arXiv subjects

Henrik Sandberg

Publications and source records attributed to Henrik Sandberg.

At least 91 records · Page 5Linked to original sources

arXiv2019

Secure distributed filtering for unstable dynamics under compromised observations

In this paper, we consider a secure distributed filtering problem for linear time-invariant systems with bounded noises and unstable dynamics under compromised observations. A malicious attacker is able to compromise a subset of the agents and manipulate the observations arbitrarily. We first propose a recursive distributed filter consisting of two parts at each time. The first part employs a saturation-like scheme, which gives a small gain if the innovation is too large. The second part is a consensus operation of state estimates among neighboring agents. A sufficient condition is then established for the boundedness of estimation error, which is with respect to network topology, system structure, and the maximal compromised agent subset. We further provide an equivalent statement, which connects to 2s-sparse observability in the centralized framework in certain scenarios, such that the sufficient condition is feasible. Numerical simulations are finally provided to illustrate the developed results.

eess.SY↗

arXiv2019

On Fundamental Limitations of Dynamic Feedback Control in Regular Large-Scale Networks

We study fundamental performance limitations of distributed feedback control in large-scale networked dynamical systems. Specifically, we address the question of whether dynamic feedback controllers perform better than static (memoryless) ones when subject to locality constraints. We consider distributed linear consensus and vehicular formation control problems modeled over toric lattice networks. For the resulting spatially invariant systems we study the large-scale asymptotics (in network size) of global performance metrics that quantify the level of network coherence. With static feedback from relative state measurements, such metrics are known to scale unfavorably in lattices of low spatial dimensions, preventing, for example, a 1-dimensional string of vehicles to move like a rigid object. We show that the same limitations in general apply also to dynamic feedback control that is locally of first order. This means that the addition of one local state to the controller gives a similar asymptotic performance to the memoryless case. This holds unless the controller can access noiseless measurements of its local state with respect to an absolute reference frame, in which case the addition of controller memory may fundamentally improve performance. In simulations of platoons with 20-200 vehicles we show that the performance limitations we derive manifest as unwanted accordion-like motions. Similar behaviors are to be expected in any network that is embeddable in a low-dimensional toric lattice, and the same fundamental limitations would apply. To derive our results, we present a general technical framework for the analysis of stability and performance of spatially invariant systems in the limit of large networks.

math.OC↗

arXiv2019

Actuator Security Indices Based on Perfect Undetectability: Computation, Robustness, and Sensor Placement

This paper proposes an actuator security index based on the definition of perfect undetectability. This index can help a control system operator to localize the most vulnerable actuators in the networked control system, which can then be secured. Particularly, the security index of an actuator equals the minimum number of sensors and actuators that needs to be compromised, such that a perfectly undetectable attack against that actuator can be conducted. A method for computing the index for small scale networked control systems is derived, and it is shown that the index can potentially be increased by placing additional sensors. The difficulties that appear once the system is of a large scale are then outlined: the problem of calculating the index is NP--hard, the index is vulnerable to system variations, and it is based on the assumption that the attacker knows the entire model of the system. To overcome these difficulties, a robust security index is introduced. The robust index can be calculated in polynomial time, it is unaffected by the system variations, and it can be related to both limited and full model knowledge attackers. Additionally, we analyze two sensor placement problems with the objective to increase the robust indices. We show that both of these problems have submodular structures, so their suboptimal solutions with performance guarantees can be obtained in polynomial time. Finally, the theoretical developments are illustrated through numerical examples.

eess.SY↗

arXiv2019

Two-Way Coding in Control Systems Under Injection Attacks: From Attack Detection to Attack Correction

In this paper, we introduce the method of two-way coding, a concept originating in communication theory characterizing coding schemes for two-way channels, into (networked) feedback control systems under injection attacks. We first show that the presence of two-way coding can distort the perspective of the attacker on the control system. In general, the distorted viewpoint on the attacker side as a consequence of two-way coding will facilitate detecting the attacks, or restricting what the attacker can do, or even correcting the attack effect. In the particular case of zero-dynamics attacks, if the attacks are to be designed according to the original plant, then they will be easily detected; while if the attacks are designed with respect to the equivalent plant as viewed by the attacker, then under the additional assumption that the plant is stabilizable by static output feedback, the attack effect may be corrected in steady state.

