Load frequency control (LFC) is widely employed to regulate power plants in modern power generation systems of smart grids. This paper presents a simple and yet powerful type of attacks, referred to as resonance attacks, on LFC power generation systems. Specifically, in a resonance attack, an adversary craftily modifies the input of a power plant according to a resonance source (e.g., rate of change of frequency) to produce a feedback on LFC power generation system, such that the state of the power plant quickly becomes instable. Extensive computer simulations on popular LFC power generation system models which consist of linear, non-linear, and/or high-order items clearly demonstrate the effectiveness of the proposed attacks. As the attack has very low computational cost and communication overhead, it is easy to launch in resource-limited devices such as intelligent electronic devices. In our simulations, the attacker keeps modified input within the normal operating range so as to invade plausibility and consistency based attack detection methods and yet the modifications can quickly drive the system beyond the admissible boundary. Another interesting finding is that by maliciously modifying the input such as power load and tie-line signal over multi-area interconnection channels, a multi-area LFC power generation system could become unreliable more quickly than a single-area system. Finally, we propose countermeasures on the proposed attacks.

Industrial automation and control systems (IACS) are tremendously employing supervisory control and data acquisition (SCADA) network. However, their integration into IACS is vulnerable to various cyber-attacks. In this article, we first present population extremal optimization (PEO)-based deep belief network detection method (PEO-DBN) to detect the cyber-attacks of SCADA-based IACS. In PEO-DBN method, PEO algorithm is employed to determine the DBN's parameters, including number of hidden units and the size of mini-batch and learning rate, as there is no clear knowledge to set these parameters. Then, to enhance the performance of single method for cyber-attacks detection, the ensemble learning scheme is introduced for aggregation of the proposed PEO-DBN method, called EnPEO-DBN. The proposed detection methods are evaluated on gas pipeline system dataset and water storage tank system dataset from SCADA network traffic by comparing with some existing methods. Through performance analysis, simulation results show the superiority of PEO-DBN and EnPEO-DBN.

This paper proposes a counterfeiting attack on an SVD-based ownership watermarking scheme. In the proposed attack, the adversary can claim the rightful ownership of any image by fabricating a bogus "original" image and meaningful logo. To defend against this attack, this paper proposes to generate the watermark from the original image and owner's logo with a one-way function.

This paper presents a novel Multi-message Ciphertext Policy Attribute-Based Encryption (MCP-ABE) technique, and employs the MCP-ABE to design an access control scheme for sharing scalable media based on data consumers' attributes (e.g., age, nationality, or gender) rather than an explicit list of the consumers' names. The scheme is efficient and flexible because MCP-ABE allows a content provider to specify an access policy and encrypt multiple messages within one ciphertext such that only the users whose attributes satisfy the access policy can decrypt the ciphertext. Moreover, the paper shows how to support resource-limited mobile devices by offloading computational intensive operations to cloud servers while without compromising data privacy.

In modern rail transport systems, balises are widely used to exchange track-train information via air-gap interface. In this paper, we first present the vulnerabilities on the standard balise air-gap interface, and then conduct vulnerability simulations using the system parameters that were specified in the European Train Control System. The simulation results show that the vulnerabilities can be exploited to launch effective and practical attacks, which could lead to catastrophic consequences, such as train derailment or collision. To mitigate the vulnerabilities and attacks, we propose to implement a challenge-response authentication process in the air-gap interface in the existing transport infrastructure.

Secure outsourced computation is a key technique for protecting data security and privacy in the cloud. Although fully homomorphic encryption (FHE) enables computations over encrypted data, it suffers from high computation costs in order to support an unlimited number of arithmetic operations. Recently, secure computations based on interactions of multiple computation servers and partially homomorphic encryption (PHE) were proposed in the literature, which enable an unbound number of addition and multiplication operations on encrypted data more efficiently than FHE and do not add any noise to encrypted data; however, these existing solutions are either limited in functionalities (e.g., computation on natural numbers only) or leak information of the underlying data. To tackle these shortcomings, this paper proposes Secure Outsourced Computation on Integers (SOCI) based on PHE and a twin-server architecture. Compared with the existing solutions, SOCI supports computations on encrypted integers (vs. natural numbers) and greatly improves the security and correctness of the computations. Results of theoretical analysis and experimental evaluation show that SOCI outperforms existing solutions in computation and communication efficiencies.