An Approach to Detect the Cyber-Physical Attack on Water Distribution System

The dependency of modern water distribution systems (WDS) on computer and cyber control make the systems more susceptible to cyber-physical attack. While the cyber-physical attacks can be classified into several categories such as direct and indirect, the main purpose of the attack is to disrupt the operation of the WDS. Attack changes normal flow patterns and operations of the system leaving its signature behind in the datasets. Understanding normal system operations and hydraulics and system relationships are thus important to identify any anomalous behavior in the system. This paper presents an algorithm where three modules are developed based on the consistency and pattern of data and hydraulics and system relationships. These modules are interlinked with some logical statements to identify, detect, and quantify the magnitude of any cyber-physical attack. The algorithm which has been applied to a mid-sized network known as C-Town network can successfully characterize and detects the cyber-physical attacks. The location (WDS component), duration, and the magnitude of the cyber-physical attack are identified through the use of the algorithm.