WaterSAFE: An Integrated Cyber-Physical Security Solution for Water Distribution Systems

Introduction

The WaterSAFE project addresses the growing threat of malicious attacks on water distribution Cyber-Physical Systems (CPS)—an unprecedented risk to public health, safety, and critical infrastructure operations. While the integration of Information Technology with Operational Technology in water organizations has revolutionized the evolution of smart water systems, it has also exposed security vulnerabilities.

WaterSAFE Solution

WaterSAFE introduces a groundbreaking CPS security-as-a-service solution for water distribution systems. Currently, CPS security solutions do not take into consideration the implications of cyber or physical attacks on system dynamics and controls.

Key Features

By leveraging state-of-the-art Digital Twin and machine learning technologies, WaterSAFE enables:

• Real-time simulation
• Detection and analysis of the impacts of cyber-physical threats

This marks a paradigm shift in CPS security analysis. The proposed system incorporates an Early Warning System for real-time anomaly detection in both cyber and physical states, offering advanced response tools for mitigating contamination incidents caused by cyber or physical attacks. Additionally, WaterSAFE offers interactive training platforms for water operators that facilitate enhancing critical skills for effective responses in real-world emergency scenarios.

Scientific Foundations

WaterSAFE uses scientific results from the ERC SyG Water-Futures project on:

1. Real-time water quality state estimation
2. Machine learning for event diagnosis
3. CPS security
4. Contamination management

This is directed toward a proof-of-concept Minimum Viable Product (MVP), demonstrated in a small-scale testbed as well as a large-scale living lab. This goes beyond existing solutions, which do not consider system dynamics or health impacts.

Impact on Water Utilities

WaterSAFE will enable water utilities to:

• Implement stronger risk management
• Respond faster and more effectively to incidents
• Meet EU regulations

This initiative fosters a cybersecurity culture within the water sector.