eess.SY↗

arXiv2018

Synchronization of Kuramoto oscillators in a bidirectional frequency-dependent tree network

This paper studies the synchronization of a finite number of Kuramoto oscillators in a frequency-dependent bidirectional tree network. We assume that the coupling strength of each link in each direction is equal to the product of a common coefficient and the exogenous frequency of its corresponding head oscillator. We derive a sufficient condition for the common coupling strength in order to guarantee frequency synchronization in tree networks. Moreover, we discuss the dependency of the obtained bound on both the graph structure and the way that exogenous frequencies are distributed. Further, we present an application of the obtained result by means of an event-triggered algorithm for achieving frequency synchronization in a star network assuming that the common coupling coefficient is given.

eess.SY↗

arXiv2018

Estimating the Impact of Cyber-Attack Strategies for Stochastic Control Systems

Risk assessment is an inevitable step in implementation of a cyber-defense strategy. An important part of this assessment is to reason about the impact of possible attacks. In this paper, we propose a framework for estimating the impact of cyber-attacks in stochastic linear control systems. The framework can be used to estimate the impact of denial of service, rerouting, sign alternation, replay, false data injection, and bias injection attacks. For the stealthiness constraint, we adopt the Kullback-Leibler divergence between residual sequences during the attack. Two impact metrics are considered: (1) The probability that some of the critical states leave a safety region; and (2) The expected value of the infinity norm of the critical states. For the first metric, we prove that the impact estimation problem can be reduced to a set of convex optimization problems. Thus, the exact solution can be found efficiently. For the second metric, we derive an efficient to calculate lower bound. Finally, we demonstrate how the framework can be used for risk assessment on an example.

eess.SY↗

arXiv2018

A Game-theoretic Framework for Security-aware Sensor Placement Problem in Networked Control Systems

This paper studies the sensor placement problem in a networked control system for improving its security against cyber-physical attacks. The problem is formulated as a zero-sum game between an attacker and a detector. The attacker's decision is to select $f$ nodes of the network to attack whereas the detector's decision is to place $f$ sensors to detect the presence of the attack signals. In our formulation, the attacker minimizes its visibility, defined as the system $L_2$ gain from the attack signals to the deployed sensors' outputs, and the detector maximizes the visibility of the attack signals. The equilibrium strategy of the game determines the optimal locations of the sensors. The existence of Nash equilibrium for the attacker-detector game is studied when the underlying connectivity graph is a directed or an undirected tree. When the game does not admit a Nash equilibrium, it is shown that the Stackelberg equilibrium of the game, with the detector as the game leader, can be computed efficiently. Finally, the attacker-detector game is studied in a cooperative adaptive cruise control algorithm for vehicle platooning problem. The existence of Nash equilibrium is investigated for both directed and undirected platoons and the effect of the position of the reference vehicle on the game value is studied. Our results show that, under the optimal sensor placement strategy, an undirected topology provides a higher security level for a networked control system compared with its corresponding directed topology.

math.OC↗

arXiv2018

Ensuring Privacy with Constrained Additive Noise by Minimizing Fisher Information

The problem of preserving the privacy of individual entries of a database when responding to linear or nonlinear queries with constrained additive noise is considered. For privacy protection, the response to the query is systematically corrupted with an additive random noise whose support is a subset or equal to a pre-defined constraint set. A measure of privacy using the inverse of the trace of the Fisher information matrix is developed. The Cramer-Rao bound relates the variance of any estimator of the database entries to the introduced privacy measure. The probability density that minimizes the trace of the Fisher information (as a proxy for maximizing the measure of privacy) is computed. An extension to dynamic problems is also presented. Finally, the results are compared to the differential privacy methodology.

math.OC↗

arXiv2018

Privacy-aware Minimum Error Probability Estimation: An Entropy Constrained Approach

