<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01701167</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-08T23:53:12+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">On the use of watermark-based schemes to detect cyber-physical attacks</title>
            <author role="aut">
              <persName>
                <forename type="first">Jose</forename>
                <surname>Rubio-Hernan</surname>
              </persName>
              <email type="md5">11ffd8b735e6f92efd82d2544544e6cd</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="string">jose-manuel-rubio-hernan</idno>
              <idno type="idhal" notation="numeric">173716</idno>
              <idno type="halauthorid" notation="string">38903-173716</idno>
              <idno type="RESEARCHERID">http://www.researcherid.com/rid/O-5607-2019</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-9778-8049</idno>
              <idno type="IDREF">https://www.idref.fr/204676533</idno>
              <affiliation ref="#struct-442711"/>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-638"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Luca</forename>
                <surname>de Cicco</surname>
              </persName>
              <idno type="halauthorid">1046920-0</idno>
              <affiliation ref="#struct-253558"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Joaquin</forename>
                <surname>Garcia-Alfaro</surname>
              </persName>
              <email type="md5">b490bb6ca4d305ede751e1e4eb9e7573</email>
              <email type="domain">telecom-sudparis.eu</email>
              <idno type="idhal" notation="string">jgalfaro</idno>
              <idno type="idhal" notation="numeric">743397</idno>
              <idno type="halauthorid" notation="string">723594-743397</idno>
              <idno type="RESEARCHERID">http://www.researcherid.com/rid/A-4500-2008</idno>
              <idno type="GOOGLE SCHOLAR">2XOGqtsAAAAJ</idno>
              <idno type="IDREF">https://www.idref.fr/113064004</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-7453-4393</idno>
              <idno type="RESEARCHERID">http://www.researcherid.com/rid/http://www.researcherid.com/rid/A-4500-2008</idno>
              <affiliation ref="#struct-442711"/>
              <affiliation ref="#struct-95600"/>
              <affiliation ref="#struct-638"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Médiathèque</forename>
                <surname>Télécom SudParis &amp; Institut Mines-Télécom Business School</surname>
              </persName>
              <email type="md5">8d9568058c47dcee2bc21ac2481f44c9</email>
              <email type="domain">imtbs-tsp.eu</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2018-02-05 16:05:47</date>
              <date type="whenModified">2026-02-07 05:14:36</date>
              <date type="whenReleased">2018-02-09 13:23:44</date>
              <date type="whenProduced">2017-06</date>
              <date type="whenEndEmbargoed">2018-02-05</date>
              <ref type="file" target="https://hal.science/hal-01701167v1/document">
                <date notBefore="2018-02-05"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-01701167v1/file/18688.pdf" id="file-1701167-1741456">
                <date notBefore="2018-02-05"/>
              </ref>
              <ref type="externalLink" target="https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-017-0060-9"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="142673">
                <persName>
                  <forename>Médiathèque</forename>
                  <surname>Télécom SudParis &amp; Institut Mines-Télécom Business School</surname>
                </persName>
                <email type="md5">8d9568058c47dcee2bc21ac2481f44c9</email>
                <email type="domain">imtbs-tsp.eu</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01701167</idno>
            <idno type="halUri">https://hal.science/hal-01701167</idno>
            <idno type="halBibtex">rubiohernan:hal-01701167</idno>
            <idno type="halRefHtml">&lt;i&gt;EURASIP Journal on Information Security&lt;/i&gt;, 2017, 2017, pp.8-1 - 8-25. &lt;a target="_blank" href="https://dx.doi.org/10.1186/s13635-017-0060-9"&gt;&amp;#x27E8;10.1186/s13635-017-0060-9&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">EURASIP Journal on Information Security, 2017, 2017, pp.8-1 - 8-25. &amp;#x27E8;10.1186/s13635-017-0060-9&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-1701167-1741456"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="TELECOM-SUDPARIS" corresp="INSTITUT-MINES-TELECOM">Télécom SudParis</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="TELECOM-SUDPARIS-SACLAY" corresp="UNIV-PARIS-SACLAY">TELECOM-SUDPARIS-SACLAY</idno>
            <idno type="stamp" n="INSTITUTS-TELECOM">composantes instituts telecom </idno>
            <idno type="stamp" n="INSTITUT-MINES-TELECOM">Institut Mines Telecom</idno>
            <idno type="stamp" n="DEPARTEMENT-DE-MATHEMATIQUES">Collection du Département de Mathématiques</idno>
