Robust Detection of Biasing Attacks on Misappropriated Distributed
Observers via Decentralized H∞ synthesis

arXiv:1709.07544v1 [cs.SY] 22 Sep 2017

V. Ugrinovskii
Abstract— We develop a decentralized H∞ synthesis approach to detection of biasing misappropriation attacks on
distributed observers. Its starting point is to equip the observer
with an attack model which is then used in the design of attack
detectors. A two-step design procedure is proposed. First, an
initial centralized setup is carried out which enables each node
to compute the parameters of its attack detector online in a
decentralized manner, without interacting with other nodes.
Each such detector is designed using the H∞ approach. Next,
the attack detectors are embedded into the network, which
allows them to detect misappropriated nodes from innovation
in the network interconnections.

I. I NTRODUCTION
The need to protect control systems from malicious attacks
has led to an emergence of methodologies for resilient control. Resilient control schemes intend to enhance tolerance
of control systems to attacks. The interest in the resilience
problem has increased substantially after situations were
discovered where an adversary was able to compromise
integrity of a control system by injecting a malicious input
into the measurements, which was not detected by bad data
detection units [2].
Cooperative networked control systems are particularly
vulnerable to such attacks. For instance, in networks of observers [4] fidelity of information is crucial, it makes possible
estimation of the plant even when it cannot be reliably estimated from local measurements. A misappropriated observer
node can provide a false information to its neighbours, and
use them to bias the entire network. On the other hand, as this
paper shows, information sharing between network nodes
provides opportunities for monitoring integrity of distributed
filter networks.
This paper considers the problem of detection of malicious
attacks, known as biasing attacks [10], on distributed state
observers. The problem was posed originally in [3], it is
motivated by the necessity to enhance resilience properties of
a general class of distributed state estimation networks such
as those introduced in [5], [7], [11], [14]. It is concerned
with a situation where one of the observers in the network is
misappropriated and is used to supply a biased information
to its neighbours.
While we adopt the same bias injection attack model
as in [3] and are concerned with detecting the same biasing behaviour of misappropriated nodes (also cf. [9]), our
This work was supported by the Australian Research Council and the
University of New South Wales.
V. Ugrinovskii is with the School of Engineering and Information Technology, University of New South Wales at the Australian Defence Force Academy, Canberra, ACT 2600, Australia.

v.ougrinovski@adfa.edu.au

approach to the synthesis of attack detectors is different
from [3]. It is based on the decoupling technique developed
in [15]. This allows us to dispense with several difficulties
of the vector dissipativity approach adopted in [3]. First
and foremost, our approach provides the observer nodes
with a better computational autonomy. In this paper, the
process of computing the characteristics of an attack detector
at each node is independent of other nodes. Although an
initial centralized setup is required for this, it involves only
characteristics of the communication network, and can be
completed without knowledge of the system and the filter
characteristics. This contrasts our results with the technique
in [3] where the design conditions are coupled. As a byproduct of decentralization, our technique applies to more
general time-varying distributed filters. It also brings several
other improvements, which simplify tuning the detector. At
the same time, the proposed scheme retains advantages of
the attack detection scheme developed in [3]. It is robust
against uncertainties in the sensors and the plant model and
relies on the same sensory and interconnection data as the
networked observer it seeks to protect.
The paper begins with presenting a biasing attack model
from [3] and also gives a background on the distributed
filtering in Section II, respectively. Section III presents the
problem formulation and our main results, which allow
one to construct a collaborative attack detector. The design
technique is described in Section IV. The conclusions are
given in Section V.
Notation: Rn denotes the real Euclidean n-dimensional
vector space, with the norm kxk = (x′ x)1/2 ; here the symbol
′
denotes the transpose of a matrix or a vector. The symbol
I denotes the identity matrix. For real symmetric n × n
matrices X and Y , Y > X (respectively, Y ≥ X) means
the matrix Y − X is positive definite (respectively, positive
semidefinite). The notation L2 [0, ∞) refers to the Lebesgue
space of Rn -valued vector-functions z(.), defined on the time
R∞
1/2
interval [0, ∞), with the
kzk2 , 0 kz(t)k2 dt
R ∞norm
and the inner product 0 z1′ (t)z2 (t)dt.
II. B IASING

