STOP-IT - Detail page

Home
FT
SP Wizard
- Risknought
Lists
- Measures
- Events
- Tools
- ST Procedures
Search
Login

Event source type: External attacker

Description

An external attacker is any attacker that does not belong to the staff of the water utility. An external attacker carries out attacks intentionally.

Measures

Events

Gate 234 - Contamination of WDN tank
Gate 236 - Outflow of WDN tank is interrupted
Gate 237 - Outflow valve of WDN tank closed
Gate 239 - Mislead PLC controlled WDN tank refill process
Gate 260 - WDN control system manipulated
Gate 219 - Staff controlled hydraulic processes run without WTP data
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Gate 191 - Mislead surface water management system
Gate 193 - Surface water management system functions on altered data
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 232 - External person physically interrupts WDN tank outflow
Basic Event 233 - External person damages WDN tank
Basic Event 235 - External person in situ manipulates WDN tank level sensor
Basic Event 236 - Man-in-the-Middle attack manipulates WDN tank level sensor signals
Basic Event 237 - Malware alters PLC statements that control WDN tank refill
Basic Event 238 - External person in situ manipulates WDN tank transmission system
Basic Event 244 - External person physically destroys pumps
Basic Event 245 - DoS attack on WDN pump
Basic Event 242 - External person destroys WDN power transformer
Basic Event 252 - Man-in-the-Middle attack manipulates WDN PBS sensor signals
Basic Event 253 - External person in situ destroys PBS sensors
Basic Event 254 - External person physically destroys PBS data transmission wires
Basic Event 255 - Man-in-the-Middle attack manipulates local power transformer signals
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 251 - External person in situ manipulates PBS transmission devices
Basic Event 256 - External person jams PBS communications
Basic Event 258 - Malware DoS to local PBS PLC
Basic Event 259 - External person physically damages PBS PLC
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Basic Event 262 - External person physically destroys valve
Basic Event 263 - DoS attack on WDN valve
Basic Event 264 - Malware alters PLC statements that control valve
Basic Event 265 - Man-in-the-Middle attack manipulates WDN valve sensor signals
Basic Event 266 - External person jams WDN valve communications
Basic Event 267 - Man-in-the-Middle attack manipulates WDN valve control signals
Basic Event 268 - Cathode corrosion stolen/destroyed/manipulated
Basic Event 269 - External person physically destroys WDN pipes
Basic Event 272 - WDN control center destroyed by intentional flood
Basic Event 273 - External person attacks WDN control room
Basic Event 274 - Ransomeware denies access to the WDN control system
Basic Event 275 - Malware alters WDN control statements
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 277 - Malware tampers network topology characteristics on prediction models (e.g. tank volume curve)
Basic Event 278 - Ransomware wipes out WDN control system files
Basic Event 279 - Malware corrupts prediction model database
Basic Event 280 - External person physically destroys WDN servers
Basic Event 227 - Fake news about contamination in WTP using manipulated water company public communication
Basic Event 209 - External person physically manipulates WTP sensor readings
Basic Event 210 - Man-in-the-Middle attack manipulates WTP sensor signal
Basic Event 205 - External person physically destroys WTP sensors
Basic Event 206 - External person jams WTP sensor signal transmission
Basic Event 207 - External person destroys WTP transmission wires
Basic Event 208 - External attacker blocks WDN sensor signals to reach WTP
Basic Event 211 - External attacker manipulates WTP transmission devices
Basic Event 32 - External person physically damages sewer line
Basic Event 18 - External person breaks in WWTP and takes over SCADA
Basic Event 20 - SCADA hijacking software takes control of WWTP operation
Basic Event 23 - Man-in-the-Middle attack manipulates WWTP control signals
Basic Event 22 - Man-in-the-Middle attack manipulates WWTP data transmitted from sensors
Basic Event 24 - External person physically manipulates WWTP quality sensor
Basic Event 163 - External person attacks surface water system management party e.g. water board
Basic Event 164 - External person physically destroys surface water system sensors
Basic Event 165 - External person jams surface water system sensor signal transmission
Basic Event 166 - External person jams surface water system sensor signal transmission
Basic Event 167 - External person physically manipulates surface water system sensor readings
Basic Event 168 - External person physically manipulates surface water system sensor readings
Basic Event 169 - Man-in-the-Middle attack manipulates surface water system sensor signal
Basic Event 170 - External attacker manipulates surface water system transmission devices
Basic Event 174 - External person destroys reservoir intake pipe
Basic Event 177 - External person breaks in to reservoir control area taking over SCADA
Basic Event 178 - Internal person silently takes over reservoir SCADA control
Basic Event 37 - External person injects substance at sub-surface of monitoring site
Basic Event 38 - External person adds substance at the topsoil of monitoring site
Basic Event 39 - External person adds substance through monitoring well
