Water distribution networks (WDNs) are critical infrastructure for the welfare of society. Due to their spatial extent and difficulties in deployment of security measures, they are vulnerable to threat scenarios that include the rising concern of cyber-physical attacks. To protect WDNs against different kinds of water contamination, it is customary to deploy water quality (WQ) monitoring sensors. Cyber-attacks on the monitoring system that employs WQ sensors combined with deliberate contamination events via backflow attacks can lead to severe disruptions to water delivery or even potentially fatal consequences for consumers. As such, the water sector is in immediate need of tools and methodologies that can support cyber-physical quality attack simulation and vulnerability assessment of the WQ monitoring system under such attacks. In this study we demonstrate a novel methodology to assess the resilience of placement schemes generated with the Threat Ensemble Vulnerability Assessment and Sensor Placement Optimization Tool (TEVA-SPOT) and evaluated under cyber-physical attacks simulated using the stress-testing platform RISKNOUGHT, using multidimensional metrics and resilience profile graphs. The results of this study show that some sensor designs are inherently more resilient than others, and this trait can be exploited in risk management practices.

中文翻译：

---

网络物理攻击下水质传感器设计的复原力评估

供水网络（WDN）是社会福祉的重要基础设施。由于它们的空间范围和部署安全措施的困难，它们很容易受到威胁情形的影响，其中包括对网络物理攻击的日益关注。为了保护WDN免受不同类型的水污染，习惯上部署水质（WQ）监视传感器。使用WQ传感器的监控系统受到网络攻击，并通过回流攻击故意蓄意污染事件，可能导致供水严重中断，甚至可能给消费者带来致命的后果。因此，水务部门迫切需要能够支持网络物理质量攻击模拟和在此类攻击下对WQ监控系统进行漏洞评估的工具和方法。在这项研究中，我们展示了一种新颖的方法，可以评估使用威胁集成漏洞评估和传感器放置优化工具（TEVA-SPOT）生成的放置方案的弹性，并可以在使用压力测试平台RISKNOUGHT模拟的网络物理攻击下进行评估，并使用多维指标和弹性配置文件图。这项研究的结果表明，某些传感器设计固有地比其他传感器更具弹性，并且可以在风险管理实践中利用此特征。使用多维指标和弹性配置文件图。这项研究的结果表明，某些传感器设计固有地比其他传感器更具弹性，并且可以在风险管理实践中利用此特征。使用多维指标和弹性配置文件图。这项研究的结果表明，某些传感器设计固有地比其他传感器更具弹性，并且可以在风险管理实践中利用此特征。