Text

"Your Smart Home Could Be Hacked—But Researchers are working on how to Keep it Safe"

2025-10-06

Imagine your smart thermostat turning your home into a sauna—or your water system flooding your basement—all because of a cyberattack. As our homes, cities, and industries become increasingly connected, the risk of cyber-physical sabotage grows. But researchers at Mälardalen University have developed a powerful new tool to fight back: the CRYSTAL framework.

Making Cyber-Physical Systems Smarter and Safer

Cyber-physical systems (CPS) are everywhere—from smart homes and self-driving cars to water treatment plants and automated factories. These systems combine software with physical components, like sensors, pumps and motors, to control real-world processes. But when hackers target these systems, the consequences can be very real—and very dangerous.

The CRYSTAL framework, developed by a team of researchers at MDU, including Dr. Fereidoun Moradi, Dr. Sara Abbaspour Asadollah, and Prof. Marjan Sirjani, is designed to detect and prevent cyberattacks on these systems—both before they occur and during their execution. It has been developed with concepts and technology support from the Rebeca Research team.https://rebeca-lang.org/projects

CRYSTAL gives engineers a way to simulate attacks and build defences before the system goes live. “We wanted to create a system that doesn’t just react to attacks, but anticipates them,” says Dr. Moradi.

How It Works

CRYSTAL works in two phases:

  1. Design-Time Defence: Before a system is built, CRYSTAL uses mathematical models to simulate how it might be attacked. It checks for vulnerabilities and helps engineers fix them early.
  2. Runtime Monitoring: Once the system is running, CRYSTAL uses a “Tiny Digital Twin”—a simplified virtual copy of the system—to monitor its behavior. If something suspicious happens, like a sensor sending false data or a pump turning on unexpectedly, CRYSTAL can detect it and help prevent it.

The Tiny Digital Twin watches over the system and knows how it should behave. If something goes wrong, it raises the alarm.

Real-World Testing

The team tested CRYSTAL on several real-world systems:

  • A temperature control system that keeps rooms comfortable.
  • A pneumatic control system used in manufacturing.
  • A water treatment system that ensures a clean water supply.

In each case, CRYSTAL was able to detect attacks like false sensor readings, malicious commands, and coordinated sabotage. In some systems, it caught over 75% of attacks in real time, showing that the research works in practice.”

How This Research Supports the UN Sustainability Goals

Goal 6: Clean Water and Sanitation

The framework helps protect water treatment systems from cyberattacks, ensuring safe and reliable access to clean water.

Goal 9: Industry, Innovation and Infrastructure

By making industrial systems more secure and resilient, CRYSTAL supports sustainable innovation and infrastructure development.

Goal 11: Sustainable Cities and Communities

CRYSTAL enhances the safety of smart city technologies, from traffic control to energy management, making urban environments more secure.

Source material