Cyber-physical systems (CPS) encompass the next generation of computerized control for countless aspects of the physical world and interactions thereof. The typical engineering process for CPS reuses existing designs, models, components, and software from one version to the next. For example, in automotive engineering, it is common to reuse significant portions of existing model-year vehicle designs when developing the next model-year vehicle, and such practices are common across CPS industries, from aerospace to biomedical. While reuse drastically enhances efficiency and productivity, it leads to the possibility of introducing unintended mismatches between subcomponents' specifications. For example, a 2011 US National Highway Traffic Safety Administration (NHTSA) recall of over 1.5 million model-year 2005-2010 vehicles was due to the upgrade of a physical transmission component that was not appropriately addressed in software. A mismatch between cyber and physical specifications may occur when a software or hardware upgrade (in effect, a cyber or physical specification change) is not addressed by an update (in effect, a matching specification change) in the other domain. This research will develop new techniques and software tools to detect automatically if cyber-physical specification mismatches exist, and then mitigate the effects of such mismatches at runtime, with the overall goal to yield more reliable and safer CPS upon which society increasingly depends. The detection and mitigation methods developed will be evaluated in an energy CPS testbed. While the evaluation testbed is in the energy domain, the methods are applicable to other CPS domains such as automotive, aerospace, and biomedical. The educational goals will bridge gaps between computer science and electrical engineering, preparing a diverse set of next-generation CPS engineers by developing education platforms to enhance CPS engineering design and verification skills. The proposed research is to develop new techniques and tools to automatically identify and mitigate the effects of cyber-physical specification mismatches. There are three major research objectives. The first objective is to identify cyber-physical specification mismatches. To identify mismatches, a detection problem will be formalized using the framework of hybrid input/output automata (HIOA). Offline algorithms will be designed to find candidate specifications from models and implementations using static and dynamic analyses, and then identify candidate mismatches. The second objective is to monitor and assure safe CPS upgrades. As modern CPS designs are complex, it may be infeasible to determine all specifications and mismatches between all subcomponents at design time. Runtime monitoring and verification methods will be developed for inferred specifications to detect mismatches at runtime. When they are identified, a runtime assurance framework building on supervisory control and the Simplex architecture will assure safe CPS runtime operation. The third objective is to evaluate safe CPS upgrades in an example CPS. The results of the other objectives and their ability to ensure safe CPS upgrades will be evaluated in an energy CPS testbed, namely an AC electrical distribution microgrid that interfaces DC-producing renewables like photovoltaics to AC.

Recent progress in autonomous and connected vehicle technologies coupled with Federal and State initiatives to facilitate their widespread use provide significant opportunities in enhancing mobility and safety for highway transportation. This project develops signalized intersection control strategies and other enabling sensor mechanisms for jointly optimizing vehicle trajectories and signal control by taking advantage of existing advanced technologies (connected vehicles and vehicle to infrastructure communications, sensors, autonomous vehicle technologies, etc.) Traffic signal control is a critical component of the existing transportation infrastructure and it has a significant impact on transportation system efficiency, as well as energy consumption and environmental impacts. In addition to advanced vehicle technologies, the strategies developed consider the presence of conventional vehicles in the traffic stream to facilitate transition to these new strategies in a mixed vehicle environment. The project also develops and uses simulation tools to evaluate these strategies as well as to provide tools that can be used in practice to consider the impacts of automated and connected vehicles in arterial networks. The project involves two industry partners (ISS and Econolite) to help facilitate new product development in anticipation of increased market penetration of connected and autonomous vehicles. The approach will be tested through simulation at University of Florida, through field tests at the Turner Fairbank Highway Research Center (TFHRC) and through the control algorithms that also will be deployed and tested in the field. The project will support multiple graduate students and will support creation of on-line classes. The project is at the intersection of several different disciplines (optimization, sensors, automated vehicles, transportation engineering) required to produce a real-time engineered system that depends on the seamless integration of several components: sensor functionality, connected and autonomous vehicle information communication, signal control optimization strategy, missing and erroneous information, etc. The project develops and implements optimization processes and strategies considering a seamless fusion of multiple data sources, as well as a mixed vehicle stream (autonomous, connected, and conventional vehicles) under real-world conditions of uncertain and missing data. Since trajectories for connected and conventional vehicles cannot be optimized or guaranteed, the project examines the impacts of the presence of automated vehicles on the following vehicles in a queue. The project also integrates advanced sensing technology needed to control a mixed vehicle stream, as well as address malfunctioning communications in connected and autonomous vehicles.

