Pressure-Driven Modeling of Cyber-Physical Attacks on Water Distribution Systems
Publication: Journal of Water Resources Planning and Management
Volume 145, Issue 3
Abstract
Water distribution systems are becoming increasingly vulnerable to cyber-physical attacks as they are further augmented with otherwise helpful monitoring and control devices. Simulating the hydraulic responses of networks to attacks is an important first step toward understanding and mitigating their potential impacts. To date, the tools available for this have either been small-scale, bespoke models or have relied on demand-driven analysis. In this work, we improve the suite of modeling tools currently available by extending the capabilities of epanetCPA—a Matlab toolbox that uses the demand-driven hydraulic engine of EPANET—to simulate pressure-driven simulations of cyber-physical attacks on water distribution systems. The proposed modeling approach is scalable and, by adding pressure-driven capabilities, vastly increases the range of possible failure scenarios that can be reliably simulated. The approach was tested and verified on a town-scale benchmark network through multiple attack scenarios. These showed that the approach can be used to gain helpful insights into the behavior of networks, including the relative vulnerability of different sections of networks, the suddenness with which supply is fully cut off, and the window of opportunity for responding to attacks. Such insights can then be used to improve network resiliency and aid in the detection of attacks.
Get full access to this article
View all available purchase options and get full access to this article.
Acknowledgments
Mr. Douglas was supported by the Massachusetts Institute of Technology (MIT)-Singapore University of Technology and Design (SUTD) Dual Masters Programme. Dr. Taormina and Dr. Galelli were supported by the National Research Foundation (NRF), Singapore, under its National Cybersecurity R&D Programme (Award No. NRF2014NCR-NCR001-40).
References
Abdy Sayyed, M. A. H., R. Gupta, and T. T. Tanyimboh. 2015. “Noniterative application of EPANET for pressure dependent modelling of water distribution systems.” Water Resour. Manage. 29 (9): 3227–3242. https://doi.org/10.1007/s11269-015-0992-0.
Ang, W. K., and P. W. Jowitt. 2006. “Solution for water distribution systems under pressure-deficient conditions.” J. Water Resour. Plann. Manage. 132 (3): 175–182. https://doi.org/10.1061/(ASCE)0733-9496(2006)132:3(175).
Arango, I. M., J. Izquierdo, E. O. Campbell, and R. Pérez-García. 2014. “Cloud-based decision making in water distribution systems.” Proc. Eng. 89: 488–494. https://doi.org/10.1016/j.proeng.2014.11.241.
Beal, C., and J. Flynn. 2015. “Toward the digital water age: Survey and case studies of Australian water utility smart-metering programs.” Util. Policy 32: 29–37. https://doi.org/10.1016/j.jup.2014.12.006.
Bertola, P., and M. Nicolini. 2007. “Evaluating reliability and efficiency of water distribution networks.” In Management of Water Networks: Proc., Conf. on Efficient Management of Water Networks: Design and Rehabilitation Techniques, edited by P. Bertola and M. Franchini, 7–23. Ferrara, Italy: FrancoAngeli.
Cheung, P. B., J. E. Van Zyl, and L. F. R. Reis. 2005. “Extension of EPANET for pressure driven demand modeling in water distribution system.” In Vol. 1 of Proc., 8th Int. Conf. on Computing and Control in the Water Industry CCWI05 Water Management for the 21st Century, edited by D. A. Savic, G. Walters, R. King, and S.-T. Khu. Exeter, UK: University of Exeter.
Do, V. L. 2015. “Sequential detection and isolation of cyber-physical attacks on SCADA systems.” Ph.D. thesis, Laboratory of Systems Modelling and Dependability, Université de Technologie de Troyes.
Elhay, S., O. Piller, J. Deuerlein, and A. R. Simpson. 2016. “A robust, rapidly convergent method that solves the water distribution equations for pressure-dependent models.” J. Water Resour. Plann. Manage. 142 (2): 04015047. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000578.
