Scalable Industrial Control System Analysis via XAI-Based Gray-Box Fuzzing
Author
Abstract

Conventional approaches to analyzing industrial control systems have relied on either white-box analysis or black-box fuzzing. However, white-box methods rely on sophisticated domain expertise, while black-box methods suffers from state explosion and thus scales poorly when analyzing real ICS involving a large number of sensors and actuators. To address these limitations, we propose XAI-based gray-box fuzzing, a novel approach that leverages explainable AI and machine learning modeling of ICS to accurately identify a small set of actuators critical to ICS safety, which result in significant reduction of state space without relying on domain expertise. Experiment results show that our method accurately explains the ICS model and significantly speeds-up fuzzing by 64x when compared to conventional black-box methods.

Year of Publication
2023
Date Published
sep
URL
https://ieeexplore.ieee.org/document/10298447
DOI
10.1109/ASE56229.2023.00161
Google Scholar | BibTeX | DOI