Technical Notes
Jan 9, 2019

Pressure-Driven Modeling of Cyber-Physical Attacks on Water Distribution Systems

Publication: Journal of Water Resources Planning and Management
Volume 145, Issue 3

Abstract

Water distribution systems are becoming increasingly vulnerable to cyber-physical attacks as they are further augmented with otherwise helpful monitoring and control devices. Simulating the hydraulic responses of networks to attacks is an important first step toward understanding and mitigating their potential impacts. To date, the tools available for this have either been small-scale, bespoke models or have relied on demand-driven analysis. In this work, we improve the suite of modeling tools currently available by extending the capabilities of epanetCPA—a Matlab toolbox that uses the demand-driven hydraulic engine of EPANET—to simulate pressure-driven simulations of cyber-physical attacks on water distribution systems. The proposed modeling approach is scalable and, by adding pressure-driven capabilities, vastly increases the range of possible failure scenarios that can be reliably simulated. The approach was tested and verified on a town-scale benchmark network through multiple attack scenarios. These showed that the approach can be used to gain helpful insights into the behavior of networks, including the relative vulnerability of different sections of networks, the suddenness with which supply is fully cut off, and the window of opportunity for responding to attacks. Such insights can then be used to improve network resiliency and aid in the detection of attacks.

Get full access to this article

View all available purchase options and get full access to this article.

Acknowledgments

Mr. Douglas was supported by the Massachusetts Institute of Technology (MIT)-Singapore University of Technology and Design (SUTD) Dual Masters Programme. Dr. Taormina and Dr. Galelli were supported by the National Research Foundation (NRF), Singapore, under its National Cybersecurity R&D Programme (Award No. NRF2014NCR-NCR001-40).

