This article presents a novel approach of state filtering scheme and the sensor scheduling co-design for cyber-physical systems subject to random deception attacks. Such cyber attacks are switching disturbances that affect the input information transmitted from the controller to the plant through a constrained communication network. The cyber-physical system dynamics can be modelled as an augmented state model, while the unknown input reconstruction is obtained from a modified Kalman filter recursions under communication constraints. To deal with limited bandwidth constraint, a periodic sensor scheduling strategy is proposed in order to ensure the minimization of disturbances and cyber-attack effects. © 2016 The Franklin Institute