Protection of Water Distribution Networks against Cyber and Physical Threats: The STOP-IT Approach Demonstrated in a Case Study

Abstract

Water critical infrastructures are undergoing a process of digital transformation that entails an increasing integration between the physical and cyber layers of the system. This integration brings efficiency and monitoring advantages, but it also exposes water systems to a new threat surface that includes cyberattacks. Formed in 2017, STOP-IT is Europe’s first project dedicated to developing cyber-physical security solutions tailored to the water sector. During the 4 years of collaboration, the STOP-IT team has codeveloped an extensive list of technologies that integrates cyber and physical layers of infrastructure, allowing water utilities to prevent, detect, assess, and treat risks, as well as simulate scenarios of attacks and explore how to react to increase preparedness. This article first introduces the overall aim and main outcomes of the STOP-IT project and then focuses on the risk management integrated framework composed of modeling solutions developed to help water utilities identify vulnerabilities and protect critical parts of their systems. The solutions are presented along with the results from the demonstration activities performed by a selected water utility concerning three risk scenarios that were assessed through the mentioned integrated framework.