MISAPPROPRIATION ATTACKS ON
DISTRIBUTED OBSERVERS

A distributed observer problem under consideration involves estimation of the state of a time varying plant
ẋ = A(t)x + B(t)w,

x(0) = x0 ,

(1)

subject to an unknown modeling disturbance w, from a
collection of measurements
yi = Ci (t)x + Di (t)vi ,

i = 1, 2, . . . , N,

(2)

PSfrag replacements
taken at N nodes of a sensor network, and also affected −νi
+
1
by measurement disturbances vi . The distributed estimation
Gi (s)
s
−
problem requires that the measurements are to be processed
fˆi
fi
at the sensor nodes, rather than centrally. For this, sensorsobservers are interconnected into a network, so that the
constituent nodes can share their pre-processed data and can
enhance their local estimates of the plant state.
Fig. 1. An auxiliary ‘input tracking’ model.
To describe the problem mathematically, let us assume that
n
the state x and the disturbance w are respectively in R ,
Rm , and each measurement yi is in Rpi . The disturbances substitutes one or several observers (3) with
w and vi ∈ Rmi will be assumed L2 integrable on [0, ∞).
x̂˙ i = A(t)x̂i + Li (t)(yi (t) − Ci (t)x̂i )
The initial state x0 is also unknown. A typical distributed
X
+
Kij (t)(cij − Wij x̂i ) + Fi fi , x̂i (0) = ξi , (5)
estimation problem involves constructing a network of filters
j∈Ni
of the form
x̂˙ i = A(t)x̂i + Li (t)(yi − Ci (t)x̂i )
X
+
Kij (t)(cij − Wij x̂i ), x̂i (0) = ξi ,

(3)

j∈Ni

each generating an estimate x̂i (t) of the plant state x(t) using
its measurement yi and the information received from the
neighbours, in the form of a pij -dimensional signal
cij = Wij x̂j + Hij vij ,

j ∈ Ni ;

(4)

here Ni denotes the neighbourhood of agent i, i.e., the set
of network nodes that communicate their information to i.
Since the plant is time-varying, the filter coefficients Li , Kij
are allowed to be time-varying as well.
The matrices Wij determine which part of the vector x̂j
is made available to node i by node j. Typically, distributed
observers are required where the plant may not be detectable
from local measurements at some of the nodes, and the
signals cij serve to complement the local measurements
with an additional information. Mathematically, to obtain an
unbiased estimate of x, node i may require a portion of x̂j
which lies in the subspace of states undetectable from yi .
The matrix Wij can be thought of as ‘projecting’ x̂j onto
that subspace. However, the communication channels which
deliver this information are typically subject to disturbances;
this is reflected in the term Hij vij in (4).
The problem is to determine estimator gains Li and Kij
in (3) to ensure that each estimate x̂i (or a part of it)
converges to x(t) in some sense, and that some filtering
performance against disturbances is guaranteed. On the other
hand, an adversary may seek to prevent this from happening.
A common means for interfering with a normal operation of
the system involve injecting false data into the measurements
or communications [6], however consideration is also given
to misappropriation attacks where adversary gains control
over the control algorithm and modifies it according to its
strategic goals [8]. In line with this idea, in [3] we considered
a situation where the attacker interferes with dynamics of
the hijacked node by injecting a biasing input into the filter.
In this paper we extend this model to consider a similar
type of attack on the network of time-varying observers (3).
Specifically, we consider the situation where the adversary

Here Fi ∈ Rn×nfi is a constant matrix and fi ∈ Rnfi
is the unknown signal representing an attack input. In the
following, we will present an algorithm for detecting and
tracking these unknown inputs.
Following [3], we will consider a class of attacks on the
filter (5) consisting of biasing inputs fi (t) of the form
fi (t) = fi1 (t) + fi2 (t),