This paper studies the design of an optimal privacyaware estimator of a public random variable based on noisy measurements which contain private information. The public random variable carries non-private information, however, its estimate will be correlated with the private information due to the estimation process. It is assumed that the estimate of the public random variable is revealed to an untrusted party. The objective is to design an estimator for the public random variable such that the leakage of the private information, via the estimation process, is kept below a certain level. The privacy metric is defined as the discrete conditional entropy of the private random variable, which carries the private information, given the output of the estimator. A binary loss function is considered for the estimation of the public random variable. It is shown that the optimal privacy-aware estimator is the solution of a (possibly infinite-dimensional) convex optimization problem. We next study the optimal perfect privacy estimator which ensures that the estimate of the public random variable is independent of the private information. A necessary and sufficient condition is derived which guarantees that an estimator satisfies the perfect privacy requirement. It is shown that the optimal perfect privacy estimator is the solution of a linear optimization problem. A sufficient condition for the existence of the optimal perfect privacy estimator is derived when the estimator has access to discretized measurements of sensors.

math.OC↗

arXiv2018

Optimal Weight Allocation of Dynamic Distribution Networks and Positive Semi-definiteness of Signed Laplacians

In this paper, we consider the robustness of a basic model of a dynamical distribution network. In the first problem, i.e., optimal weight allocation, we minimize the H-inf- norm of the dynamical distribution network subject to allocation of the weights on the edges. It is shown that this optimization problem can be formulated as a semi-definite program. Next we consider the semi-definiteness of the weighted graph Laplacian matrix with negative weights on the edges. A necessary and sufficient condition, using the effective resistance matrix, is established to guarantee the positive semi-definiteness of the Laplacian matrix. Furthermore, the bounded real lemma is derived for state-space symmetric systems.

math.OC↗

arXiv2018

A Graph-Theoretic Approach to the $\mathcal{H}_{\infty}$ Performance of Dynamical Systems on Directed and Undirected Networks

We study a graph-theoretic approach to the $\mathcal{H}_{\infty}$ performance of leader following consensus dynamics on directed and undirected graphs. We first provide graph-theoretic bounds on the system $\mathcal{H}_{\infty}$ norm of the leader following dynamics and show the tightness of the proposed bounds. Then, we discuss the relation between the system $\mathcal{H}_{\infty}$ norm for directed and undirected networks for specific classes of graphs, i.e., balanced digraphs and directed trees. Moreover, we investigate the effects of adding directed edges to a directed tree on the resulting system $\mathcal{H}_{\infty}$ norm. In the end, we apply these theoretical results to a reference velocity tracking problem in a platoon of connected vehicles and discuss the effect of the location of the leading vehicle on the overall $\mathcal{H}_{\infty}$ performance of the system.

math.OC↗

arXiv2018

Retrofit Control: Localization of Controller Design and Implementation

In this paper, we propose a retrofit control method for stable network systems. The proposed approach is a control method that, rather than an entire system model, requires a model of the subsystem of interest for controller design. To design the retrofit controller, we use a novel approach based on hierarchical state-space expansion that generates a higher-dimensional cascade realization of a given network system. The upstream dynamics of the cascade realization corresponds to an isolated model of the subsystem of interest, which is stabilized by a local controller. The downstream dynamics can be seen as a dynamical model representing the propagation of interference signals among subsystems, the stability of which is equivalent to that of the original system. This cascade structure enables a systematic analysis of both the stability and control performance of the resultant closed-loop system. The resultant retrofit controller is formed as a cascade interconnection of the local controller and an output rectifier that rectifies an output signal of the subsystem of interest so as to conform to an output signal of the isolated subsystem model while acquiring complementary signals neglected in the local controller design, such as interconnection signals from neighboring subsystems. Finally, the efficiency of the retrofit control method is demonstrated through numerical examples of power systems control and vehicle platoon control.

eess.SY↗

arXiv2018

Resilient Estimation and Control on $k$-Nearest Neighbor Platoons: A Network-Theoretic Approach

This paper is concerned with the network-theoretic properties of so-called $k$-nearest neighbor intelligent vehicular platoons, where each vehicle communicates with $k$ vehicles, both in front and behind. The network-theoretic properties analyzed in this paper play major roles in quantifying the resilience and robustness of three generic distributed estimation and control algorithms against communication failures and disturbances, namely resilient distributed estimation, resilient distributed consensus, and robust network formation. Based on the results for the connectivity measures of the $k$-nearest neighbor platoon, we show that extending the traditional platooning topologies (which were based on interacting with nearest neighbors) to $k$-nearest neighbor platoons increases the resilience of distributed estimation and control algorithms to both communication failures and disturbances. Finally, we discuss how the performance of each algorithm scales with the size of the vehicle platoon.