Fujiwara, O., and J. Li. 1998. “Reliability analysis of water distribution networks in consideration of equity, redistribution, and pressure-dependent demand.” Water Resour. Res. 34 (7): 1843–1850. https://doi.org/10.1029/98WR00908.
Germanopoulos, G. 1985. “A technical note on the inclusion of pressure dependent demand and leakage terms in water supply network models.” Civ. Eng. Syst. 2 (3): 171–179. https://doi.org/10.1080/02630258508970401.
Giustolisi, O., D. Savic, and Z. Kapelan. 2008. “Pressure-driven demand and leakage simulation for water distribution networks.” J. Hydraul. Eng. 134 (5): 626–635. https://doi.org/10.1061/(ASCE)0733-9429(2008)134:5(626).
Gorev, N. B., and I. F. Kodzhespirova. 2013. “Noniterative implementation of pressure-dependent demands using the hydraulic analysis engine of EPANET 2.” Water Resour. Manage. 27 (10): 3623–3630. https://doi.org/10.1007/s11269-013-0369-1.
Gupta, R., and P. R. Bhave. 1996. “Comparison of methods for predicting deficient-network performance.” J. Water Resour. Plann. Manage. 122 (3): 214–217. https://doi.org/10.1061/(ASCE)0733-9496(1996)122:3(214).
Haimes, Y. Y., N. C. Matalas, J. H. Lambert, B. A. Jackson, and J. F. R. Fellows. 1998. “Reducing vulnerability of water supply systems to attack.” J. Infrastruct. Syst. 4 (4): 164–177. https://doi.org/10.1061/(ASCE)1076-0342(1998)4:4(164).
ICS-CERT (Industrial Control Systems-Cyber Emergency Response Team). 2014. NCCIC/ICS-CERT year in review: FY 2013. Washington, DC: ICS-CERT.
ICS-CERT (Industrial Control Systems-Cyber Emergency Response Team). 2015. NCCIC/ICS-CERT year in review: FY 2014. Washington, DC: ICS-CERT.
ICS-CERT (Industrial Control Systems-Cyber Emergency Response Team). 2016. NCCIC/ICS-CERT year in review: FY 2015. Washington, DC: ICS-CERT.
Jinesh Babu, K. S., and S. Mohan. 2012. “Extended period simulation for pressure-deficient water distribution network.” J. Comput. Civ. Eng. 26 (4): 498–505. https://doi.org/10.1061/(ASCE)CP.1943-5487.0000160.
Mahmoud, H. A., D. Savić, and Z. Kapelan. 2017. “New pressure-driven approach for modeling water distribution networks.” J. Water Resour. Plann. Manage. 143 (8): 04017031. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000781.
Ostfeld, A., et al. 2011. “Battle of the water calibration networks.” J. Water Resour. Plann. Manage. 138 (5): 523–532. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000191.
Pacchin, E., S. Alvisi, and M. Franchini. 2017. “Analysis of non-iterative methods and proposal of a new one for pressure-driven snapshot simulations with EPANET.” Water Resour. Manage. 31 (1): 75–91. https://doi.org/10.1007/s11269-016-1511-7.
Pan, Q., A. Jonoski, M. E. Castro-Gama, and I. Popescu. 2015. “Application of a web-based decision support system for water supply networks.” Environ. Eng. Manage. J. (EEMJ) 14 (9): 2019–2030. https://doi.org/10.30638/eemj.2015.223.
Pasqualetti, F., F. Dörfler, and F. Bullo. 2013. “Attack detection and identification in cyber-physical systems.” IEEE Trans. Autom. Control 58 (11): 2715–2729. https://doi.org/10.1109/TAC.2013.2266831.
Perelman, L., and S. Amin. 2014. “A network interdiction model for analyzing the vulnerability of water distribution systems.” In Proc., 3rd Int. Conf. on High Confidence Networked Systems, 135–144. New York: Association for Computing Machinery.