References

Abdy Sayyed, M. A. H., R. Gupta, and T. T. Tanyimboh. 2015. “Noniterative application of EPANET for pressure dependent modelling of water distribution systems.” Water Resour. Manage. 29 (9): 3227–3242. https://doi.org/10.1007/s11269-015-0992-0.
Ang, W. K., and P. W. Jowitt. 2006. “Solution for water distribution systems under pressure-deficient conditions.” J. Water Resour. Plann. Manage. 132 (3): 175–182. https://doi.org/10.1061/(ASCE)0733-9496(2006)132:3(175).
Arango, I. M., J. Izquierdo, E. O. Campbell, and R. Pérez-García. 2014. “Cloud-based decision making in water distribution systems.” Proc. Eng. 89: 488–494. https://doi.org/10.1016/j.proeng.2014.11.241.
Beal, C., and J. Flynn. 2015. “Toward the digital water age: Survey and case studies of Australian water utility smart-metering programs.” Util. Policy 32: 29–37. https://doi.org/10.1016/j.jup.2014.12.006.
Bertola, P., and M. Nicolini. 2007. “Evaluating reliability and efficiency of water distribution networks.” In Management of Water Networks: Proc., Conf. on Efficient Management of Water Networks: Design and Rehabilitation Techniques, edited by P. Bertola and M. Franchini, 7–23. Ferrara, Italy: FrancoAngeli.
Cheung, P. B., J. E. Van Zyl, and L. F. R. Reis. 2005. “Extension of EPANET for pressure driven demand modeling in water distribution system.” In Vol. 1 of Proc., 8th Int. Conf. on Computing and Control in the Water Industry CCWI05 Water Management for the 21st Century, edited by D. A. Savic, G. Walters, R. King, and S.-T. Khu. Exeter, UK: University of Exeter.
Do, V. L. 2015. “Sequential detection and isolation of cyber-physical attacks on SCADA systems.” Ph.D. thesis, Laboratory of Systems Modelling and Dependability, Université de Technologie de Troyes.
Elhay, S., O. Piller, J. Deuerlein, and A. R. Simpson. 2016. “A robust, rapidly convergent method that solves the water distribution equations for pressure-dependent models.” J. Water Resour. Plann. Manage. 142 (2): 04015047. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000578.
Fujiwara, O., and J. Li. 1998. “Reliability analysis of water distribution networks in consideration of equity, redistribution, and pressure-dependent demand.” Water Resour. Res. 34 (7): 1843–1850. https://doi.org/10.1029/98WR00908.
Germanopoulos, G. 1985. “A technical note on the inclusion of pressure dependent demand and leakage terms in water supply network models.” Civ. Eng. Syst. 2 (3): 171–179. https://doi.org/10.1080/02630258508970401.
Giustolisi, O., D. Savic, and Z. Kapelan. 2008. “Pressure-driven demand and leakage simulation for water distribution networks.” J. Hydraul. Eng. 134 (5): 626–635. https://doi.org/10.1061/(ASCE)0733-9429(2008)134:5(626).
Gorev, N. B., and I. F. Kodzhespirova. 2013. “Noniterative implementation of pressure-dependent demands using the hydraulic analysis engine of EPANET 2.” Water Resour. Manage. 27 (10): 3623–3630. https://doi.org/10.1007/s11269-013-0369-1.
Gupta, R., and P. R. Bhave. 1996. “Comparison of methods for predicting deficient-network performance.” J. Water Resour. Plann. Manage. 122 (3): 214–217. https://doi.org/10.1061/(ASCE)0733-9496(1996)122:3(214).
Haimes, Y. Y., N. C. Matalas, J. H. Lambert, B. A. Jackson, and J. F. R. Fellows. 1998. “Reducing vulnerability of water supply systems to attack.” J. Infrastruct. Syst. 4 (4): 164–177. https://doi.org/10.1061/(ASCE)1076-0342(1998)4:4(164).
ICS-CERT (Industrial Control Systems-Cyber Emergency Response Team). 2014. NCCIC/ICS-CERT year in review: FY 2013. Washington, DC: ICS-CERT.
ICS-CERT (Industrial Control Systems-Cyber Emergency Response Team). 2015. NCCIC/ICS-CERT year in review: FY 2014. Washington, DC: ICS-CERT.
ICS-CERT (Industrial Control Systems-Cyber Emergency Response Team). 2016. NCCIC/ICS-CERT year in review: FY 2015. Washington, DC: ICS-CERT.
Jinesh Babu, K. S., and S. Mohan. 2012. “Extended period simulation for pressure-deficient water distribution network.” J. Comput. Civ. Eng. 26 (4): 498–505. https://doi.org/10.1061/(ASCE)CP.1943-5487.0000160.
Mahmoud, H. A., D. Savić, and Z. Kapelan. 2017. “New pressure-driven approach for modeling water distribution networks.” J. Water Resour. Plann. Manage. 143 (8): 04017031. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000781.
Ostfeld, A., et al. 2011. “Battle of the water calibration networks.” J. Water Resour. Plann. Manage. 138 (5): 523–532. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000191.
Pacchin, E., S. Alvisi, and M. Franchini. 2017. “Analysis of non-iterative methods and proposal of a new one for pressure-driven snapshot simulations with EPANET.” Water Resour. Manage. 31 (1): 75–91. https://doi.org/10.1007/s11269-016-1511-7.
Pan, Q., A. Jonoski, M. E. Castro-Gama, and I. Popescu. 2015. “Application of a web-based decision support system for water supply networks.” Environ. Eng. Manage. J. (EEMJ) 14 (9): 2019–2030. https://doi.org/10.30638/eemj.2015.223.
Pasqualetti, F., F. Dörfler, and F. Bullo. 2013. “Attack detection and identification in cyber-physical systems.” IEEE Trans. Autom. Control 58 (11): 2715–2729. https://doi.org/10.1109/TAC.2013.2266831.
Perelman, L., and S. Amin. 2014. “A network interdiction model for analyzing the vulnerability of water distribution systems.” In Proc., 3rd Int. Conf. on High Confidence Networked Systems, 135–144. New York: Association for Computing Machinery.
Rasekh, A., A. Hassanzadeh, S. Mulchandani, S. Modi, and M. K. Banks. 2016. “Smart water networks and cyber security.” J. Water Resour. Plann. Manage. 142 (7): 01816004. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000646.
Rossman, L. A. 2000. EPANET 2 users manual. EPA/600/R-00/057. Washington, DC: USEPA.
Sharoonizadeh, S., J. Mamizadeh, and J. Sarvarian. 2016. “Comparison of solution methods for analyzing water distribution networks under pressure-deficient conditions.” J. Water Supply: Res. Technol.-Aqua 65 (4): 330–341. https://doi.org/10.2166/aqua.2016.084.
Slay, J., and M. Miller. 2008. “Lessons learned from the Maroochy water breach.” In Critical infrastructure protection, edited by E. Goetz and S. Shenoi, 73–82. Boston: Springer.
Taormina, R. 2018. “A toolbox for assessing the impacts of cyberphysical attacks on water distribution systems.” Accessed April 29, 2019. https://github.com/rtaormina/epanetCPA.
Taormina, R., et al. 2018. “Battle of the attack detection algorithms: Disclosing cyber attacks on water distribution networks.” J. Water Resour. Plann. Manage. 144 (8): 04018048. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000969.
Taormina, R., and S. Galelli. 2018. “Deep-learning approach to the detection and localization of cyber-physical attacks on water distribution systems.” J. Water Resour. Plann. Manage. 144 (10): 04018065. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000983.
Taormina, R., S. Galelli, N. O. Tippenhauer, E. Salomons, and A. Ostfeld. 2017. “Characterizing cyber-physical attacks on water distribution systems.” J. Water Resour. Plann. Manage. 143 (5): 04017009. https://doi.org/10.1061/(ASCE)WR.1943-5452.0000749.
Todini, E. 2003. “A more realistic approach to the ‘extended period simulation’ of water distribution networks.” In Advances in water supply management, edited by C. Maksimovic, F. A. Memon, and D. Butler, 173–183. London, UK: Taylor & Francis.
Urbina, D., J. Giraldo, N. O. Tippenhauer, and A. Cárdenas. 2016. “Attacking fieldbus communications in ICS: Applications to the SWaT testbed.” In Proc., Singapore Cyber Security Conf. Amsterdam, Netherlands: IOS Press.
US Department of Homeland Security. 2017. Personal correspondence with Antonio Soliz. Washington, DC: External Affairs, Office of Cybersecurity and Communication.
Verizon. 2016. Data breach digest: Scenarios from the field. Basking Ridge, Bernards: Verizon Enterprise Solutions.
Wagner, M., U. Shamir, and D. H. Marks. 1988. “Water distribution reliability: Simulation methods.” J. Water Resour. Plann. Manage. Div. 114 (3): 276–294. https://doi.org/10.1061/(ASCE)0733-9496(1988)114:3(276).
Walski, T. M., D. V. Chase, D. A. Savic, W. Grayman, S. Beckwith, and E. Koelle. 2003. Advanced water distribution modeling and management, 1st ed. Sydney, Australia: Haestead Press.
Wu, Z. Y., R. H. Wang, T. M. Walski, S. Y. Yang, D. Bowdler, and C. C. Baggett. 2009. “Extended global-gradient algorithm for pressure-dependent water distribution analysis.” J. Water Resour. Plann. Manage. 135 (1): 13–22. https://doi.org/10.1061/(ASCE)0733-9496(2009)135:1(13).