math.OC↗

arXiv2018

Performance Limitations of Distributed Integral Control in Power Networks Under Noisy Measurements

Distributed approaches to secondary frequency control have become a way to address the need for more flexible control schemes in power networks with increasingly distributed generation. The distributed averaging proportional-integral (DAPI) controller presents one such approach. In this paper, we analyze the transient performance of this controller, and specifically address the question of its performance under noisy frequency measurements. Performance is analyzed in terms of an H2 norm metric that quantifies power losses incurred in the synchronization transient. While previous studies have shown that the DAPI controller performs well, in particular in sparse networks and compared to a centralized averaging PI (CAPI) controller, our results prove that additive measurement noise may have a significant negative impact on its performance and scalability. This impact is shown to decrease with an increased inter-nodal alignment of the controllers' integral states, either through increased gains or increased connectivity. For very large and sparse networks, however, the requirement for inter-nodal alignment is so large that a CAPI approach may be preferable. Overall, our results show that distributed secondary frequency control through DAPI is possible and may perform well also under noisy measurements, but requires careful tuning.

math.OC↗

arXiv2018

The interconnection of quadratic droop voltage controllers is a Lotka-Volterra system: implications for stability analysis

This paper studies the stability of voltage dynamics for a power network in which nodal voltages are controlled by means of quadratic droop controllers with nonlinear AC reactive power as inputs. We show that the voltage dynamics is a Lotka-Volterra system, which is a class of nonlinear positive systems. We study the stability of the closed-loop system by proving a uniform ultimate boundedness result and investigating conditions under which the network is cooperative. We then restrict to study the stability of voltage dynamics under a decoupling assumption (i.e., zero relative angles). We analyze the existence and uniqueness of the equilibrium in the interior of the positive orthant for the system and prove an asymptotic stability result.

eess.SY↗

arXiv2017

Asymptotic and finite-time almost global attitude tracking: representations free approach

In this paper, the attitude tracking problem is considered using the rotation matrices. Due to the inherent topological restriction, it is impossible to achieve global attractivity with any continuous attitude control system on $SO(3)$. Hence in this work, we propose some control protocols achieve almost global tracking asymptotically and in finite time, respectively. In these protocols, no world frame is needed and only relative state informations are requested. For finite-time tracking case, Filippov solutions and non-smooth analysis techniques are adopted to handle the discontinuities. Simulation examples are provided to verify the performances of the control protocols designed in this paper.

math.OC↗

arXiv2017

Optimization of the $H_\infty$-norm of Dynamic Flow Networks

In this paper, we study the $H_\infty$-norm of linear systems over graphs, which is used to model distribution networks. In particular, we aim to minimize the $H_\infty$-norm subject to allocation of the weights on the edges. The optimization problem is formulated with LMI (Linear-Matrix-Inequality) constraints. For distribution networks with one port, i.e., SISO systems, we show that the $H_\infty$-norm coincides with the effective resistance between the nodes in the port. Moreover, we derive an upper bound of the $H_\infty$-norm, which is in terms of the algebraic connectivity of the graph on which the distribution network is defined.

math.OC↗

arXiv2017

Coherence in Synchronizing Power Networks with Distributed Integral Control

We consider frequency control of synchronous generator networks and study transient performance under both primary and secondary frequency control. We model random step changes in power loads and evaluate performance in terms of expected deviations from a synchronous frequency over the synchronization transient; what can be thought of as lack of frequency coherence. We compare a standard droop control strategy to two secondary proportional integral (PI) controllers: centralized averaging PI control (CAPI) and dis- tributed averaging PI control (DAPI). We show that the performance of a power system with DAPI control is always superior to that of a CAPI controlled system, which in turn has the same transient performance as standard droop control. Furthermore, for a large class of network graphs, performance scales unfavorably with network size with CAPI and droop control, which is not the case with DAPI control. We discuss optimal tuning of the DAPI controller and describe how inter- nodal alignment of the integral states affects performance. Our results are demonstrated through simulations of the Nordic power grid.

math.OC↗