Cybersecurity in Water Sector: Stakeholders Perspective

Shapira, Naama; Ayalon, Ofira; Ostfeld, Avi; Farber, Yair; Housh, Mashor

doi:10.1061/(asce)wr.1943-5452.0001400

Cited by 10 publications

(6 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Shapira et al [30], reported on the findings of an active workshop which elicited cybersecurity perspectives from stakeholders in the Israeli water sector. The lack of both professional security knowledge and organisational awareness of cybersecurity risks were identified as the sector's two biggest gaps.…”

Section: Resultsmentioning

confidence: 99%

Security Culture in Industrial Control Systems Organisations: A Literature Review

Evripidou

Ani

Watson

et al. 2022

Human Aspects of Information Security and Assurance

View full text Add to dashboard Cite

Industrial control systems (ICS) are a key element of a country's critical infrastructure, which includes industries like energy, water, and transport. In recent years, an increased convergence of operational and information technology has been taking place in these systems, increasing their cyber risks, and making security a necessity. People are often described as one of the biggest security risks in ICS, and historic attacks have demonstrated their role in facilitating or deterring them. One approach to enhance the security of organisations using ICS is the development of a security culture aiming to positively influence employees' security perceptions, knowledge, and ultimately, behaviours. Accordingly, this work aims to review the security culture literature in organisations which use ICS and the factors that affect it, to provide a summary of the field. We conclude that the factors which affect security culture in ICS organisations are in line with the factors discussed in the general literature, such as security policies and management support. Additional factors related to ICS, such as safety culture, are also highlighted. Gaps are identified, with the limited research coverage being the most prominent. As such, proposals for future research are offered, including the need to conduct research with employees whose roles are not security related.

show abstract

Section: Resultsmentioning

confidence: 99%

Security Culture in Industrial Control Systems Organisations: A Literature Review

Evripidou

Ani

Watson

et al. 2022

Human Aspects of Information Security and Assurance

View full text Add to dashboard Cite

show abstract

“…The authors of [ 13 ] studied all means of maliciously accessing a plant such as through sensors, actuators, networks, and PLCs, etc. In [ 26 , 27 , 30 , 31 , 35 , 36 , 39 ], the authors studied attacks through sensors in the environment. Ref.…”

Section: Secure Water Treatment Plant Components and Processes And At...mentioning

confidence: 99%

“…Cybersecurity has developed a huge interest in the water industry and some educational programs have been offered [ 20 , 21 ]. This provoked great interest in the research environment [ 22 , 23 , 24 , 25 , 26 , 27 ], as earlier cybersecurity incidents may have provided insightful information that could be used to inform current cyber defense efforts, promoting investments and initiatives and increasing their applicability and efficiency. This calls for a thorough compilation and analysis of these instances, which is currently lacking.…”

Section: Introductionmentioning

confidence: 99%

A Comprehensive Study on Cyber Attacks in Communication Networks in Water Purification and Distribution Plants: Challenges, Vulnerabilities, and Future Prospects

Aslam,

Tufail,

Kim

et al. 2023

Sensors

View full text Add to dashboard Cite

In recent years, the Internet of Things (IoT) has had a big impact on both industry and academia. Its profound impact is particularly felt in the industrial sector, where the Industrial Internet of Things (IIoT), also known as Industry 4.0, is revolutionizing manufacturing and production through the fusion of cutting-edge technologies and network-embedded sensing devices. The IIoT revolutionizes several industries, including crucial ones such as oil and gas, water purification and distribution, energy, and chemicals, by integrating information technology (IT) with industrial control and automation systems. Water, a vital resource for life, is a symbol of the advancement of technology, yet knowledge of potential cyberattacks and their catastrophic effects on water treatment facilities is still insufficient. Even seemingly insignificant errors can have serious consequences, such as aberrant pH values or fluctuations in the concentration of hydrochloric acid (HCI) in water, which can result in fatalities or serious diseases. The water purification and distribution industry has been the target of numerous hostile cyber security attacks, some of which have been identified, revealed, and documented in this paper. Our goal is to understand the range of security threats that are present in this industry. Through the lens of IIoT, the survey provides a technical investigation that covers attack models, actual cases of cyber intrusions in the water sector, a range of security difficulties encountered, and preventative security solutions. We also explore upcoming perspectives, illuminating the predicted advancements and orientations in this dynamic subject. For industrial practitioners and aspiring scholars alike, our work is a useful, enlightening, and current resource. We want to promote a thorough grasp of the cybersecurity landscape in the water industry by combining key insights and igniting group efforts toward a safe and dependable digital future.

show abstract

“…The implications of such attacks are far-reaching, affecting not just individual communities but entire regions. Enhancing cybersecurity in the water sector is not merely a technical challenge but a critical public safety priority (Shapira, Ayalon, Ostfeld, Farber, & Housh, 2021). AI and ML are at the forefront of transforming cybersecurity approaches.…”

Section: Introductionmentioning

confidence: 99%

Theoretical Frameworks for the Role of Ai and Machine Learning in Water Cybersecurity: Insights From African and U.S. Applications

Fatai Adeshina Adelani,

Enyinaya Stefano Okafor,

Boma Sonimiteim Jacks

et al. 2024

Comput. sci. IT res. j.

View full text Add to dashboard Cite

This review paper explores the theoretical frameworks underpinning the application of Artificial Intelligence (AI) and Machine Learning (ML) in enhancing cybersecurity within the water sector, with a focus on both African and U.S. contexts. It delves into the unique cybersecurity challenges faced by the water sector, emphasizing the critical role of AI and ML in identifying, predicting, and mitigating cyber threats. The paper discusses the ethical considerations and regulatory frameworks influencing the deployment of these technologies alongside the technical, socioeconomic, and data privacy challenges encountered. Future directions and emerging trends in AI and ML that could impact water cybersecurity are examined, offering insights into potential research areas and strategies for overcoming existing barriers. This comprehensive review underscores the importance of integrating AI and ML into water cybersecurity strategies to safeguard critical water infrastructure. Keywords: Artificial Intelligence, Machine Learning, Water Cybersecurity, Ethical Considerations, Regulatory Frameworks, Emerging Trends.

show abstract

Cybersecurity in Water Sector: Stakeholders Perspective

Cited by 10 publications

References 18 publications

Security Culture in Industrial Control Systems Organisations: A Literature Review

Security Culture in Industrial Control Systems Organisations: A Literature Review

A Comprehensive Study on Cyber Attacks in Communication Networks in Water Purification and Distribution Plants: Challenges, Vulnerabilities, and Future Prospects

Theoretical Frameworks for the Role of Ai and Machine Learning in Water Cybersecurity: Insights From African and U.S. Applications

Contact Info

Product

Resources

About