Today's automobiles are increasingly autonomous. The latest Mercedes S-class sedan applies corrective action when its driver strays out of lane or tailgates too closely. Semi-autonomy will soon yield to full autonomy. Nissan has promised a line of self-driving cars by 2020. Maritime craft are likewise moving from rudimentary autopilots to full autonomy, and autonomous aerial vehicles will doubtless play a significant role in the future economy. Current versions of these vehicles are cocooned in an array of sensors, but neither the sensors nor the timing, navigation, and collision avoidance algorithms they feed have been designed for security against malicious attacks. Radar and acoustic sensors transmit predictable, uncoded signals; vehicle-to-vehicle communication protocols are either unauthenticated or critically dependent on insecure civil GPS signals (or both); and vehicle state estimators are designed for robustness but not security. These vulnerabilities are not merely conceptual: GPS spoofing attacks have been demonstrated against a drone and an ocean vessel, causing the drone to crash and the vessel to veer off course; likewise, it appears possible to cause road accidents by fooling a car's radar sensor into thinking a crash is imminent, thus triggering automatic braking. This proposal seeks funding to fix these vulnerabilities by developing sensors and high-level decision-making algorithms that are hardened against such so-called field attacks. The goal of secure control systems is to survive and operate safely despite sensor measurements or control commands being compromised. This proposal focuses on an emergent category of cyber-physical attack that has seen little scrutiny in the secure control literature. Like cyber attacks, these attacks are hard to detect and can be executed from a distance, but unlike cyber attacks, they are effective even against control systems whose software, data, and communications networks are secure, and so can be considered a more menacing long-term threat. These are attacks on the physical fields such as electromagnetic, magnetic, acoustic, etc. measured by system sensors. As specialized sensor attacks, field attacks seek to compromise a system's perception of reality non-invasively from without, not from within. We emphasize field attacks against navigation, collision avoidance, and synchronization sensors, as these are of special importance to the rise of autonomous vehicles and the smart grid. This proposal's goal is to develop a coherent analytical foundation for secure perception in the presence of field attacks and to develop a suite of algorithms and tools to detect such attacks. A key insight behind this proposal's approach is that the physics of field attacks impose fundamental difficulties on the attacker that can be exploited and magnified to enable attack detection. This work will progressively build security into navigation, collision avoidance, and timing perception from the physical sensory layer to the top-level state estimation algorithms. The outcome of this work will be smarter, more skeptical sensor systems for autonomous vehicles and other autonomous systems.

