Why this environment matters
Modern desalination reverse-osmosis controllers depend on complex software, external data and remote administration. Here, the system manages intake, pretreatment, high-pressure pumps, membranes and product-water quality. If trust is misplaced, malicious pressure or chemical settings can damage expensive membranes, increase energy use or produce off-specification water. NØNOS could narrow the trusted computing base and give each function only the resources required for its defined job.
The security challenge
The practical concern is that malicious pressure or chemical settings can damage expensive membranes, increase energy use or produce off-specification water. Water and environmental systems mix remote field devices, long asset lifecycles and processes whose failure can affect public health, property and ecosystems. The attack surface may include remote support, software updates, removable media, third-party libraries, public input or misused operator credentials. The security design therefore needs containment as well as prevention.
How the capsule model could help
The proposed deployment pattern is to isolate process stages, restrict high-pressure actuator access and require signed recipes and maintenance components. NØNOS would use recoverable operator environments and isolated OT applications as the trust foundation, then apply signed engineering tools and restricted actuator capabilities around higher-risk functions. Logs or proofs could record which approved capsule performed a privileged action without retaining unnecessary user data.
Deployment requirements
Implementation must preserve local manual control, safe fallback states, independent process protection and the utility's tested emergency procedures. The operating system is one control layer, not a substitute for process safety.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Desalination plant owners buy controls through construction and refurbishment contracts.
- Reverse-osmosis technology suppliers embed control software in process packages.
- Plant operators and automation contractors specify integration; shift crews run the process.
Industry examples: IDE Technologies, ACWA Power. These are research prospects, not represented as NONOS customers, partners or endorsers.