本文描述了一个系统，该系统利用了强大的现成传感器技术，将它们放在一个 数组，并以一种新的、强大的方式使用智能算法来提取感兴趣的数据 设计水安全预警系统。该系统已被证明是有效的，而不是 在实验室环境中有各种各样的威胁因素。使用一个独特的系统来估计 真实世界的系统允许识别水分析中与正常读数的微小偏差 参数。 这反过来导致系统能够触发这些偏差。 一旦系统被触发，这些算法已被证明能够利用独特的 由威胁代理的偏差表示的配置文件，用于识别该威胁代理。迄今为止，超过80种试剂的实验室程序没有显示出明显的重叠。随着数据库的增长，可能会出现一些问题 未来可能会发生重叠，但日常的电厂事件可能不会侵入所占用的向量空间 受关注的代理人。 该系统还具有每天学习的能力- 特定系统特有的日常偏差。事件 通常发生的错误将被迅速识别，触发模式的误报率将迅速降低 减少系统识别威胁代理的能力不受学习的影响，如果系统 受到库中威胁代理的威胁，系统应从一开始就发出警报并识别该威胁 部署日期。总的来说，该系统是识别系统入侵的宝贵安全工具，但 它有能力变得比这多得多。迄今为止，大多数库工作都是在威胁代理上完成的，但随着时间的推移，库 将进行扩展，以纳入可能出现的常见分配系统问题。此外，作为一个人 设备库识别偏差，操作员能够识别偏差，系统将成为 用于评估日常系统运行状况和操作参数的有用工具。包括28个参考文献、表格和图表。

This paper describes a system that has made use of robust off-the-shelf sensor technologies by placing them together in an array and using intelligent algorithms in a new and powerful manner to extract data that is of interest in devising an early warning system for water security. The system has been shown to be effective versus a wide variety of threat agents in a laboratory setting. The use of a unique system for estimating the baseline in real world systems allows for the identification of small deviations from normal readings in water analysis parameters. This in turn leads to a system capable of triggering on these deviations. Once the system has been triggered, the algorithms have been shown to be capable of utilizing the unique profile represented by a threat agent's deviations to identify that threat agent. Laboratory procedures on over 80 agents to date have shown no significant overlap of profiles. As the database grows, there may be some overlap in the future, but it is likely that day-to-day plant events will not intrude on the vector space occupied by agents of concern. The system also has the capability to learn day-to-day deviations that are unique to a given system. Events that occur commonly will be rapidly learned, and the rate of false positives to the trigger mode will rapidly decrease. The systems ability to identify threat agents is not affected by learning and if a system is compromised by a threat agent in the library the system should alarm and identify that threat from the first day of deployment. Over all, the system is an invaluable security tool for recognizing system incursions, but it has the ability to become much more than that. To date, most of the library work has been done on threat agents, but as time allows, the libraries will be expanded to incorporate common distribution system problems that may arise. Also, as an individual plant library recognizes deviations and the operators are able to identify them, the system will become a useful tool in evaluating the day-to-day system health and operational parameters. Includes 28 references, table, figures.