Information & Authors

Information

Published In

Go to Journal of Water Resources Planning and Management
Journal of Water Resources Planning and Management
Volume 145Issue 3March 2019

History

Received: Apr 30, 2018
Accepted: Aug 27, 2018
Published online: Jan 9, 2019
Published in print: Mar 1, 2019
Discussion open until: Jun 9, 2019

Permissions

Request permissions for this article.

Authors

Affiliations

Master’s Student, Pillar of Engineering Systems and Design, Singapore Univ. of Technology and Design, 8 Somapah Rd., Singapore 487372 (corresponding author). ORCID: https://orcid.org/0000-0002-5411-7656. Email: hunter_douglas@ alumni.sutd.edu.sg
Riccardo Taormina [email protected]
Senior Post-Doctoral Research Fellow, iTrust Centre for Research in Cyber Security, Singapore Univ. of Technology and Design, 8 Somapah Rd., Singapore 487372. Email: [email protected]
Stefano Galelli, M.ASCE [email protected]
Assistant Professor, Pillar of Engineering Systems and Design, Singapore Univ. of Technology and Design, 8 Somapah Rd., Singapore 487372. Email: [email protected]

Metrics & Citations

Metrics

Citations

Download citation

If you have the appropriate software installed, you can download article citation data to the citation manager of your choice. Simply select your manager software from the list below and click Download.

Cited by

View Options

Get Access

Access content

Please select your options to get access

Log in/Register Log in via your institution (Shibboleth)
ASCE Members: Please log in to see member pricing

Purchase

Save for later Information on ASCE Library Cards
ASCE Library Cards let you download journal articles, proceedings papers, and available book chapters across the entire ASCE Library platform. ASCE Library Cards remain active for 24 months or until all downloads are used. Note: This content will be debited as one download at time of checkout.

Terms of Use: ASCE Library Cards are for individual, personal use only. Reselling, republishing, or forwarding the materials to libraries or reading rooms is prohibited.
ASCE Library Card (5 downloads)
$105.00
Add to cart
ASCE Library Card (20 downloads)
$280.00
Add to cart
Buy Single Article
$35.00
Add to cart

Get Access

Access content

Please select your options to get access

Log in/Register Log in via your institution (Shibboleth)
ASCE Members: Please log in to see member pricing

Purchase

Save for later Information on ASCE Library Cards
ASCE Library Cards let you download journal articles, proceedings papers, and available book chapters across the entire ASCE Library platform. ASCE Library Cards remain active for 24 months or until all downloads are used. Note: This content will be debited as one download at time of checkout.

Terms of Use: ASCE Library Cards are for individual, personal use only. Reselling, republishing, or forwarding the materials to libraries or reading rooms is prohibited.
ASCE Library Card (5 downloads)
$105.00
Add to cart
ASCE Library Card (20 downloads)
$280.00
Add to cart
Buy Single Article
$35.00
Add to cart

Media

Figures

Other

Tables

Share

Share

Copy the content Link

Share with email

Email a colleague

Share