Why this environment matters
Security for dam spillway control workstations starts with the system's role: it supports authorised operation of gates and outlets that regulate reservoir levels and downstream flows. A key concern is that unauthorised commands, altered forecasts or compromised maintenance tools could create flooding or threaten dam safety. NØNOS offers a potential architecture based on signed capsules, explicit capabilities and strong isolation.
The security challenge
The threat model should assume that one component will eventually fail or be exploited. In this case, unauthorised commands, altered forecasts or compromised maintenance tools could create flooding or threaten dam safety. Water and environmental systems mix remote field devices, long asset lifecycles and processes whose failure can affect public health, property and ecosystems. The aim is to prevent that single failure from automatically gaining the keys, devices, records and network paths of the whole platform.
How the capsule model could help
A candidate NØNOS architecture would separate hydrology data, operator decision support, gate-control authority and engineering access with strong attestation. The design would prioritise authenticated sensor paths and recoverable operator environments, supported by isolated OT applications and signed engineering tools. Each capsule would carry a declared policy for files, networks, devices and secrets, and unknown or altered software would not receive the same authority as an approved component.
Deployment requirements
Implementation must preserve local manual control, safe fallback states, independent process protection and the utility's tested emergency procedures. The operating system is one control layer, not a substitute for process safety.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Dam-owning water authorities fund spillway supervisory controls and workstation renewal.
- Hydropower asset owners procure control-system engineering through plant projects.
- Dam automation integrators deliver approved systems; gate operators execute operating procedures.
Industry examples: WaterNSW, U.S. Bureau of Reclamation. These are research prospects, not represented as NONOS customers, partners or endorsers.