Can replay attacks designed to steal water from water distribution systems remain undetected?

Palleti, Venkata Reddy and Mishra, Vishrut Kumar and Ahmed, Chuadhry Mujeeb and Mathur, Aditya (2021) Can replay attacks designed to steal water from water distribution systems remain undetected? ACM Transactions on Cyber-Physical Systems, 5 (1). 9. ISSN 2378-9638 (https://doi.org/10.1145/3406764)

[thumbnail of Palleti-etal-ACM-TCPS-2020-Can-replay-attacks-designed-to-steal-water-from-water-distribution]
Preview
 Text. Filename: Palleti_etal_ACM_TCPS_2020_Can_replay_attacks_designed_to_steal_water_from_water_distribution.pdf
Accepted Author Manuscript
Download (2MB)| Preview

Abstract

Industrial Control Systems (ICS) monitor and control physical processes. ICS are found in, among others, critical infrastructures such as water treatment plants, water distribution systems, and the electric power grid. While the existence of cyber-components in an ICS leads to ease of operations and maintenance, it renders the system under control vulnerable to cyber and physical attacks. An experimental study was conducted with replay attacks launched on an operational water distribution (WADI) plant to understand under what conditions an attacker/attack can remain undetected while stealing water. A detection method, based on an input-output Linear Time-invariant system model of the physical process, was developed and implemented in WADI to detect such attacks. The experiments reveal the strengths and limitations of the detection method and challenges faced by an attacker while attempting to steal water from a water distribution system.

ORCID iDs

Palleti, Venkata Reddy, Mishra, Vishrut Kumar, Ahmed, Chuadhry Mujeeb ORCID logoORCID: https://orcid.org/0000-0003-3644-0465 and Mathur, Aditya;
CORE (COnnecting REpositories)