{"id":"https://openalex.org/W4310145582","doi":"https://doi.org/10.23919/fruct56874.2022.9953826","title":"Exploiting Control Device Vulnerabilities: Attacking Cyber-Physical Water System","display_name":"Exploiting Control Device Vulnerabilities: Attacking Cyber-Physical Water System","publication_year":2022,"publication_date":"2022-11-09","ids":{"openalex":"https://openalex.org/W4310145582","doi":"https://doi.org/10.23919/fruct56874.2022.9953826"},"language":"en","primary_location":{"id":"doi:10.23919/fruct56874.2022.9953826","is_oa":false,"landing_page_url":"https://doi.org/10.23919/fruct56874.2022.9953826","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 32nd Conference of Open Innovations Association (FRUCT)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doaj.org/article/70d99c672549465bb0e3dc2a099bd014","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067632166","display_name":"Parul Sindhwad","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Parul Sindhwad","raw_affiliation_strings":["VJTI,Electrical Engineering Department,Mumbai,India,400019"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VJTI,Electrical Engineering Department,Mumbai,India,400019","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000629645","display_name":"Faruk Kazi","orcid":"https://orcid.org/0000-0002-6551-3021"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Faruk Kazi","raw_affiliation_strings":["VJTI,Electrical Engineering Department,Mumbai,India,400019"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"VJTI,Electrical Engineering Department,Mumbai,India,400019","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3273,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.78970427,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"270","last_page":"279"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7366483807563782},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7328516244888306},{"id":"https://openalex.org/keywords/modbus","display_name":"Modbus","score":0.6755963563919067},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6726164817810059},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6281882524490356},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5804133415222168},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.5763412714004517},{"id":"https://openalex.org/keywords/industrial-control-system","display_name":"Industrial control system","score":0.5564864277839661},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5413567423820496},{"id":"https://openalex.org/keywords/control-system-security","display_name":"Control system security","score":0.4492008090019226},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.42809492349624634},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.28892672061920166},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.27024808526039124},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.2317200005054474},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.1722864806652069},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.14545604586601257},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.13788488507270813},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12665754556655884}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7366483807563782},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7328516244888306},{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.6755963563919067},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6726164817810059},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6281882524490356},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5804133415222168},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.5763412714004517},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.5564864277839661},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5413567423820496},{"id":"https://openalex.org/C172862783","wikidata":"https://www.wikidata.org/wiki/Q5165888","display_name":"Control system security","level":5,"score":0.4492008090019226},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.42809492349624634},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.28892672061920166},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.27024808526039124},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.2317200005054474},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.1722864806652069},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.14545604586601257},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.13788488507270813},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12665754556655884},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.23919/fruct56874.2022.9953826","is_oa":false,"landing_page_url":"https://doi.org/10.23919/fruct56874.2022.9953826","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 