The problem of false data injection in a vector LQG system is studied in this work. An attacker compromises the input stream and modifies the control signals transmitted with the objective of increasing the quadratic cost incurred by the controller whilst maintaining a degree of stealthiness. The optimal adversarial control signals are characterized for a finite horizon LQG problem. The tradeoff between the increase in quadratic cost, and the detectability of data injection, as measured by the K-L divergence between legitimate and falsified data dynamics, is derived analytically. The optimal adversarial control signals are shown to be additive white Gaussian, independent of the state, with the sequence of variances derived as a function of system parameters and the desired cost increase.
['Ruochi Zhang', 'Parv Venkitasubramaniam']
Stealthy control signal attacks in vector LQG systems