Basic Event 185 - External person detected near groundwater abstraction wells
Basic Event 186 - Quality sensor transmission wires of observation wells manipulated
Basic Event 187 - External person physically manipulates groundwater quality sensor readings
Basic Event 189 - Man-in-the-Middle attack manipulates groundwater quality sensor signal
Basic Event 190 - External person physically destroys observation well sensors
Basic Event 191 - External person physically destroys data transmission system of wells
Basic Event 192 - External person physically destroys data transmission wires of wells
Basic Event 193 - External person jams data transmission of wells
Basic Event 194 - External person manipulates transmission wires of wells
Basic Event 195 - External person manipulates data transmission system of wells
Basic Event 196 - Man-in-the-Middle attack manipulates well sensor signal
Basic Event 197 - External person physically manipulates well sensor signal
Basic Event 198 - External person breaks in to well control area and takes over SCADA
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Basic Event 202 - External person destroys abstraction wells
Basic Event 214 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 215 - Man-in-the-Middle attack manipulates WTP control signals
Basic Event 219 - DoS attack to WTP process system PLC
Basic Event 220 - External person physically destroys WTP process system
Basic Event 222 - A valve is opened and floods equipment
Basic Event 224 - External person destroys data transmission system of WTP power transformers
Basic Event 225 - External person destroys WTP power transformer
Gate 123 - Contamination at WDN water tank
Gate 146 - Free chlorine residual in WDN
Gate 115 - Additive and/or disinfectant overdosing
Gate 116 - Chemical overdosing due to misled WTP operation
Gate 176 - Staff controlled processes run without WTP data
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Gate 142 - Chemical overdosing due to loss of WTP control
Gate 118 - Disinfectant composition altered
Gate 117 - Staff or PLC controlled disinfection processes run on altered WTP data
Gate 111 - Insufficient disinfection due to loss of WTP control
Gate 119 - Insufficient disinfection process controlled by intruder
Gate 178 - Dosing system disabled
Gate 179 - Dosing system destroyed
Gate 122 - THM by-product formation in WTP
Gate 185 - Undetected contamination of WTP chemical solutions
Gate 186 - Quality verification process runs on altered WTP data
Gate 187 - Contamination of WTP chemical solutions
Gate 189 - Additives composition altered
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 54 - Biological, chemical or radioactive substance pumped through hydrant
Basic Event 55 - Biological, chemical or radioactive substance pumped through tap
Basic Event 149 - Biological, chemical or radioactive substance injected through pipe
Basic Event 42 - External person physically destroys WTP sensors
Basic Event 43 - External person jams WTP sensor signal transmission
Basic Event 154 - External attacker destroyes absraction point quality sensors
Basic Event 158 - External attacker blocks WDN sensor reading to reach WTP
Basic Event 48 - External person physically manipulates WTP sensor readings
Basic Event 50 - Man-in-the-Middle attack manipulates WTP sensor signal
Basic Event 153 - External attacker manipulates WTP transmission devices
Basic Event 155 - External person physicaly manipulates abstraction point quality sensor readings
Basic Event 156 - Man-in-the-Middle attack manipulates abstraction point quality sensors
Basic Event 157 - Man-in-the-Middle attack manipulates WDN quality sensor readings
Basic Event 61 - External person breaks in to WTP and takes over SCADA undetected
Basic Event 63 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Basic Event 44 - External person adds substance to WTP disinfectant storage tank
Basic Event 65 - DoS attack to dosing system PLC
Basic Event 68 - External person physically destroys WTP dosing system
Basic Event 76 - External person physically damages WTP coagulation system
Basic Event 37 - External person injects substance at sub-surface of monitoring site
Basic Event 38 - External person adds substance at the topsoil of monitoring site
Basic Event 39 - External person adds substance through monitoring well
Basic Event 32 - External person physically damages sewer line
Basic Event 18 - External person breaks in WWTP and takes over SCADA
Basic Event 20 - SCADA hijacking software takes control of WWTP operation
Basic Event 23 - Man-in-the-Middle attack manipulates WWTP control signals
Basic Event 22 - Man-in-the-Middle attack manipulates WWTP data transmitted from sensors
Basic Event 24 - External person physically manipulates WWTP quality sensor
Basic Event 72 - External person induces biological substances to treated water tank
Basic Event 80 - External person induces chemical or radioactive substance to treated water tank
Basic Event 161 - External person adds substance to WTP stored additives

Name

External attacker

This project has received funding from the European Union's Horizon 2020 research and innovation programme under grant agreement No. 740610. The publication reflects only the authors' views and the European Union is not liable for any use that may be made of the information contained therein. All illustrations in the homepage are attributed to rudall30/Shutterstock.com.