Scheduling Intrusion Detection Systems in Resource-Bounded Cyber-Physical Systems

In order to be resilient to attacks, a cyber-physical system (CPS) must be able to detect attacks before they can cause significant damage. To achieve this, intrusion detection sys-tems (IDS) may be deployed, which can detect attacks and alert human operators, who can then intervene. However, the resource-constrained nature of many CPS poses a chal-lenge, since reliable IDS can be computationally expensive. Consequently, computational nodes may not be able to per-form intrusion detection continuously, which means that we have to devise a schedule for performing intrusion detec-tion. While a uniformly random schedule may be optimal in a purely cyber system, an optimal schedule for protecting CPS must also take into account the physical properties of the system, since the set of adversarial actions and their con