Critical Infrastructure Protection

Volume 253 of the series IFIP International Federation for Information Processing pp 73-82

Lessons Learned from the Maroochy Water Breach

  • Jill SlayAffiliated withDefence and Systems Institute, University of South Australia
  • , Michael MillerAffiliated withBAE Systems

Supervisory control and data acquisition (SCADA) systems are widely used to monitor and control operations in electrical power distribution facilities, oil and gas pipelines, water distribution systems and sewage treatment plants. Technological advances over the past decade have seen these traditionally closed systems become open and Internet-connected, which puts the service infrastructures at risk. This paper examines the response to the 2000 SCADA security incident at Maroochy Water Services in Queensland, Australia. The lessons learned from this incident are useful for establishing academic and industry-based research agendas in SCADA security as well as for safeguarding critical infrastructure components.

Keywords: SCADA security, Maroochy Water Services breach