Water-tight IoT–just add security
Open accessAbstract
The security of IoT-based digital solutions is a critical concern in the adoption of Industry 4.0 technologies. These solutions are increasingly being used to support the interoperability of critical infrastructure, such as in the water and energy sectors, and their security is essential to ensure the continued reliability and integrity of these systems. However, as our research demonstrates, many digital solutions still lack basic security mechanisms and are vulnerable to attacks that can compromise their functionality. In this paper, we examine the security risks associated with IoT-based digital solutions for critical infrastructure in the water sector, and refer to a set of good practices for ensuring their security. In particular, we analyze the risks associated with digital solutions not directly connected with the IT system of a water utility. We show that they can still be leveraged by attackers to trick operators into making wrong operational decisions.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
When storing confidential information, data security and protection become paramount.
“Overall, when storing confidential information, data security and protection become paramount [83,84].”
From Reinvigorating algal cultivation for biomass production with digital twin technology - a smart sustainable infrastructure (2024) · cites this paper as [84]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
The urban stream syndrome: Current knowledge and the search for a cure
Walsh, C. J., Roy, A. H., Feminella, J. W., Cottingham, P. D., Groffman, P. M., & Morgan, R. P. (2005) · Journal of the North American Benthological Society · doi:10.1899/04-028.1 · Cited by 3,018 · see citing works
Passerat, J., Ouattara, K. N., Mouchel, J., Rocher, V., & Servais, P. (2010) · Water Research · doi:10.1016/j.watres.2010.09.024 · Cited by 277 · see citing works
The Mirai botnet and the IoT Zombie Armies
Kambourakis, G., Kolias, C., & Stavrou, A. (2017) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom.2017.8170867 · Cited by 243 · see citing works
Physical Security Devices for Computer Subsystems: A Survey of Attacks and Defenses
Weingart, S. H. (2000) · Lecture notes in computer science · doi:10.1007/3-540-44499-8_24 · Cited by 197 · see citing works
Urban Drainage – Impacts on Receiving Water Quality
House, M. A., Ellis, J. B., Herricks, E. E., Hvitved‐Jacobsen, T., Seager, J., Lijklema, L., Aalderink, H., & Clifforde, I. T. (1993) · Water Science & Technology · doi:10.2166/wst.1993.0293 · Cited by 162 · see citing works
Madoux-Humery, A.-S., Dorner, S. M., Sauvé, S., Aboulfadl, K., Galarneau, M., Servais, P., & Prévost, M. (2013) · Water Research · doi:10.1016/j.watres.2013.04.030 · Cited by 141 · see citing works
Wastewater release and its impacts on Canadian waters
Holeton, C., Chambers, P. A., & Grace, L. (2011) · Canadian Journal of Fisheries and Aquatic Sciences · doi:10.1139/f2011-096 · Cited by 121 · see citing works
Relationships between rainfall and Combined Sewer Overflow (CSO) occurrences
Mailhot, A., Talbot, G., & Lavallée, B. F. (2015) · Journal of Hydrology · doi:10.1016/j.jhydrol.2015.01.063 · Cited by 79 · see citing works
Climate Change Impact on Combined Sewer Overflows
Fortier, C., & Mailhot, A. (2014) · Journal of Water Resources Planning and Management · doi:10.1061/(asce)wr.1943-5452.0000468 · Cited by 58 · see citing works
Separate and combined sewer systems: a long-term modelling approach
Mannina, G., & Viviani, G. (2009) · Water Science & Technology · doi:10.2166/wst.2009.376 · Cited by 54 · see citing works
Cyber-Physical Stress-Testing Platform for Water Distribution Networks
Nikolopoulos, D., Moraitis, G., Bouziotas, D., Lykou, A., Karavokiros, G., & Makropoulos, C. (2020) · Journal of Environmental Engineering · doi:10.1061/(asce)ee.1943-7870.0001722 · Cited by 49 · see citing works
Soldatos, J., Praça, I., & Jovanović, A. (2021) · doi:10.1561/9781680838237 · Cited by 15 · see citing works
Bosco, C., Raspati, G. S., Tefera, K., Rishovd, H., & Ugarelli, R. (2022) · Water · doi:10.3390/w14233895 · Cited by 8 · see citing works
Self-citationUgarelli, R., Koti, J., Gil, E. B., Makropoulos, C., Caubet, J., Camarinopoulos, S., Bimpas, M., Ahmadi, M., Zimmermann, L., & Jaatun, M. G. (2018) · EPiC series in engineering · doi:10.29007/461f · Cited by 4 · see citing works
Self-citationSecurity Analysis of the Pacemaker Home Monitoring Unit: A BlackBox Approach
Bour, G. (2019) · NORA - Norwegian Open Research Archives · Cited by 2 · see citing works
Self-citation
Flagged first, then by citations
Research works printed but not linked: 4
- Soldatos, J.; Praça, I.; Jovanović, A., Eds.; Now Publishers: Boston, MA, USA, 2021; pp. 145-158.
