Multi-agent reinforcement learning-based passenger spoofing attack on Mobility-as-a-Service

Simple item page
dc.contributor.authorChu, Kai-Fung
dc.contributor.authorGuo, Weisi
dc.date.accessioned2024-04-02T14:05:32Z
dc.date.available2024-04-02T14:05:32Z
dc.date.issued2024-03-19
dc.description.abstractCyber-physical systems, such as smart transportation, face security threats from both digital and physical realms. Recently, Mobility-as-a-Service (MaaS) has emerged as a novel transportation concept, offering passengers access to diverse mobility services via a unified platform. Central to this system is the smart MaaS coordinator, tasked with tailoring services to passengers based on their profiles and behaviors. However, the coordination of heterogeneous passengers introduces vulnerabilities, enabling malicious entities to exploit the system by impersonating priority passengers with falsified information. Effective detection mechanisms require a deep understanding of the spoofing process. This paper investigates threats to the smart MaaS coordinator, unveiling a new reinforcement learning-based attack named the passenger spoofing attack, which aims to mitigate the risk of inadvertently exposing MaaS vulnerabilities post-deployment. This attack leverages feedback from actions and experiences to manipulate system profitability and passenger satisfaction by generating false passenger information. Furthermore, our research reveals that multi-agent reinforcement learning, accounting for spatial distribution among malicious agents and passengers, strengthens the attack. Through simulations based on datasets from New York City and synthetic sources, we demonstrate that the attack can significantly reduce 70% of profit and 50% of passenger satisfaction. Spatial analysis indicates an effective distance of approximately two nodes from the origin or destination. This study enriches our comprehension of the vulnerabilities inherent in smart coordinators within MaaS, enabling the development of robust countermeasures against malicious actors.en_UK
dc.description.sponsorshipThis work was supported by EPSRC MACRO - Mobility as a service: Managing Cybersecurity Risks across Consumers, Organisations and Sectors (EP/V039164/1)en_UK
dc.identifier.citationChu KF, Guo W. (2024) Multi-agent reinforcement learning-based passenger spoofing attack on Mobility-as-a-Service. IEEE Transactions on Dependable and Secure Computing. Available online 19 March 2024en_UK
dc.identifier.issn1545-5971
dc.identifier.urihttps://doi.org/10.1109/TDSC.2024.3379283
dc.identifier.urihttps://dspace.lib.cranfield.ac.uk/handle/1826/21114
dc.language.isoen_UKen_UK
dc.publisherIEEEen_UK
dc.rightsAttribution 4.0 International*
dc.rights.urihttp://creativecommons.org/licenses/by/4.0/*
dc.subjectPassenger spoofing attacken_UK
dc.subjectmulti-agent reinforcement learningen_UK
dc.subjectmultimodal transporten_UK
dc.subjectintelligent transportation systemsen_UK
dc.titleMulti-agent reinforcement learning-based passenger spoofing attack on Mobility-as-a-Serviceen_UK
dc.typeArticleen_UK
dcterms.dateAccepted2024-03-16

Files

Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
learning_based_passenger_spoofing_attack-2024.pdf
Size:
2.21 MB
Format:
Adobe Portable Document Format
Description:
Download
License bundle
Now showing 1 - 1 of 1
No Thumbnail Available
Name:
license.txt
Size:
1.63 KB
Format:
Item-specific license agreed upon to submission
Description:
Download

Collections

Staff publications (SATM)