Simulation of cyber-physical attacks on water distribution systems with EPANET

Riccardo Taormina; Stefano Galelli; Nils Ole Tippenhauer; Elad Salomons; Avi Ostfeld

doi:10.3233/978-1-61499-617-0-123

Simulation of cyber-physical attacks on water distribution systems with EPANET

Riccardo Taormina, Stefano Galelli, Nils Ole Tippenhauer, Elad Salomons, Avi Ostfeld

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In this work, we discuss the use of EPANET to simulate the effects of malicious cyber-physical attacks on water distribution systems. EPANET-a standard numerical modeling environment developed by the US Environmental Protection Agency-models hydraulic and water-quality behavior of pressurized pipe networks. EPANET promises to be well suited to show the effects of direct attacks on hydraulic actuators, such as pumps, or the effects of attacks on sensors. Using the C-Town benchmark network, we show that EPANET has some limitations when modeling these attacks, and we report the workarounds needed to overcome these limitations. In particular, we describe attacks that change the control strategies of pumps, and attacks that alter the tank water level reported by sensors.

Original language	English
Title of host publication	Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016
Subtitle of host publication	Cyber-Security by Design
Editors	Abhik Roychoudhury, Aditya Mathur
Publisher	IOS Press
Pages	123-130
Number of pages	8
ISBN (Electronic)	9781614996163
DOIs	https://doi.org/10.3233/978-1-61499-617-0-123
State	Published - 2016
Externally published	Yes
Event	1st Singapore-Cybersecurity R and D Conference, SG-CRC 2016 - Singapore, Singapore Duration: 14 Jan 2016 → 15 Jan 2016

Publication series

Name	Cryptology and Information Security Series
Volume	14
ISSN (Print)	1871-6431
ISSN (Electronic)	1879-8101

Conference

Conference	1st Singapore-Cybersecurity R and D Conference, SG-CRC 2016
Country/Territory	Singapore
City	Singapore
Period	14/01/16 → 15/01/16

Bibliographical note

Publisher Copyright:
© 2016 The authors and IOS Press.

Keywords

Cyber-physical system security
EPANET
Water distribution systems

ASJC Scopus subject areas

Information Systems
Computer Science Applications
Electrical and Electronic Engineering

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Access to Document

10.3233/978-1-61499-617-0-123

Cite this

Taormina, R., Galelli, S., Tippenhauer, N. O., Salomons, E., & Ostfeld, A. (2016). Simulation of cyber-physical attacks on water distribution systems with EPANET. In A. Roychoudhury, & A. Mathur (Eds.), Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016: Cyber-Security by Design (pp. 123-130). (Cryptology and Information Security Series; Vol. 14). IOS Press. https://doi.org/10.3233/978-1-61499-617-0-123

@inproceedings{4da9bfa695f64d0c80dffdaf5cde67dd,

title = "Simulation of cyber-physical attacks on water distribution systems with EPANET",

abstract = "In this work, we discuss the use of EPANET to simulate the effects of malicious cyber-physical attacks on water distribution systems. EPANET-a standard numerical modeling environment developed by the US Environmental Protection Agency-models hydraulic and water-quality behavior of pressurized pipe networks. EPANET promises to be well suited to show the effects of direct attacks on hydraulic actuators, such as pumps, or the effects of attacks on sensors. Using the C-Town benchmark network, we show that EPANET has some limitations when modeling these attacks, and we report the workarounds needed to overcome these limitations. In particular, we describe attacks that change the control strategies of pumps, and attacks that alter the tank water level reported by sensors.",

keywords = "Cyber-physical system security, EPANET, Water distribution systems",

author = "Riccardo Taormina and Stefano Galelli and Tippenhauer, {Nils Ole} and Elad Salomons and Avi Ostfeld",

note = "Publisher Copyright: {\textcopyright} 2016 The authors and IOS Press.; 1st Singapore-Cybersecurity R and D Conference, SG-CRC 2016 ; Conference date: 14-01-2016 Through 15-01-2016",

