Water Distribution Systems Analysis Symposium–Battle of the Attack Detection Algorithms (BATADAL)
Abstract
With the transition of water distribution systems (WDSs) to smarter ones, intelligent water networks’ elements, such as programmable logic controls (PLCs), sensors, valves and supervisory control and data acquisition systems (SCADAs) have played a more significant role. Like other computer-based technologies, these smart elements will make WDSs more vulnerable to malicious intrusions due to cyber-physical attacks. Regarding the vulnerability of more intelligent WDSs, it is necessary to devise and apply anomaly detection algorithms being able to detect intrusions to water networks with the fewest false alarms. For the battle of the attack detection algorithms (BATADAL), to detect the manipulated data, a spectral domain method as a pre-processing technique is implemented to extract the important characteristics of the observed time series data and make them independent of time. Then, a supervised machine learning technique is used to classify the data and obtain the intrusion detection.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The contribution of Aghashahi et al. (2017) detected only three attacks, leading to a score S equal to 0.534.
“Finally, the contribution of Aghashahi et al. (2017) detected only three attacks, leading to a score S equal to 0.534.”
From Battle of the Attack Detection Algorithms: Disclosing Cyber Attacks on Water Distribution Networks (2018) · cites this paper as Aghashahi et al. (2017)
Cites
Cyber–Physical Security of a Smart Grid Infrastructure
Mo, Y., Kim, T. H., Brancik, K., Dickinson, D. C., Lee, H., Perrig, A., & Sinopoli, B. (2011) · Proceedings of the IEEE · doi:10.1109/jproc.2011.2161428 · Cited by 1,108 · see citing works
Survey on Anomaly Detection using Data Mining Techniques
Agrawal, S., & Agrawal, J. (2015) · Procedia Computer Science · doi:10.1016/j.procs.2015.08.220 · Cited by 598 · see citing works
Random Forest Models To Predict Aqueous Solubility
Palmer, D. S., O’Boyle, N. M., Glen, R. C., & Mitchell, J. B. O. (2006) · Journal of Chemical Information and Modeling · doi:10.1021/ci060164k · Cited by 366 · see citing works
Amin, S., Litrico, X., Sastry, S., & Bayen, A. M. (2012) · IEEE Transactions on Control Systems Technology · doi:10.1109/tcst.2012.2211873 · Cited by 350 · see citing works
Cyber Security of Water SCADA Systems—Part II: Attack Detection Using Enhanced Hydrodynamic Models
Amin, S., Litrico, X., Sastry, S., & Bayen, A. M. (2012) · IEEE Transactions on Control Systems Technology · doi:10.1109/tcst.2012.2211874 · Cited by 156 · see citing works
Real‐time Bayesian anomaly detection in streaming environmental data
Hill, D., Minsker, B. S., & Eyal Amir, A. (2009) · Water Resources Research · doi:10.1029/2008wr006956 · Cited by 72 · see citing works
Scalable Anomaly Detection for Smart City Infrastructure Networks
Difallah, D. E., Cudré-Mauroux, P., & McKenna, S. A. (2013) · IEEE Internet Computing · doi:10.1109/mic.2013.84 · Cited by 54 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Battle of the Attack Detection Algorithms: Disclosing Cyber Attacks on Water Distribution Networks
Taormina, R., Galelli, S., Tippenhauer, N. O., Salomons, E., Ostfeld, A., Eliades, D. G., Aghashahi, M., Sundararajan, R., Pourahmadi, M., Banks, M. K., et al. (2018) · Journal of Water Resources Planning and Management · doi:10.1061/(asce)wr.1943-5452.0000969 · Cited by 277 · see citing works
“This resulted in a very high value of the TNR and the overall lowest TPR. Finally, the contribution of Aghashahi et al. (2017) detected only three attacks, leading to a score of 0.534.”
BackgroundMethodInfluentialSelf-citationA survey on deep learning for cybersecurity: Progress, challenges, and opportunities
Macas, M., Wu, C., & Fuertes, W. (2022) · Computer Networks · doi:10.1016/j.comnet.2022.109032 · Cited by 192 · see citing works
Macas, M., Wu, C., & Fuertes, W. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.122223 · Cited by 160 · see citing works
A Systematic Review of the State of Cyber-Security in Water Systems
Tuptuk, N., Hazell, P., Watson, J., & Hailes, S. (2021) · Water · doi:10.3390/w13010081 · Cited by 138 · see citing works
“Aghashahi et al. [90] first extracted features related to the characteristics of the attack and no-attack data by using a covariance matrix and distance measure of every data point.”
MethodAttack detection in water distribution systems using machine learning
Ramotsoela, D. T., Hancke, G. P., & Abu-Mahfouz, A. M. I. (2019) · Human-centric Computing and Information Sciences · doi:10.1186/s13673-019-0175-8 · Cited by 82 · see citing works
Kanyama, M. N., Shava, F. B., Gamundani, A. M., & Hartmann, A. (2024) · Physics and Chemistry of the Earth Parts A/B/C · doi:10.1016/j.pce.2024.103558 · Cited by 48 · see citing works
Mahmoud, H., Wu, W., & Gaber, M. M. (2022) · Energies · doi:10.3390/en15030914 · Cited by 36 · see citing works
Cyber-Attack Detection in Water Distribution Systems Based on Blind Sources Separation Technique
Brentan, B., de Rezende, P. J., Barros, D. B., Meirelles, G., Luvizotto, E., & Izquierdo, J. (2021) · Water · doi:10.3390/w13060795 · Cited by 30 · see citing works
“A two-stage method based on feature vector extraction and classification was proposed in [12]: vector extraction was applied to multidimensional hydraulic data, and safety classification was performed by random forests, the machine-learning algorithm developed by [13].”