The automotive industry finds itself at a cross-roads. Current advances in MEMS sensor technology, the emergence of embedded control software, the rapid progress in computer technology, digital image processing, machine learning and control algorithms, along with an ever increasing investment in vehicle-to-vehicle (V2V) and vehicle-to-infrastructure (V2I) technologies, are about to revolutionize the way we use vehicles and commute in everyday life. Automotive active safety systems, in particular, have been used with enormous success in the past 50 years and have helped keep traffic accidents in check. Still, more than 30,000 deaths and 2,000,000 injuries occur each year in the US alone, and many more worldwide. The impact of traffic accidents on the economy is estimated to be as high as $300B/yr in the US alone. Further improvement in terms of driving safety (and comfort) necessitates that the next generation of active safety systems are more proactive (as opposed to reactive) and can comprehend and interpret driver intent. Future active safety systems will have to account for the diversity of drivers' skills, the behavior of drivers in traffic, and the overall traffic conditions. This research aims at improving the current capabilities of automotive active safety control systems (ASCS) by taking into account the interactions between the driver, the vehicle, the ASCS and the environment. Beyond solving a fundamental problem in automotive industry, this research will have ramifications in other cyber-physical domains, where humans manually control vehicles or equipment including: flying, operation of heavy machinery, mining, tele-robotics, and robotic medicine. Making autonomous/automated systems that feel and behave "naturally" to human operators is not always easy. As these systems and machines participate more in everyday interactions with humans, the need to make them operate in a predictable manner is more urgent than ever. To achieve the goals of the proposed research, this project will use the estimation of the driver's cognitive state to adapt the ASCS accordingly, in order to achieve a seamless operation with the driver. Specifically, new methodologies will be developed to infer long-term and short-term behavior of drivers via the use of Bayesian networks and neuromorphic algorithms to estimate the driver's skills and current state of attention from eye movement data, together with dynamic motion cues obtained from steering and pedal inputs. This information will be injected into the ASCS operation in order to enhance its performance by taking advantage of recent results from the theory of adaptive and real-time, model-predictive optimal control. The correct level of autonomy and workload distribution between the driver and ASCS will ensure that no conflicts arise between the driver and the control system, and the safety and passenger comfort are not compromised. A comprehensive plan will be used to test and validate the developed theory by collecting measurements from several human subjects while operating a virtual reality-driving simulator.

This project addresses urgent challenges in high confidence validation and verification of automotive vehicles due to on-going and anticipated introduction of advanced, connected and autonomous vehicles into mass production. Since such vehicles operate across both physical and cyber domains, faults can occur in traditional physical components, in cyber components (i.e., algorithms, processors, networks, etc.), or in both. Thus, advanced vehicles need to be tested for both physical and cyber-related fault conditions. The goal of this project is to develop theory, methods, and novel tools for generating and optimizing test trajectories and data inputs that can uncover both physical and cyber faults of future automotive vehicles. The level of vehicle reliability and safety achieved for current vehicles is remarkable considering their mass production, low cost, and wide range of operating conditions. If successful, the research advances made in this project will enable achieving similar levels of reliability and safety for future vehicles relying on advanced driver assistance technologies, connectivity and autonomy. The project will advance the field of cyber-physical systems, in general, and their lifecycle management, in particular. The validation and verification theory and methodology for cyberphysical systems will be expanded for uncovering anomalies and faults, especially using comprehensive case-based and optimization-based techniques for test scenario generation. The theoretical advances and case studies will contribute to the state-of-the-art in optimal control theory, game theory, information theory, data collection and processing, autonomous and connected vehicles, and automotive control. Sampling-based vehicle data acquisition and vehicle-aware data management strategies will be developed which can be applied more broadly, e.g., to cloud-based vehicle prognostics / conditional maintenance and mobile health-monitoring devices. Finally, approaches for efficient on-board data collection and aggregation will be implemented in a Cyber-physical system (CPS) Black Box prototype. The development of a vehicle-aware data management system (VDMS) will be pursued, leading to optimized use of data mining and compression inside the CPS Black Box to aggressively reduce the communication and computational costs. Synergistically with theoretical and methodological advances, automotive case studies will be undertaken with both realistic simulations and real experiments in collaboration with an industrial partner (AVL).