Rasekh, A., A. Hassanzadeh, S. Mulchandani, S. Modi, and M. K. Banks. 2016. “Smart water networks and cyber security.” J. Water Resour. Plann. Manage. 142 (7): 01816004. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000646.
Rossman, L. A. 2000. EPANET 2 users manual. EPA/600/R-00/057. Washington, DC: USEPA.
Sharoonizadeh, S., J. Mamizadeh, and J. Sarvarian. 2016. “Comparison of solution methods for analyzing water distribution networks under pressure-deficient conditions.” J. Water Supply: Res. Technol.-Aqua 65 (4): 330–341. https://doi.org/10.2166/aqua.2016.084.
Slay, J., and M. Miller. 2008. “Lessons learned from the Maroochy water breach.” In Critical infrastructure protection, edited by E. Goetz and S. Shenoi, 73–82. Boston: Springer.
Taormina, R. 2018. “A toolbox for assessing the impacts of cyberphysical attacks on water distribution systems.” Accessed April 29, 2019. https://github.com/rtaormina/epanetCPA.
Taormina, R., et al. 2018. “Battle of the attack detection algorithms: Disclosing cyber attacks on water distribution networks.” J. Water Resour. Plann. Manage. 144 (8): 04018048. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000969.
Taormina, R., and S. Galelli. 2018. “Deep-learning approach to the detection and localization of cyber-physical attacks on water distribution systems.” J. Water Resour. Plann. Manage. 144 (10): 04018065. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000983.
Taormina, R., S. Galelli, N. O. Tippenhauer, E. Salomons, and A. Ostfeld. 2017. “Characterizing cyber-physical attacks on water distribution systems.” J. Water Resour. Plann. Manage. 143 (5): 04017009. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000749.
Todini, E. 2003. “A more realistic approach to the ‘extended period simulation’ of water distribution networks.” In Advances in water supply management, edited by C. Maksimovic, F. A. Memon, and D. Butler, 173–183. London, UK: Taylor & Francis.
Urbina, D., J. Giraldo, N. O. Tippenhauer, and A. Cárdenas. 2016. “Attacking fieldbus communications in ICS: Applications to the SWaT testbed.” In Proc., Singapore Cyber Security Conf. Amsterdam, Netherlands: IOS Press.
US Department of Homeland Security. 2017. Personal correspondence with Antonio Soliz. Washington, DC: External Affairs, Office of Cybersecurity and Communication.
Verizon. 2016. Data breach digest: Scenarios from the field. Basking Ridge, Bernards: Verizon Enterprise Solutions.
Wagner, M., U. Shamir, and D. H. Marks. 1988. “Water distribution reliability: Simulation methods.” J. Water Resour. Plann. Manage. Div. 114 (3): 276–294. https://doi.org/10.1061/(ASCE)0733-9496(1988)114:3(276).
Walski, T. M., D. V. Chase, D. A. Savic, W. Grayman, S. Beckwith, and E. Koelle. 2003. Advanced water distribution modeling and management, 1st ed. Sydney, Australia: Haestead Press.
Wu, Z. Y., R. H. Wang, T. M. Walski, S. Y. Yang, D. Bowdler, and C. C. Baggett. 2009. “Extended global-gradient algorithm for pressure-dependent water distribution analysis.” J. Water Resour. Plann. Manage. 135 (1): 13–22. https://doi.org/10.1061/(ASCE)0733-9496(2009)135:1(13).
Information & Authors
Information
Published In
Copyright
©2019 American Society of Civil Engineers.
History
Received: Apr 30, 2018
Accepted: Aug 27, 2018
Published online: Jan 9, 2019
Published in print: Mar 1, 2019
Discussion open until: Jun 9, 2019
Authors
Metrics & Citations
Metrics
Citations
Download citation
If you have the appropriate software installed, you can download article citation data to the citation manager of your choice. Simply select your manager software from the list below and click Download.