32nd Conference of Open Innovations Association (FRUCT)","raw_type":"proceedings-article"},{"id":"pmh:oai:doaj.org/article:70d99c672549465bb0e3dc2a099bd014","is_oa":true,"landing_page_url":"https://doaj.org/article/70d99c672549465bb0e3dc2a099bd014","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the XXth Conference of Open Innovations Association FRUCT, Vol 32, Iss 1, Pp 270-279 (2022)","raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:doaj.org/article:70d99c672549465bb0e3dc2a099bd014","is_oa":true,"landing_page_url":"https://doaj.org/article/70d99c672549465bb0e3dc2a099bd014","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the XXth Conference of Open Innovations Association FRUCT, Vol 32, Iss 1, Pp 270-279 (2022)","raw_type":"article"},"sustainable_development_goals":[{"score":0.8299999833106995,"display_name":"Clean water and sanitation","id":"https://metadata.un.org/sdg/6"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1557652964","https://openalex.org/W1972757409","https://openalex.org/W1996960305","https://openalex.org/W2009429512","https://openalex.org/W2013339759","https://openalex.org/W2059966511","https://openalex.org/W2140902124","https://openalex.org/W2162783010","https://openalex.org/W2407991977","https://openalex.org/W2504027451","https://openalex.org/W2537828001","https://openalex.org/W2604247107","https://openalex.org/W2736405392","https://openalex.org/W2885128583","https://openalex.org/W2913811025","https://openalex.org/W2937619061","https://openalex.org/W2980035252","https://openalex.org/W3004344782","https://openalex.org/W3009315908","https://openalex.org/W3017165746","https://openalex.org/W3033335743","https://openalex.org/W3080878745","https://openalex.org/W3104982089","https://openalex.org/W3116359250","https://openalex.org/W3155081803","https://openalex.org/W3186345182","https://openalex.org/W3200028754","https://openalex.org/W3214913126","https://openalex.org/W4214898980","https://openalex.org/W4220677655","https://openalex.org/W4243892583","https://openalex.org/W4288056840","https://openalex.org/W4320339608","https://openalex.org/W4323062337"],"related_works":["https://openalex.org/W1578384606","https://openalex.org/W3208265074","https://openalex.org/W2202791206","https://openalex.org/W4297097635","https://openalex.org/W79658127","https://openalex.org/W2545311377","https://openalex.org/W4285276948","https://openalex.org/W2614996178","https://openalex.org/W1577831524","https://openalex.org/W4213209911"],"abstract_inverted_index":{"Industrial":[0],"Control":[1],"Systems":[2],"(ICS)":[3],"are":[4,29,88,93,142],"transitioning":[5],"from":[6],"isolated,":[7],"custom-built":[8],"systems":[9],"to":[10,42,152,163],"those":[11],"combining":[12],"general-purpose":[13],"computer":[14],"hosts,":[15],"wireless":[16],"networks,":[17],"and":[18,44,59,83,90,97],"artificial":[19],"intelligence.":[20],"An":[21,109],"increasing":[22],"number":[23],"of":[24,76,104,119,128,131],"vulnerabilities":[25,58],"in":[26],"ICS":[27,47],"devices":[28],"a":[30,39,122],"major":[31],"concern":[32],"since":[33],"it":[34],"provides":[35],"potential":[36],"adversaries":[37],"with":[38,124],"simple":[40],"approach":[41],"exploit":[43],"attack":[45,52,120],"unpatched":[46,56],"systems.":[48],"This":[49],"paper":[50],"investigates":[51],"paths":[53],"that":[54,144],"target":[55],"system":[57],"their":[60,91],"impact":[61],"on":[62,111,121],"the":[63,68,105],"ICS,":[64],"as":[65,156,158],"demonstrated":[66],"using":[67,95,134],"Waste":[69],"Water":[70],"Treatment":[71],"Plant":[72],"(WWTP)":[73],"testbed.":[74],"Denial":[75],"Service":[77],"(DoS),":[78],"Buffer":[79],"overflow,":[80],"privilege":[81],"escalation,":[82],"illegal":[84],"command":[85],"injection":[86],"attacks":[87],"executed,":[89],"impacts":[92],"investigated":[94],"CIA":[96],"STRIDE":[98],"threat":[99],"modeling.":[100],"The":[101],"main":[102],"outcomes":[103],"study":[106],"are,":[107],"1)":[108],"update":[110],"public":[112],"advisory":[113],"CVE-2021-33834":[114],"by":[115,166],"Moxa.":[116],"2)":[117],"Demonstration":[118],"device":[123,133],"publicly":[125],"accessible":[126],"Proof":[127],"Concept":[129],"(POC)":[130],"another":[132],"Modbus":[135],"buffer":[136],"overflow":[137],"vulnerability.":[138],"Finally,":[139],"various":[140],"recommendations":[141],"provided":[143],"can":[145],"be":[146],"used":[147],"for":[148,160],"security":[149,154,165],"penetration":[150],"testing":[151],"identify":[153],"flaws,":[155],"well":[157],"directions":[159],"product":[161],"developers":[162],"implement":[164],"design.":[167]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}