OptAML: Optimized adversarial machine learning on water treatment and distribution systems


AYAS M. Ş., Kara E., AYAS S., Sahin A. K.

International Journal of Critical Infrastructure Protection, vol.48, 2025 (SCI-Expanded) identifier

  • Publication Type: Article / Article
  • Volume: 48
  • Publication Date: 2025
  • Doi Number: 10.1016/j.ijcip.2025.100740
  • Journal Name: International Journal of Critical Infrastructure Protection
  • Journal Indexes: Science Citation Index Expanded (SCI-EXPANDED), Scopus, PASCAL, Applied Science & Technology Source, Compendex, Computer & Applied Sciences, INSPEC
  • Keywords: Adversarial machine learning, Adversarial training, Optimized adversarial sample, Water Distribution System (WADI), Water Treatment System (SWaT)
  • Karadeniz Technical University Affiliated: Yes

Abstract

This research presents the optimized adversarial machine learning framework, OptAML, which is developed for use in water distribution and treatment systems. In consideration of the physical invariants of these systems, the OptAML generates adversarial samples capable of deceiving a hybrid convolutional neural network-long short-term memory network model. The efficacy of the framework is assessed using the Secure Water Treatment (SWaT) and Water Distribution (WADI) datasets. The findings demonstrate that OptAML is capable of effectively evading rule checkers and significantly reducing the accuracy of anomaly detection frameworks in both systems. Additionally, the study investigates a defense mechanism that demonstrates enhanced robustness against these adversarial attacks and is based on adversarial training. Our results underscore the necessity for robust and flexible protection tactics and highlight the shortcomings of the machine learning-based anomaly detection systems for critical infrastructure that are currently in place.