(6)

where the Laplace transform of fi1 (t), fi1 (s), is such that
supω |ωfi1 (jω)|2 < ∞ and fi2 ∈ L2 [0, ∞). It can be shown
that one can select a proper nfi ×nfi transfer function Gi (s)
for which the system in Fig. 1 is stable and has the property
Z ∞
kfi − fˆi k2 dt < ∞,
(7)
0

which holds for all inputs that admit decomposition (6). In
particular, bias injection attack inputs of the form ‘constant
+ an exponentially decaying transient’ generated by a low
pass filter introduced in [10] have the form (6), and therefore
can be ‘tracked’ using a system shown in Fig. 1. Of course,
in reality it is not possible to track covert attack inputs.
However, the model in Fig. 1 is useful in that it allows us
to associate with the class of biasing attack inputs a system
ǫ̇i = Ωi ǫi + Γi νi ,
fˆi = Υi ǫi ,

ǫi (0) = 0,

(8)

where νi = fˆi − fi is an L2 -integrable input, according to
(7).
In practice, the transfer function Gi (s) must be selected
by the designer according to an anticipated behaviour of the
attack inputs fi (t). For example, for the mentioned class of
bias injection attacks of the form ‘constant + an exponentially
decaying transient’, one can choose Gi (s) to be a first
gi
I. The corresponding
order low pass filter, Gi (s) = s+2β
i
coefficients of the system (8) then take the form




0 I
0
Ωi =
, Υi = [I 0]. (9)
, Γi =
0 −2βi I
−gi
The choice of the transfer functions Gi (s) and the corresponding system (8) will affect performance of the attack
detectors to be introduced later in the paper. For instance,
in the above example, selecting βi , gi enables tuning the
performance of the attack detectors.

III. P ROBLEM F ORMULATION
First, let us summarize the information which the observer
nodes can utilize to detect an attack. Each node has two
innovation signals available,
ζi = yi − Ci (t)x̂i
= Ci (t)(x − x̂i ) + Di (t)vi ,
ζij = cij − Wij x̂i .

(12)

µi (0) = µi,0 ,

X

Kij (t)Hij vij + Fi νi ,

ei (0) = x0 − ξi ,

j∈Ni

ǫ̇i = Ωi ǫi + Γi νi

ǫi (0) = 0.

(15)

Also, using (10), (11), define outputs of the extended system
(15) as
ζi = Ci (t)ei + Di vi ,
ζij = −Wij (ej − ei ) + Hij vij ,

j ∈ Ni .

(16)
(17)

These outputs are available at each node of the network
and will be used as inputs to an attack detector, whose
function is to estimate the state of the system (15) and
generate an output ϕi that converges to fˆi and fi while
attenuating the disturbances.
The observer which we propose below for estimating
the combined state (ei , ǫi ) of this system is a time-varying
version of the observer introduced in [3]. This observer is as
follows:
X
Kij (t)Wij )êi
ê˙ i = (A(t) − Li (t)Ci (t) −
j∈Ni

X

Kij (t)Wij êj − Fi Υi ǫ̂i

+ L̄i (ζi − Ci (t)êi ) +

X

K̄ij (t)(ζij − Wij (êi − êj )),

j∈Ni

kϕi − fi k2 dt < +∞.

(13)

Here, Ad (t), Ld,i (t), Kd,ij (t), Wd,i , Wd,ij , Cd,i are matrix
valued coefficients to be found.
According to (13), the output of each detector subsystem
(12) is required to track fi in the L2 sense. This makes
these outputs suitable as indicators of the biasing attack. Note
that each detector relies on the information received from its
neighbouring nodes contained in the innovation signals ζij .
IV. D ESIGN

OF ATTACK DETECTORS

Define the estimation error at node i, ei = x−x̂i . It follows
from (1), (5) that the dynamics of this error are described by
X
ėi = (A(t) − Li (t)Ci (t) −
Kij (t)Wij )ei
j∈Ni

X

Kij (t)Wij ej + B(t)w − Li (t)Di (t)vi

X

Kij (t)Hij vij − Fi fi ,

j∈Ni

−

Kij (t)Wij ej − Fi Υi ǫi + B(t)w − Li (t)Di (t)vi

j∈Ni

0

+

−

+

j∈Ni

which guarantee that
Z +∞

+

(10)