            <idno type="stamp" n="IP-PARIS-DEPARTEMENT-MATHEMATIQUES">Département de Mathèmatiques</idno>
            <idno type="stamp" n="SAMOVAR">Services répartis, Architectures, Modélisation, Validation, Administration des Réseaux</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">On the use of watermark-based schemes to detect cyber-physical attacks</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Jose</forename>
                    <surname>Rubio-Hernan</surname>
                  </persName>
                  <email type="md5">11ffd8b735e6f92efd82d2544544e6cd</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="string">jose-manuel-rubio-hernan</idno>
                  <idno type="idhal" notation="numeric">173716</idno>
                  <idno type="halauthorid" notation="string">38903-173716</idno>
                  <idno type="RESEARCHERID">http://www.researcherid.com/rid/O-5607-2019</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-9778-8049</idno>
                  <idno type="IDREF">https://www.idref.fr/204676533</idno>
                  <affiliation ref="#struct-442711"/>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-638"/>
                  <affiliation ref="#struct-441569"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Luca</forename>
                    <surname>de Cicco</surname>
                  </persName>
                  <idno type="halauthorid">1046920-0</idno>
                  <affiliation ref="#struct-253558"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Joaquin</forename>
                    <surname>Garcia-Alfaro</surname>
                  </persName>
                  <email type="md5">b490bb6ca4d305ede751e1e4eb9e7573</email>
                  <email type="domain">telecom-sudparis.eu</email>
                  <idno type="idhal" notation="string">jgalfaro</idno>
                  <idno type="idhal" notation="numeric">743397</idno>
                  <idno type="halauthorid" notation="string">723594-743397</idno>
                  <idno type="RESEARCHERID">http://www.researcherid.com/rid/A-4500-2008</idno>
                  <idno type="GOOGLE SCHOLAR">2XOGqtsAAAAJ</idno>
                  <idno type="IDREF">https://www.idref.fr/113064004</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-7453-4393</idno>
                  <idno type="RESEARCHERID">http://www.researcherid.com/rid/http://www.researcherid.com/rid/A-4500-2008</idno>
                  <affiliation ref="#struct-442711"/>
                  <affiliation ref="#struct-95600"/>
                  <affiliation ref="#struct-638"/>
                  <affiliation ref="#struct-441569"/>
                </author>
              </analytic>
              <monogr>
                <idno type="localRef">18689</idno>
                <idno type="halJournalId" status="VALID">105199</idno>
                <idno type="eissn">2510-523X</idno>
                <title level="j">EURASIP Journal on Information Security</title>
                <imprint>
                  <publisher>Hindawi/SpringerOpen</publisher>
                  <biblScope unit="volume">2017</biblScope>
                  <biblScope unit="pp">8-1 - 8-25</biblScope>
                  <date type="datePub">2017-06</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1186/s13635-017-0060-9</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Cyber-physical adversary</term>
                <term xml:lang="en">Attack mitigation</term>
                <term xml:lang="en">Cyber-physical attacks</term>
                <term xml:lang="en">Cyber-physical systems</term>
                <term xml:lang="en">Adversary model</term>
                <term xml:lang="en">Attack detection</term>
                <term xml:lang="en">Critical infrastructures</term>
                <term xml:lang="en">Networked-control system</term>
                <term xml:lang="en">Network security</term>
                <term xml:lang="en">Control theory</term>
                <term xml:lang="en">Cyber-physical security</term>
                <term xml:lang="en">Watermarking</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>We address security issues in cyber-physical systems (CPSs). We focus on the detection of attacks against cyber-physical systems. Attacks against these systems shall be handled both in terms of safety and security. Networked-control technologies imposed by industrial standards already cover the safety dimension. However, from a security standpoint, using only cyber information to analyze the security of a cyber-physical system is not enough, since the physical malicious actions that can threaten the correct behavior of the systems are ignored. For this reason, the systems have to be protected from threats to their cyber and physical layers. Some authors have handled replay and integrity attacks using, for example, physical attestation to validate the cyber process and to detect the attacks, or watermark-based detectors which uses also physical