Robust Intrusion Detection for Resilience Enhancement of Industrial Control Systems: An Extended State Observer Approach

We address the problem of attack signal estimation in industrial control systems that are subjected to actuator false data injection attack (FDIA) and where the sensor measurements are corrupted by non-negligible high-frequency measurement noise. The actuator FDIA signal is categorized as disturbance to be estimated and subsequently compensated, based on the concept of extended state observer (ESO). We investigate the efficacy of two alternatives to conventional ESO namely, cascade ESO (CESO) and low-power higher-order ESO (LHESO), that guarantee improved estimation performance in case of noisy measurement data as well as time-varying attack signals. Simulation results under different types of FDIAs demonstrate the advantages of designed schemes in comparison to conventional linear and nonlinear ESOs, using network motion control system as an illustrative example.