- Ostfeld, A.; Salomons, E.; Smeets, P.; Makropolous, C.; Bonet, E.; Meseguer, J.; Mälzer, H.J.; Vollmer, F.; Ugarelli, R. STOP-IT D3.2 Risk Identification Database (RIDB); Zenodo: Genève, Switzerland, 2018. [CrossRef] · DOI
- Mälzer, H.; Vollmer, F.; Corchero, A. STOP-IT D4.3 Risk Remediation Measures Database (RRMD); Zenodo: Genève, Switzerland, 2019. [CrossRef] · DOI
- Schwarzmüller, H.; Vennesland, A.; Haro, P.H.; Bour, G. D4.1: Interoperable and Secure Flow of Information-Cyber-physical Sphere and Interoperability Aspects in the Utilities Regarding the DWC Solutions; Technical Report D4.1; Digital Water City; Zenodo: Genève, Switzerland, 2021. [CrossRef] · DOI
Cited by
Sorted by citations
Sheik, A. G., Kumar, A., Ansari, F. A., Raj, V., Peleato, N. M., Patan, A. K., Kumari, S., & Bux, F. (2024) · Algal Research · doi:10.1016/j.algal.2024.103779 · Cited by 37 · see citing works
Cyber-physical Hardening of the Digital Water Infrastructure
Cali, Ü., Catak, F. Ö., Balogh, Z. G., Ugarelli, R., & Jaatun, M. G. (2023) · European Interdisciplinary Cybersecurity Conference · doi:10.1145/3590777.3591408 · Cited by 8 · see citing works
Self-citationA Taxonomy of AI Techniques for Security and Privacy in Cyber–Physical Systems
Bandi, A. (2024) · Journal of Computational and Cognitive Engineering · doi:10.47852/bonviewjcce42021539 · Cited by 8 · see citing works
Bosco, C., Thirsing, C., Jaatun, M. G., & Ugarelli, R. (2023) · Water · doi:10.3390/w15223964 · Cited by 1 · see citing works
Self-citationAnttila, L. (2026) · ACM Symposium on Applied Computing · doi:10.1145/3748522.3779715 · Cited by 1 · see citing works
Bosco, C., Bruaset, S., Abdalla, E. M. H., Raspati, G. S., Maurin, N., Ugarelli, R., & Sivertsen, E. (2025) · Water Science & Technology · doi:10.2166/wst.2025.150 · Cited by 1 · see citing works
Self-citationТіменко, А., Shkarupylo, V. V., Kulykovska, N. A., & Hrushko, S. (2024) · Herald of Advanced Information Technology · doi:10.15276/hait.07.2024.4
Critical Security Points in the IT Systems of Renewable Energy Communitys
Háber, I. E., Haber, K., Cserta, E., Nemeth, L. A., & Horváth, L. (2025) · Advanced sciences and technologies for security applications · doi:10.1007/978-3-031-78544-3_21
Gripsy, J. V., Kowsalya, R., Thendral, T., Senthilkumar, A., Dhas, J. T. M., & Sheeba, L. (2025) · IGI Global eBooks · doi:10.4018/979-8-3373-1882-0.ch013
Paredes, I. D. T., Rodríguez, K. L. C., Encalada, W. L., & Rojas, J. (2026) · Enfoque UTE · doi:10.29019/enfoqueute.1259
- Authors
- Bour, G., Bosco, C., Ugarelli, R., & Jaatun, M. G.
- Affiliations
- SINTEF Digital (NO)
- SINTEF Community, Børrestuveien 3B, 0314 Oslo, Norway
- Corresponding author
- Bour, Guillaume
- Venue
- Journal of Cybersecurity and Privacy
- Publisher
- MDPI AG
- Published
- 2023-03-01
- Volume
- 3
- Issue
- 1
- Pages
- 76-94
- ISSN
- 2624-800X (ISSN-L)
- OpenAlex
- W4322740083
- Cited by
- 10
- References
- 15
- Citations by year
- 2026: 2 · 2025: 3 · 2024: 3 · 2023: 2
- FWCI
- 1.11
- Type
- journal article
- Language
- en
- Open access
- gold
- doi.org
- Licence
- Locations
- Journal of Cybersecurity and Privacy (publishedVersion, cc-by)
- Zenodo (CERN European Organization for Nuclear Research) (submittedVersion, cc-by)
- DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
- NORA - Norwegian Open Research Archives (submittedVersion, cc-by)
- Funders
- EU H2020 Research and Innovation Programme (820954)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Physical Sciences › Engineering › Control and Systems Engineering › Smart Grid Security and Resilience
- Keywords
- Internet of Things security, water utilities, critical infrastructure, Industry 4.0, security risks, cyber-physical attacks
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