parameters to ensure the cyber layers. We reexamine the effectiveness of a stationary watermark-based detector. We show that this approach only detects adversaries that do not attempt to get any knowledge about the system dynamics. We analyze the detection ratio of the original design under the presence of new adversaries that are able to infer the system dynamics and are able to evade the detector with high frequency. We propose a new detection scheme which employs several non-stationary watermarks. We validate the detection efficiency of the new strategy via numeric simulations and via running experiments on a laboratory testbed. Results show that the proposed strategy is able to detect adversaries using non-parametric methods, but it is not equally effective against adversaries using parametric identification methods </p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-442711" status="OLD">
          <orgName>Réseaux, Systèmes, Services, Sécurité</orgName>
          <orgName type="acronym">R3S-SAMOVAR</orgName>
          <date type="end">2023-05-31</date>
          <desc>
            <address>
              <addrLine>TELECOM Sudparis 9 rue Charles Fourier 91011 EVRY</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://samovar.telecom-sudparis.eu</ref>
          </desc>
          <listRelation>
            <relation active="#struct-638" type="direct"/>
            <relation active="#struct-352124" type="indirect"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="department" xml:id="struct-95600" status="VALID">
          <orgName>Département Réseaux et Services de Télécommunications</orgName>
          <orgName type="acronym">TSP - RST</orgName>
          <desc>
            <address>
              <addrLine>Télécom SudParis - 9 rue Charles Fourier - 91011 Évry cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://rst.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-638" status="VALID">
          <idno type="IdRef">281286515</idno>
          <idno type="ISNI">0000000403830480</idno>
          <idno type="RNSR">200319330C</idno>
          <orgName>Services répartis, Architectures, MOdélisation, Validation, Administration des Réseaux</orgName>
          <orgName type="acronym">SAMOVAR</orgName>
          <desc>
            <address>
              <addrLine>Télécom Sudparis, 9 rue Charles Fourier -91011 Evry cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://samovar.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-352124" type="direct"/>
            <relation active="#struct-302102" type="indirect"/>
            <relation name="563936" active="#struct-563936" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-253558" status="VALID">
          <idno type="ROR">https://ror.org/03c44v465</idno>
          <orgName>Polytechnic University of Bari / Politecnico di Bari</orgName>
          <desc>
            <address>
              <addrLine>via Amendola, 126/B - 70126 BARI</addrLine>
              <country key="IT"/>
            </address>
            <ref type="url">http://www.poliba.it/en/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-352124" status="VALID">
          <idno type="IdRef">162347510</idno>
          <idno type="ISNI">0000000406406351</idno>
          <idno type="ROR">https://ror.org/05xvk4r52</idno>
          <idno type="Wikidata">Q43305</idno>
          <orgName>Télécom SudParis</orgName>
          <orgName type="acronym">TSP</orgName>
          <desc>
            <address>
              <addrLine>9 rue Charles Fourier -91011 Evry Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.telecom-sudparis.eu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-302102" type="direct"/>
            <relation name="563936" active="#struct-563936" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-302102" status="VALID">
          <idno type="IdRef">192427156</idno>
          <idno type="ISNI">000000012202567X</idno>
          <idno type="ROR">https://ror.org/025vp2923</idno>
          <idno type="Wikidata">Q27962533</idno>
          <orgName>Institut Mines-Télécom [Paris]</orgName>
          <orgName type="acronym">IMT</orgName>
          <date type="start">2012-03-01</date>
          <desc>
            <address>
              <addrLine>19 Place Marguerite Perey, 91120 Palaiseau</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.imt.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-563936" status="VALID">
          <idno type="IdRef">238327159</idno>
          <idno type="ISNI">0000000502717600</idno>
          <idno type="ROR">https://ror.org/042tfbd02</idno>
          <idno type="Wikidata">Q48759778</idno>
          <orgName>Institut Polytechnique de Paris</orgName>
          <orgName type="acronym">IP Paris</orgName>
          <date type="start">2019-06-02</date>
          <desc>
            <address>
              <addrLine>Route de Saclay, 91120 Palaiseau Cedex, France</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.ip-paris.fr</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>