Water Treatment Dosing Attack (Attack Tree)
Paths to altering a coagulant dose setpoint at a water treatment works, from vendor VPN compromise to spoofing the residual analyser.
Make it your own.
title "Unauthorised change to chemical dosing at a water treatment works"
goal G "Alter the coagulant dose setpoint"
OR G1 "Reach the control network" parent G
AND G2 "Gain engineering access" parent G
OR G3 "Defeat safety and monitoring" parent G
leaf L1 "Compromise the vendor remote support VPN" parent G1 cost 4 skill high detect medium
leaf L2 "Plug into an unlocked cabinet at an unmanned site" parent G1 cost 2 skill low detect low
leaf L3 "Pivot from corporate through a flat firewall rule" parent G1 cost 3 skill medium detect medium
leaf L4 "Reuse shared engineering workstation credentials" parent G2 cost 2 skill medium detect medium
leaf L5 "Use the default controller programming password" parent G2 cost 1 skill low detect high
leaf L6 "Suppress the SCADA alarm on the dosing loop" parent G3 cost 3 skill high detect high
leaf L7 "Spoof the residual chlorine analyser reading" parent G3 cost 5 skill high detect medium