Home
FT
STOP-IT Quantity FT
STOP-IT Water Quality FT
Import
List
SP Wizard
Risknought
Lists
Measures
Events
Tools
ST Procedures
Search
Login
Measure: DiscreetAppearance
Description
If possible, sensitive sites and buildings should be designed in a discreet appearance. Thus it shall be avoided that the sites or areas raise awareness of potential attackers. The aim is to lower the probability of attacks.
Comments
An example for a discreet design could be pumping stations. The building in which the pumps are located should not directly indicate that this is a pumping station for drinking water so that potential attackers are directly aware of a potential attack point. Also areas on a water utility's properties where for example servers or the control center are located should not be directly recognisable. This would quickly indicate an attractive attack point for a potential intruder.
Event source types
External attacker
Interdependent CI
Event types
Destruction
Interruption
Manipulation
Pollution
Risk reduction mechanism
Frequency/Likelihood
Threat Types
Physical
Cyber-Physical
Action characteristics
Proactive
Measure types
Physical Barriers
Redundancy
Consequence Mitigation
event_ measures
Event-Measure: 98148
Event-Measure: 98152
Event-Measure: 98196
Event-Measure: 98262
Event-Measure: 98341
Event-Measure: 98359
Event-Measure: 98383
Event-Measure: 98450
Event-Measure: 98483
Event-Measure: 98614
Event-Measure: 98728
Event-Measure: 98819
Event-Measure: 98891
Event-Measure: 98917
Event-Measure: 98983
Event-Measure: 98997
Event-Measure: 99013
Event-Measure: 99061
Event-Measure: 99078
Event-Measure: 99108
Event-Measure: 99117
Event-Measure: 99181
Event-Measure: 99230
Event-Measure: 99261
Event-Measure: 99288
Event-Measure: 99403
Event-Measure: 99493
Event-Measure: 99586
Event-Measure: 99627
Event-Measure: 99635
Event-Measure: 99671
Event-Measure: 99711
Event-Measure: 99745
Event-Measure: 99751
Event-Measure: 99833
Event-Measure: 99895
Event-Measure: 99911
Event-Measure: 99979
Event-Measure: 100029
Event-Measure: 100235
Event-Measure: 100270
Event-Measure: 100340
Event-Measure: 100456
Event-Measure: 100525
Event-Measure: 100592
Event-Measure: 100787
Event-Measure: 100847
Event-Measure: 100888
Event-Measure: 100983
Event-Measure: 101079
Event-Measure: 101210
Event-Measure: 101221
Event-Measure: 101476
Event-Measure: 101531
Event-Measure: 101542
Event-Measure: 101610
Event-Measure: 101634
Event-Measure: 101646
Event-Measure: 101712
Event-Measure: 101819
Event-Measure: 101834
Event-Measure: 101958
Event-Measure: 102161
Event-Measure: 102250
Event-Measure: 102319
Event-Measure: 102348
Event-Measure: 102612
Event-Measure: 102656
Event-Measure: 102705
Event-Measure: 102720
Event-Measure: 102741
Event-Measure: 102832
Event-Measure: 102863
Event-Measure: 102868
Event-Measure: 102935
Event-Measure: 102981
Event-Measure: 103094
Event-Measure: 103120
Event-Measure: 103162
Event-Measure: 103169
Event-Measure: 103225
Event-Measure: 103228
Event-Measure: 103235
Event-Measure: 103305
Event-Measure: 103349
Event-Measure: 103404
Event-Measure: 103472
Event-Measure: 103540
Event-Measure: 103561
Event-Measure: 103609
Event-Measure: 103701
Event-Measure: 103708
Event-Measure: 103751
Event-Measure: 103899
Event-Measure: 103966
Event-Measure: 104019
Event Consequences
Quantity
Quality
Financial
Reputation
Asset types
Drinking Water Tanks
Pressure Boosting Station
Water Abstraction Points
Water Treatment Plants
Events
Basic Event 191 - External person physically destroys data transmission system of wells
Basic Event 156 - Man-in-the-Middle attack manipulates abstraction point quality sensors
Gate 179 - Dosing system destroyed
Gate 117 - Staff or PLC controlled disinfection processes run on altered WTP data
Basic Event 50 - Man-in-the-Middle attack manipulates WTP sensor signal
Gate 143 - External contamination of WTP
Gate 111 - Insufficient disinfection due to loss of WTP control
Gate 236 - Outflow of WDN tank is interrupted
Gate 185 - Undetected contamination of WTP chemical solutions
Gate 186 - Quality verification process runs on altered WTP data
Gate 187 - Contamination of WTP chemical solutions
Basic Event 61 - External person breaks in to WTP and takes over SCADA undetected
Basic Event 258 - Malware DoS to local PBS PLC
Gate 119 - Insufficient disinfection process controlled by intruder
Gate 237 - Outflow valve of WDN tank closed
Basic Event 153 - External attacker manipulates WTP transmission devices
Basic Event 259 - External person physically damages PBS PLC
Basic Event 63 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Gate 239 - Mislead PLC controlled WDN tank refill process
Basic Event 155 - External person physicaly manipulates abstraction point quality sensor readings
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 207 - External person destroys WTP transmission wires
Gate 189 - Additives composition altered
Gate 234 - Contamination of WDN tank
Basic Event 44 - External person adds substance to WTP disinfectant storage tank
Basic Event 178 - Internal person silently takes over reservoir SCADA control
Basic Event 64 - Man-in-the-Middle attack manipulates WTP control signals
Gate 219 - Staff controlled hydraulic processes run without WTP data
