Cyber-physical Hardening of the Digital Water Infrastructure
Open accessAbstract
Water supply and drainage systems, which are categorized as critical infrastructure, serve a crucial role in preserving societal health and well-being. Since climate change effects, harsher regulations, population changes, and aging infrastructure pose problems for these systems, the industry is experiencing a digital transition to meet these concerns. This article addresses Cyber-Physical-Social Systems (CPSS) and its application to water distribution networks, combining cyber, physical, and social components for adaptive, responsive, and intelligent management. This paper’s primary contributions include a review of recent security problems in the water industry, which emphasizes the necessity for stronger security measures. The article also examines how water distribution networks, as CPSS, fit into the interrelated realms of physical infrastructure, digital components, and stakeholder involvement, necessitating an all-encompassing system design and management strategy. In addition, the article investigates various cyber-physical attack scenarios, risk management methodologies, and the crucial role of integrated knowledge in mitigating these risks. In the context of increasing digitalization, the paper emphasizes the significance of taking into account both water infrastructure regulations under social space, such as the Water Framework Directive 2000/60/EC (WFD), and cyberspace-related legal and legislative standards, such as the Network and Information Systems (NIS) Directive, the General Data Protection Regulation (GDPR) and Cybersecurity Act. By tackling these difficulties and concentrating on privacy concerns, water utilities may contribute to the overall security and resiliency of vital infrastructure while assuring compliance with applicable legislation.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
When storing confidential information, data security and protection become paramount.
“Overall, when storing confidential information, data security and protection become paramount [83,84].”
From Reinvigorating algal cultivation for biomass production with digital twin technology - a smart sustainable infrastructure (2024) · cites this paper as [83]
Cites
Lessons Learned from the Maroochy Water Breach
Slay, J., & Miller, M. (2007) · Critical Infrastructure Protection · doi:10.1007/978-0-387-75462-8_6 · Cited by 721 · see citing works
González-Granadillo, G., González-Zarzosa, S., & Díaz, R. (2021) · Sensors · doi:10.3390/s21144759 · Cited by 284 · see citing works
Cyber security challenges in Smart Grids
Line, M. B., Tøndel, I. A., & Jaatun, M. G. (2011) · IEEE PES Innovative Smart Grid Technologies Europe · doi:10.1109/isgteurope.2011.6162695 · Cited by 65 · see citing works
Self-citationHedging for Privacy in Smart Water Meters
Salomons, E., Perelman, L., & Housh, M. (2020) · Water Resources Research · doi:10.1029/2020wr027917 · Cited by 22 · see citing works
Water-tight IoT–just add security
Bour, G., Bosco, C., Ugarelli, R., & Jaatun, M. G. (2023) · Journal of Cybersecurity and Privacy · doi:10.3390/jcp3010006 · Cited by 10 · see citing works
Self-citationUgarelli, R., Koti, J., Gil, E. B., Makropoulos, C., Caubet, J., Camarinopoulos, S., Bimpas, M., Ahmadi, M., Zimmermann, L., & Jaatun, M. G. (2018) · EPiC series in engineering · doi:10.29007/461f · Cited by 4 · see citing works
Self-citationRisk Reduction Measures Database (RRMD)
Mälzer, H., Vollmer, F., Gil, E. B., Baquero, D., Meseguer, J., Ortiz, C. G., & Ahmadi, M. (2019) · Zenodo (CERN European Organization for Nuclear Research) · doi:10.5281/zenodo.3947950 · Cited by 2 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Sheik, A. G., Kumar, A., Ansari, F. A., Raj, V., Peleato, N. M., Patan, A. K., Kumari, S., & Bux, F. (2024) · Algal Research · doi:10.1016/j.algal.2024.103779 · Cited by 37 · see citing works
A self-adaptation-based approach to resilience improvement of complex internets of utility systems
Coppolino, L., D’Antonio, S., Nardone, R., & Romano, L. (2023) · Environment Systems & Decisions · doi:10.1007/s10669-023-09937-8 · Cited by 9 · see citing works
Lachure, J., & Doriya, R. (2024) · IEEE Sensors Journal · doi:10.1109/jsen.2024.3472022 · Cited by 5 · see citing works
Langat, P. K., Veljanovski, R., & Koech, R. (2026) · Wiley Interdisciplinary Reviews Water · doi:10.1002/wat2.70078 · Cited by 2 · see citing works
Anttila, L. (2026) · ACM Symposium on Applied Computing · doi:10.1145/3748522.3779715 · Cited by 1 · see citing works
Smirnova, T. (2025) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2025.31.963
Managing Cybersecurity in the Water Sector: When the Human Factor Does Matter
Arràez, L. A., Kemp, S., & Rodríguez‐Roda, I. (2026) · Journal of Water Resources Planning and Management · doi:10.1061/jwrmd5.wreng-7075
Nekriach, A. I., & Кириченко, Г. В. (2026) · Actual problems of innovative economy and law · doi:10.36887/2524-0455-2026-3-26
- Authors
- Cali, Ü., Catak, F. Ö., Balogh, Z. G., Ugarelli, R., & Jaatun, M. G.
- Affiliations
- Norwegian University of Science and Technology (NO)
- IDE, University of Stavanger, Norway
- Corvinus University of Budapest (HU)
- SINTEF Community (NO)
- SINTEF Digital (NO)
- Venue
- European Interdisciplinary Cybersecurity Conference
- Publisher
- ACM
- Published
- 2023-06-14
- Pages
- 181-188
- OpenAlex
- W4378530875
- Cited by
- 8
- References
- 7
- Citations by year
- 2026: 4 · 2025: 1 · 2024: 2 · 2023: 1
- FWCI
- 7.35
- Type
- conference paper
- Language
- en
- Open access
- hybrid
- doi.org
- Licence
- Locations
- European Interdisciplinary Cybersecurity Conference (EICC) (publishedVersion, cc-by)
- NORA - Norwegian Open Research Archives (submittedVersion, cc-by)
- Funders
- European Commision (820954)
- Topics
- Physical Sciences › Engineering › Civil and Structural Engineering › Water Systems and Optimization
- Physical Sciences › Engineering › Civil and Structural Engineering › Infrastructure Resilience and Vulnerability Analysis
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Keywords
- cyber-physical-social systems, water distribution systems, critical infrastructure security, water utilities, risk management, Water Framework Directive, NIS Directive, GDPR, Cybersecurity Act, data privacy, infrastructure resilience, stakeholder engagement
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