The innovation ζi symbolizes the new information contained
in the measurement acquired by node i, compared with its
own prediction of that information. Likewise, the innovation
ζij symbolizes the new information contained in the message
that node i receives from its neighbour j ∈ Ni . Similar
to [3], these innovations will play an instrumental role in
detecting a rogue behaviour of misappropriated nodes. Both
signals are readily available at node i; computing them
only requires the local measurement yi and the neighbour
messages cij . j ∈ Ni , available at node i, along with x̂i ; see
(5).
The problem of detecting a biasing attack of the form (6)
on the observer network comprised of observers (5) consists
in designing a network of attack detectors

ϕi = Cd,i µi ,

j∈Ni

X

j∈Ni

(11)

µ̇i = Ad (t)µi + Ld,i (t)(ζi − Wd,i µi )
X
+
Kd,ij (t)(ζij − Wd,ij (µj − µi )),

result in the following extended system:
X
ėi = (A(t) − Li (t)Ci (t) −
Kij (t)Wij )ei

ei (0) = x0 − ξi .(14)

j∈Ni

Using the representation of the attack input fi = Υi ǫi − νi
and (8), the input fi can be eliminated from (14). This will

ǫ̂˙i = Ωi ǫ̂i + Ľi (ζi − Ci êi )
X
Ǩij (t)(ζij − Wij (êi − êj )),
+
j∈Ni

ϕi = Υi ǫ̂i ,

êi (0) = 0,

ǫ̂i (0) = 0.

(18)

From now, our effort is directed towards finding a constructive method for computing the coefficients of this observer.
We seek to obtain the gains L̄i (t), K̄ij (t), Ľi (t), Ǩij (t) such
that the output ϕi of each filter (18) converges to fi . This
will establish the filters (18) as biasing attack detectors. The
inputs to the observer (18) are innovation signals (10), (11).
Despite the similarity between the filter (18) and the filter
introduced in [3] for the similar task, the time-varying nature
of the problem under consideration requires us to revisit
the design method obtained in [3]. The design conditions
proposed in [3] involve solving certain coupled linear matrix
inequalities. Although similar inequalities can be derived for
the problem considered here, they will involve derivatives
of the vector storage functions and will therefore be differential matrix inequalities, with time-varying coefficients.
Such inequalities are very difficult to solve, even using
centralized solver facilities. For this reason, here we develop
an alternative technique for computing the coefficients of
the observer (18). Although our task of selecting the gains
L̄i , K̄ij , Ľi , Ǩij so that the observer (18) attenuates the

L2 -integrable disturbances w, vi , vij , νi , while guaranteeing
L2 convergence and an H∞ performance of the distributed
attack detector, remains unchanged we propose a different
technique which suits time-varying problems such as the one
considered here. The idea of this technique is to decentralize
the design process (but not the detectors themselves) to make
it tractable.
To explain the decentralized design of the attack detector,
let zi = ei − êi , δi = ǫi − ǫ̂i be estimation errors of the
observer (18). It is easy to see from (18) that these errors
evolve according to the equations
żi = (A(t) − L̂i (t)Ci (t) −

X

K̂ij (t)Wij )zi − Fi Υi δi

j∈Ni

−

X

K̂ij (t)(Wij zj + Hij vij ) + Bw

j∈Ni

−L̂i (t)Di (t)vi + Fi νi ,
δ̇i = Ωi δi − Ľi (t)Ci (t)zi −

X

Ǩij (t)Wij zi + Γi νi

j∈Ni

−

X

Ǩij (t)(Wij zj + Hij vij )

(19)

j∈Ni

zi (0) = x0 − ξi ,

ηij = Wij zj ,

j ∈ Ni .

(20)

where we used the following notation:
λi =

zi
,
δi

η̄i =

h

−1/2
(Zij1 ηij1 )′

h

′
′
. . . vij
v̄i = vij
qi
1

i′

,

−1/2
(Zijq ηijqi )′
i

0
0
..
.

0
1/2

...
...
..
.



0
0
..
.


Zij1

.
..

.

