Solinas Integrity: Securing the Invisible Infrastructure

Solinas Integrity is a specialized cybersecurity framework designed to protect the often-overlooked systems that manage our water, energy, and environmental resources. Unlike traditional IT security, which guards data and networks, Solinas Integrity focuses on the physical process control layer—the sensors, pumps, valves, and automated logic that keep critical infrastructure running safely.

What Is Solinas Integrity?

The term refers to a methodology for ensuring that industrial control systems (ICS) and operational technology (OT) behave exactly as intended. It is not a single product but a set of principles and tools used to detect subtle manipulations that could cause physical damage or environmental harm. The name evokes the idea of "saline" or water-based systems, highlighting its origin in securing water treatment and distribution, though the approach now applies to any continuous process industry.

How It Works

Traditional cybersecurity looks for malware signatures or unusual network traffic. Solinas Integrity adds a deeper layer by monitoring the physical "state" of a system. It works by:

• Building a physics-based model: Engineers create a digital twin that simulates how a real plant should behave under normal conditions, using equations for flow, pressure, chemical concentration, and tank levels.
• Comparing intent to reality: The system continuously checks the commands sent to a pump or valve against the expected physical outcome. If a command to open a valve does not result in the correct flow change, an anomaly is flagged.
• Analyzing process invariants: It identifies unbreakable rules of the process, such as "a tank cannot be both full and empty" or "pH cannot shift instantly without a chemical injection." Violations of these invariants signal a fault or an attack, even if the network traffic looks legitimate.

Why It Matters

Modern attacks on infrastructure, such as those targeting water utilities, do not always steal data. They alter the behavior of physical equipment to contaminate supplies, cause floods, or destroy machinery. Standard firewalls and antivirus software are blind to a malicious command that uses the correct password and protocol but orders a dangerous chemical mix. Solinas Integrity provides a last line of defense that is independent of the compromised digital layer, focusing purely on the laws of physics and chemistry.

Common Use Cases

• Water treatment plants: Detecting when a hacker tries to spike chlorine levels or bypass filtration stages.
• Power grids: Identifying abnormal frequency oscillations that suggest a coordinated attack on generators.
• Oil and gas pipelines: Spotting pressure anomalies that indicate a stealthy valve closure designed to cause a rupture.

Benefits and Limitations

The primary benefit is resilience against zero-day exploits and insider threats that bypass IT security. It offers a vendor-agnostic safety net. However, the approach has limitations. Building an accurate physics-based model requires deep domain expertise and can be complex for legacy plants without digital blueprints. It also generates false positives if the model does not account for all normal operational modes, such as maintenance cycles.

Frequently Asked Questions

Is this a replacement for IT security? No. It is a complementary layer. IT security stops the initial intrusion, while Solinas Integrity catches the attack if the perimeter is breached.

Does it work in real time? Yes. The continuous comparison of sensor data against the model allows for immediate alerts, often within seconds of a process deviation.

Related Concepts

• Operational Technology (OT) Security: The broader practice of securing hardware and software that controls physical devices.
• Digital Twin: A virtual replica used for simulation, which is the foundational technology enabling physics-based anomaly detection.
• Process Invariant: An unchangeable physical rule used as a tripwire for detecting unsafe states.