In the recent past the term "Smart Cities" was introduced to mainly characterize the integration into our daily lives of the latest advancements in technology and information. Although there is no standardized definition of Smart Cities, what is certain is that it touches upon many different domains that affect a city's physical and social capital. Smart cities are intertwined with traffic control systems that use advanced infrastructures to mitigate congestion and improve safety. Traffic control management strategies have been largely focused on improving vehicular traffic flows on highways and freeways but arterials have not been used properly and pedestrians are mostly ignored. This work proposes to introduce a novel hierarchical adaptive controls paradigm to urban network traffic control that will adapt to changing movement and interaction behaviors from multiple entities (vehicles, public transport modes, bicyclists, and pedestrians). Such a paradigm will leverage several key ideas of cyber-physical systems to rapidly and automatically pin-point and respond to urban arterial congestion thereby improving travel time and reliability for all modes. Safety will also be improved since advanced warnings actuated by the proposed cyber-physical system will alert drivers to congested areas thereby allowing them to avoid these areas, or to adapt their driving habits. Such findings have a tangible effect on the well-being, productivity, and health of the traveling public. The primary goal is to create a Cyber-Control Network (CCN) that will integrate seamlessly across heterogeneous sensory data in order to create effective control schemes and actuation sequences. Accordingly, this project introduces a Cyber-Physical architecture that will then integrate: (i) a sub-network of heterogeneous sensors, (ii) a decision control substrate, and (iii) a sub-actuation network that carries out the decisions of the control substrate (traffic control signals, changeable message signs). This is a major departure from more prevalent centralized Supervisory Control And Data Acquisition (SCADA), in that the CCN will use a hierarchical architecture that will dynamically instantiate the sub-networks together to respond rapidly to changing cyber-physical interactions. Such an approach allows the cyber-physical system to adapt in real-time to salient traffic events occurring at different scales of time and space. The work will consequently introduce a ControlWare module to realize such dynamic sub-network reconfiguration and provide decision signal outputs to the actuation network. A secondary, complementary goal is to develop a heterogeneous sensor network to reliably and accurately monitor and identify salient arterial traffic events. Other impacts of the project include the integration of the activities with practitioners (e.g., traffic engineers), annual workshops/tutorials, and outreach to K-12 institutions.

Parking can take up a significant amount of the trip costs (time and money) in urban travel. As such, it can considerably influence travelers' choices of modes, locations, and time of travel. The advent of smart sensors, wireless communications, social media and big data analytics offers a unique opportunity to tap parking's influence on travel to make the transportation system more efficient, cleaner, and more resilient. A cyber-physical social system for parking is proposed to realize parking's potential in achieving the above goals. This cyber-physical system consists of smart parking sensors, a parking and traffic data repository, parking management systems, and dynamic traffic flow control. If successful, the results of the investigation will create a new paradigm for managing parking to reduce traffic congestion, emissions and fuel consumption and to enhance system resilience. These results will be disseminated broadly through publications, workshops and seminars. The research will provide interdisciplinary training to both graduate and undergraduate students. The results of this research also fills a void in our graduate transportation curriculum in which parking management gets little coverage. The investigators will organize an online short training course in Coursera and National Highway Institute to bring results to a broader audience. The investigators will also collaborate with Carnegie Museum of Natural History to develop an online digital map and related educational programs, which will be presented in the museum galleries during public events. Technically, new theories, algorithms and systems for efficient management of transportation infrastructure through parking will be developed in this research, leveraging cutting-edge sensing technology, communication technology, big data analytics and feedback control. The research probes massive individualized and infrastructure based traffic and parking data to gain a deeper understanding of travel and parking behavior, and develops a novel reservoir-based network flow model that lays the foundation for modeling the complex interactions between parking and traffic flow in large-scale transportation networks. The theory will be investigated at different levels of granularity to reveal how parking information and pricing mechanisms affect network flow in a competitive market of private and public parking. In addition, this research proposes closed-loop control mechanisms to enhance mobility and sustainability of urban networks. Prices, access and information of publicly owned on-street and off-street parking are dynamically controlled to: a) change day-to-day behavior of all commuters through day-to-day travel experience and/or online information systems; b) change travel behavior of a fraction of adaptive travelers on the fly who are aware of time-of-day parking information and comply to the recommendations; and c) influence the market prices of privately owned parking areas through a competitive parking market.