1/2
0 . . . Zijq

. . . Hijqi

i

Here Zij i = 1, . . . , N , j ∈ Ni are certain square pij × pij
positive definite matrices. It will be assumed that each matrix
Ei (t) = Di (t)Di ′ (t) is positive definite for all t.
The system (21) can be regarded as an uncertain system
affected by the disturbances w, vi , vij and signals νi ,
−1/2
Zij ηij . The latter signals will be treated as fictitious
disturbances. This allows us to apply the H∞ filtering theory
to obtain a gain coefficient Li (t) which guarantees that the
impact of the disturbances on the errors zi , δi is attenuated.
Introduce collection of positive definite (n + nfi ) × (n +
nfi ) block-diagonal matrices Ri , Xi , i = 1 . . . , N , partitioned as




Ri 0
Xi 0
Ri =
, Xi =
,
0 Ři
0 X̌i
with n × n matrices Ri , Xi and nfi × nfi matrices Ři , X̌i .
In addition, define the matrix
(23)

composed of the blocks


i = j,
∆i ,
−1
′
Φij = −Wij Uij Wij , i =
6 j, j ∈ Ni ,


0
i 6= j, j ∈
6 Ni ,

where

′
Uij = Hij Hij
+ Zij ,

∆i =

X

Wij′ Uij−1 Zij Uij−1 Wij .

j∈Ni

Also, let
R = diag[R1 , . . . , RN ],

∆ = diag[∆1 , . . . , ∆N ].

Theorem 1: Suppose there exists a constant γ > 0 and
positive definite symmetric matrices Ri , Ři , Zij , j ∈ Ni ,
i = 1, . . . N , such that
(i) the following linear matrix inequalities are satisfied
R + γ 2 (Φ + Φ′ − ∆) > I,

(24)

Ři > I;

(25)

(ii) each differential Riccati equation
i′

,
...



A(t) −Fi Υi
B(t) Fi
Ai (t) =
, Bi =
,
0
Ωi
0 Γi


Ci (t) 0


 Wij1 0 
L̂i K̂ij1 . . . K̂ijqi


Ci (t) =  ..
(22)
,
..  , Li =
Ľi Ǩij1 . . . Ǩijqi
 .
.
Wijqi 0


...
...
..
.

Φ = [Φij ]N
i,j=1 ,

Altogether, for each node i, qi such signals are introduced,
where qi is the cardinality of the set Ni , also known as indegree of node i. Each signal ηij is of dimension pij , i.e., it
matches the dimension of the corresponding communication
signal cij . The signals ηij serve as interconnection signals
for the large-scale system (19). Then the error system (19)
can be written as
 
d
w
λi = (Ai (t) − Li (t)Ci (t))λi + B(t)
νi
dt
 
vi
−Li (t)Di (t)  v̄i  ,
(21)
η̄i



Di (t) 0
 0 H
ij1

Di (t) = 
..
 ..
.
 .
0
0

δi (0) = 0.

Here we used the notation L̂i = Li + L̄i , K̂ij = Kij + K̄i .
Also, let us introduce signals





Ẏi = Ai Yi + Yi A′i
−Yi (C′i E−1
i Ci −

1
Ri )Yi + Bi B′i , (26)
γ2

Yi (0) = X−1
i ,
has a positive definite symmetric bounded solution
Yi (t) on the interval [0, ∞), i.e., for all t ≥ 0, α1 I <
Yi (t) = Yi′ (t) < α2 I, for some α1,2 > 0.

Then the network of observers (18) with the coefficients L̄i ,
K̄ij , Ľi , Ǩij , obtained by partitioning the matrices
Li (t) = Yi (t)Ci (t)′ E−1
i (t).