MethodDetecting Cyber-Physical Attacks in Water Distribution Systems: One-Class Classifier Approach
Kadosh, N., Frid, A., & Housh, M. (2020) · Journal of Water Resources Planning and Management · doi:10.1061/(asce)wr.1943-5452.0001259 · Cited by 19 · see citing works
Liao, J., Li, J., Chen, Y., Gu, R., Zhu, Y., & Peng, W. (2024) · Advanced Engineering Informatics · doi:10.1016/j.aei.2024.102547 · Cited by 18 · see citing works
Time Series Anomaly Detection with Variational Autoencoder Using Mahalanobis Distance
Gjorgiev, L., & Gievska, S. (2020) · Communications in computer and information science · doi:10.1007/978-3-030-62098-1_4 · Cited by 17 · see citing works
Housh, M., Kadosh, N., & Haddad, J. (2022) · Sensors · doi:10.3390/s22166035 · Cited by 16 · see citing works
AI for Cyberbiosecurity in Water Systems—A Survey
Sobien, D., Yardimci, M. O., Nguyen, M. B. T., Mao, W.-Y., Fordham, V., Rahman, A., Duncan, S. E., & Batarseh, F. A. (2023) · Springer eBooks · doi:10.1007/978-3-031-26034-6_13 · Cited by 13 · see citing works
Raza, N., & Moazeni, F. K. (2025) · Water Research · doi:10.1016/j.watres.2025.123517 · Cited by 12 · see citing works
Kaç, S. B., Zavrak, S., & Eken, S. (2022) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-01984-5_17 · Cited by 12 · see citing works
Rodríguez-Martínez, C., Quiñones-Grueiro, M., & Llanes‐Santiago, O. (2023) · Journal of Water Resources Planning and Management · doi:10.1061/jwrmd5.wreng-5302 · Cited by 6 · see citing works
González-Granadillo, G., Díaz, R., Caubet, J., & Vidal, I. G.-M. (2021) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp1020020 · Cited by 5 · see citing works
Fog Enabled Cyber-Physical Attack detection using Ensemble Machine Learning
Nayak, O., Lachure, J., & Doriya, R. (2022) · International Conference on Sustainable Technology for Power and Energy Systems (STPES) · doi:10.1109/stpes54845.2022.10006594 · Cited by 5 · see citing works
Pereira, T. C., Andrade-Campos, A. G., & Vilanova, R. (2025) · IEEE Access · doi:10.1109/access.2025.3639006 · Cited by 4 · see citing works
“There is some literature, in this context, that focuses on anomaly detection ([206], [207], [208], [209], [210]) and the detection of potential intruders ([211], [212], [213]).”
Vialatoux, C. F. , & Parrend, P. (2024) · Procedia Computer Science · doi:10.1016/j.procs.2024.09.690 · Cited by 4 · see citing works
Akande, A. J., Hóu, Z., Foo, E., & Li, Q. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104455 · Cited by 5 · see citing works
Xu, J., Hu, C., Yan, X., & Gong, W. (2026) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.70661 · Cited by 2 · see citing works
“Aghashahi et al. [29] utilized a random forest classifier to predict attack.”
A blockchain-based protocol for message exchange in a ICS network
Brandão, R. (2020) · ACM Symposium on Applied Computing · doi:10.1145/3341105.3374231 · Cited by 2 · see citing works
Rustam, F., Jurcut, A. D., & Salauddin, M. (2025) · IEEE Access · doi:10.1109/access.2025.3598996 · Cited by 1 · see citing works
TE ‐ CUP ‐ SEC : Modelling and dataset for industrial control system security
Wang, X., Wang, J., 宋伟航, & Wang, Z. (2026) · The Canadian Journal of Chemical Engineering · doi:10.1002/cjce.70341 · Cited by 1 · see citing works
Kanyama, M. N., Shava, F. B., Gamundani, A. M., & Hartmann, A. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4530818
Xia, Z., Li, C., Tan, J., & Qiu, H. (2025) · Communications in computer and information science · doi:10.1007/978-981-95-4109-6_35
Timed automata learning from time series
Cornanguer, L. (2023) · doi:10.70675/2921b612z4885z4ca2za9adz5337eb033d46
Towards Deployable Anomaly Detection in industrial CPS/ICS: A Survey and Deployability Assessment
Kollarou, A., Lin, J., Pirbhulal, S., Lee, M., & Gkioulos, V. (2026) · International Journal of Information Security · doi:10.1007/s10207-026-01330-1
Pérez-Pérez, E.-J. (2026) · Eng—Advances in Engineering · doi:10.3390/eng7100564
- Authors
- Aghashahi, M., Sundararajan, R., Pourahmadi, M., & Banks, M. K.
- Affiliations
- Texas A&M University (US)
- ORCID
- Sundararajan, Raanju
- Venue
- World Environmental and Water Resources Congress 2017
- Publisher
- American Society of Civil Engineers
- Published
- 2017-05-18
- Pages
- 101-108
- OpenAlex
- W2614667302
- Cited by
- 30
- References
- 7
- Citations by year
- 2026: 4 · 2025: 5 · 2024: 3 · 2023: 5 · 2022: 5 · 2021: 3 · 2020: 3 · 2019: 1 · 2018: 1
- FWCI
- 4.14
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- World Environmental and Water Resources Congress (EWRI) (publishedVersion)
- Funders
- Qatar National Research Fund
- Topics
- Physical Sciences › Engineering › Civil and Structural Engineering › Water Systems and Optimization
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- water distribution systems, cyber-physical attacks, attack detection, anomaly detection, intrusion detection, smart water systems, time series, false alarm reduction, supervised learning, SCADA
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
