cyber-physical system from the monitored output signal;
• and
• determining a detector capable of identifying presence of an attack from the states of the cyber-physical system at the plurality of time instances using the watermarking signal.