Basic Event 167 - External person physically manipulates surface water system sensor readings
Basic Event 261 - Undetected SCADA hijacking software takes control of PBS operation
Basic Event 232 - External person physically interrupts WDN tank outflow
Gate 220 - Staff or PLC controlled hydraulic processes run on altered WTP data
Basic Event 168 - External person physically manipulates surface water system sensor readings
Basic Event 202 - External person destroys abstraction wells
Basic Event 211 - External attacker manipulates WTP transmission devices
Basic Event 197 - External person physically manipulates well sensor signal
Basic Event 192 - External person physically destroys data transmission wires of wells
Basic Event 198 - External person breaks in to well control area and takes over SCADA
Basic Event 252 - Man-in-the-Middle attack manipulates WDN PBS sensor signals
Basic Event 183 - Raw water pump energy supply failure
Basic Event 253 - External person in situ destroys PBS sensors
Basic Event 177 - External person breaks in to reservoir control area taking over SCADA
Basic Event 220 - External person physically destroys WTP process system
Basic Event 214 - Undetected SCADA hijacking software takes control of WTP operation
Basic Event 201 - Malware performs DoS attack on abstraction well PLCs
Gate 178 - Dosing system disabled
Basic Event 254 - External person physically destroys PBS data transmission wires
Gate 116 - Chemical overdosing due to misled WTP operation
Basic Event 52 - Restricted area authorization procedure failure
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 222 - A valve is opened and floods equipment
Basic Event 65 - DoS attack to dosing system PLC
Gate 176 - Staff controlled processes run without WTP data
Basic Event 160 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 80 - External person induces chemical or radioactive substance to treated water tank
Gate 177 - Staff or PLC controlled processes run on altered WTP data
Basic Event 154 - External attacker destroyes absraction point quality sensors
Gate 243 - Insufficient power supply
Basic Event 76 - External person physically damages WTP coagulation system
Basic Event 42 - External person physically destroys WTP sensors
Basic Event 279 - Malware corrupts prediction model database
Basic Event 161 - External person adds substance to WTP stored additives
Basic Event 68 - External person physically destroys WTP dosing system
Basic Event 48 - External person physically manipulates WTP sensor readings
Basic Event 72 - External person induces biological substances to treated water tank
Basic Event 79 - Contaminated air from Industry reaches WTP and seeps into treated water
Basic Event 187 - External person physically manipulates groundwater quality sensor readings
Basic Event 276 - SQL injection to data used for demand prediction
Basic Event 39 - External person adds substance through monitoring well
Basic Event 255 - Man-in-the-Middle attack manipulates local power transformer signals
Gate 193 - Surface water management system functions on altered data
Basic Event 163 - External person attacks surface water system management party e.g. water board
Basic Event 250 - Malware alters PLC statements that control pump
Basic Event 53 - Biological, chemical or radioactive substance injected to water tank
Basic Event 233 - External person damages WDN tank
Basic Event 164 - External person physically destroys surface water system sensors
Basic Event 217 - Failure to regulate the temperature, humidity and air quality in environments where information systems are located
Basic Event 152 - Man-in-the-Middle attack manipulates quality sensor signals
Basic Event 224 - External person destroys data transmission system of WTP power transformers
Basic Event 205 - External person physically destroys WTP sensors
Gate 225 - Inability to perform WTP process due to enegy supply failure
Basic Event 219 - DoS attack to WTP process system PLC
Basic Event 189 - Man-in-the-Middle attack manipulates groundwater quality sensor signal
Basic Event 194 - External person manipulates transmission wires of wells
Basic Event 209 - External person physically manipulates WTP sensor readings
Gate 142 - Chemical overdosing due to loss of WTP control
Basic Event 190 - External person physically destroys observation well sensors
Basic Event 170 - External attacker manipulates surface water system transmission devices
Basic Event 186 - Quality sensor transmission wires of observation wells manipulated
Basic Event 151 - External person physicaly manipulates tank quality sensor readings
Basic Event 225 - External person destroys WTP power transformer
Gate 122 - THM by-product formation in WTP
Basic Event 195 - External person manipulates data transmission system of wells
Gate 118 - Disinfectant composition altered
Basic Event 196 - Man-in-the-Middle attack manipulates well sensor signal
Specific Assets
Additives
Control Center
Control System
Dosing System
Drinking Water Tanks
Power Transformer
Pressure Boosting Station
Pump
Sensor
Server
Transmission Devices
Valve
Water under treatment
Well
Measure ID
M11
Name
DiscreetAppearance
Risk reduction mechanism
Frequency/Likelihood
Action characteristics
Proactive