Decision Support System for Cyber Attack Diagnosis in Smart Water Networks

Abstract This paper presents the design of a Decision Support System (DSS) for cyber attack diagnosis in Smart Water Networks. Cyber physical systems (CPS) integrate physical assets with embedded systems. Smart water networks are CPS formed by the distribution system of pipes together with sensors, actuators, programmable logic controllers (PLCs) and supervisory control and data acquisition (SCADA) system. The proposed strategy combines three signal processing tools: Principal Component Analysis, the Adaptive Exponential Weighted Moving Average Chart and the Reconstruction-based Contribution method. The proposal is tested with the data published in the BATtle of the Attack Detection ALgorithms (BATADAL) competition (http://www.batadal.net). The results show that the proposed DSS allows the detection of all the attacks from the test data set 3 with a satisfactory performance by using only data from the normal behavior (data set 1). The proposed DSS can also successfully identify the area of the network and the physical component(s) under attack for different scenarios (first three attacks).