year = "2016",

doi = "10.3233/978-1-61499-617-0-123",

language = "English",

series = "Cryptology and Information Security Series",

publisher = "IOS Press",

pages = "123--130",

editor = "Abhik Roychoudhury and Aditya Mathur",

booktitle = "Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016",

address = "United States",

}

Taormina, R, Galelli, S, Tippenhauer, NO, Salomons, E & Ostfeld, A 2016, Simulation of cyber-physical attacks on water distribution systems with EPANET. in A Roychoudhury & A Mathur (eds), Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016: Cyber-Security by Design. Cryptology and Information Security Series, vol. 14, IOS Press, pp. 123-130, 1st Singapore-Cybersecurity R and D Conference, SG-CRC 2016, Singapore, Singapore, 14/01/16. https://doi.org/10.3233/978-1-61499-617-0-123

Simulation of cyber-physical attacks on water distribution systems with EPANET. / Taormina, Riccardo; Galelli, Stefano; Tippenhauer, Nils Ole et al.
Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016: Cyber-Security by Design. ed. / Abhik Roychoudhury; Aditya Mathur. IOS Press, 2016. p. 123-130 (Cryptology and Information Security Series; Vol. 14).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Simulation of cyber-physical attacks on water distribution systems with EPANET

AU - Taormina, Riccardo

AU - Galelli, Stefano

AU - Tippenhauer, Nils Ole

AU - Salomons, Elad

AU - Ostfeld, Avi

PY - 2016

Y1 - 2016

N2 - In this work, we discuss the use of EPANET to simulate the effects of malicious cyber-physical attacks on water distribution systems. EPANET-a standard numerical modeling environment developed by the US Environmental Protection Agency-models hydraulic and water-quality behavior of pressurized pipe networks. EPANET promises to be well suited to show the effects of direct attacks on hydraulic actuators, such as pumps, or the effects of attacks on sensors. Using the C-Town benchmark network, we show that EPANET has some limitations when modeling these attacks, and we report the workarounds needed to overcome these limitations. In particular, we describe attacks that change the control strategies of pumps, and attacks that alter the tank water level reported by sensors.

AB - In this work, we discuss the use of EPANET to simulate the effects of malicious cyber-physical attacks on water distribution systems. EPANET-a standard numerical modeling environment developed by the US Environmental Protection Agency-models hydraulic and water-quality behavior of pressurized pipe networks. EPANET promises to be well suited to show the effects of direct attacks on hydraulic actuators, such as pumps, or the effects of attacks on sensors. Using the C-Town benchmark network, we show that EPANET has some limitations when modeling these attacks, and we report the workarounds needed to overcome these limitations. In particular, we describe attacks that change the control strategies of pumps, and attacks that alter the tank water level reported by sensors.

KW - Cyber-physical system security

KW - EPANET

KW - Water distribution systems

UR - http://www.scopus.com/inward/record.url?scp=84963668116&partnerID=8YFLogxK

U2 - 10.3233/978-1-61499-617-0-123

DO - 10.3233/978-1-61499-617-0-123

M3 - Conference contribution

AN - SCOPUS:84963668116

T3 - Cryptology and Information Security Series

SP - 123

EP - 130

BT - Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016

A2 - Roychoudhury, Abhik

A2 - Mathur, Aditya

PB - IOS Press

T2 - 1st Singapore-Cybersecurity R and D Conference, SG-CRC 2016

Y2 - 14 January 2016 through 15 January 2016

ER -

Taormina R, Galelli S, Tippenhauer NO, Salomons E, Ostfeld A. Simulation of cyber-physical attacks on water distribution systems with EPANET. In Roychoudhury A, Mathur A, editors, Proceedings of the Singapore Cyber-Security Conference, SG-CRC 2016: Cyber-Security by Design. IOS Press. 2016. p. 123-130. (Cryptology and Information Security Series). doi: 10.3233/978-1-61499-617-0-123

Simulation of cyber-physical attacks on water distribution systems with EPANET

Abstract

Publication series

Conference

Bibliographical note

Keywords

ASJC Scopus subject areas

UN SDGs

Access to Document

Other files and links

Fingerprint

Cite this