(27)

according to (22), guarantees that the noise- and attack-free
system (19) is exponentially stable, while in the presence of
disturbances or an attack it holds that
Z +∞
kϕi − fi k2 dt < ∞ ∀i.
0

The proof of the theorem is removed for brevity.
Remark 1: It follows from Theorem 1 that zi ∈ L2 [0, ∞),
therefore every signal ηij defined in (20) is L2 -integrable.
This allows us to conclude that every observer (21) has a
local disturbance attenuation property. Specifically, according
to the H∞ filtering theory [1] it follows from the condition
(ii) of Theorem 1 that
Z T
(zi′ Ri zi + δi′ Ři δi )dt
0

Z Th
≤ γ 2 kx0 − ξi k2Xi +
kwk2 + kvi k2
0
i 
X
2
2
+
(kvij k + kWij zj kZ −1 ) dt
(28)
ij

j∈Ni

This condition reveals the role of the matrices Ri , Ři and Zij
included in the Riccati equation (26) as design parameters.
These matrices weigh the output error of the observer (19)
at node i against the information about the errors at the
neighbouring nodes which supply information to node i.
V. C ONCLUSION
The paper has proposed a decentralized H∞ synthesis
method for the design of distributed observers for detecting
biasing attacks on distributed filter networks. The proposed
detectors can pick a biasing attack from local sensory information complemented with information extracted form
the routine information exchange within the network. Our
method accounts for the fact that such filters operate in noisy
environments, therefore H∞ performance of the proposed
detectors against disturbances is also guaranteed.
R EFERENCES
[1] T. Başar and P. Bernhard. H ∞ -optimal control and related minimax
design problems: a dynamic game approach. Birkhäuser, Boston, 2nd
edition, 1995.
[2] G. Dán and H. Sandberg. Stealth attacks and protection schemes
for state estimators in power systems. In First IEEE International
Conference on Smart Grid Communications (SmartGridComm), pages
214–219, 2010.
[3] M. Deghat, V. Ugrinovskii, I. Shames, and C. Langbort. Detection
of biasing attacks on distributed estimation networks. In Proc. 55th
IEEE Conference on Decision and Control, Las Vegas, NV, 2016.
arXiv:1609.05300.
[4] F. Garin and L. Schenato. Distributed estimation and control applications using linear consensus algorithms. In A. Bemporad, M. Heemels,
and M. Johansson, editors, Networked Control Systems, volume 406 of
Lecture Notes in Control and Information Sciences, chapter 3, pages
75–107. Springer Verlag, 2011.
[5] R. Olfati-Saber. Distributed Kalman filtering for sensor networks. In
Proc. 46th IEEE CDC, pages 5492–5498, 2007.

[6] F. Pasqualetti, F. Dorfler, and F. Bullo. Attack detection and identification in cyber-physical systems. IEEE Tran. Automat. Contr.,
58(11):2715–2729, 2013.
[7] B. Shen, Z. Wang, and Y. S. Hung. Distributed H∞ -consensus filtering
in sensor networks with multiple missing measurements: The finitehorizon case. Automatica, 46(10):1682 – 1688, 2010.
[8] R. S. Smith. Covert misappropriation of networked control systems:
Presenting a feedback structure. IEEE Control Systems, 35(1):82–92,
2015.
[9] A. Teixeira, I. Shames, H. Sandberg, and K. H. Johansson. Distributed
fault detection and isolation resilient to network model uncertainties.
IEEE Transactions on Cybernetics, 44(11):2024–2037, 2014.
[10] A. Teixeira, I. Shames, H. Sandberg, and K. H. Johansson. A secure
control framework for resource-limited adversaries. Automatica,
51:135 – 148, 2015.
[11] V. Ugrinovskii. Distributed robust filtering with H∞ consensus of
estimates. Automatica, 47(1):1 – 13, 2011.
[12] V. Ugrinovskii. Distributed robust estimation over randomly switching
networks using H∞ consensus. Automatica, 49(1):160–168, 2013.
[13] V. Ugrinovskii. Gain-scheduled synchronization of parameter varying
systems via relative H∞ consensus with application to synchronization of uncertain bilinear systems. Automatica, 50(11):2880–2887,
2014. arXiv:1406.5622 [cs.SY].
[14] V. Ugrinovskii and C. Langbort. Distributed H∞ consensus-based
estimation of uncertain systems via dissipativity theory. IET Control
Theory & App., 5(12):1458–1469, 2011.
[15] M. Zamani and V. Ugrinovskii. Minimum-energy distributed filtering.
In Proc 53rd IEEE CDC, Los Angeles, CA, 2014. arXiv:1409.5292.

