Valor team

Cyber Security and the 4th Annual Water Data Summit: 5 Takeaways on Open Water Data

By: Victor Miao, Software Engineer

Water’s greatest minds coalesced from all over the world at the 4th Annual Water Data Summit on August 22 and 23, at the University of California, Davis. Hosted by the California Data Collaborative, water experts from all sectors gathered to discuss and collaborate on water data. With one of the main themes being California’s AB 1755 (the Open and Transparent Water Data Act), speakers addressed the current state of water data and its challenges. Here are some of the main takeaways.

Summit panelists discuss economic impacts of irrigation reduction

Summit panelists discuss economic impacts of irrigation reduction

Open Data

California Governor Gavin Newsom’s Citizenville describes one example outcome of open data: the efforts of a single programmer mapping public police data directly led to reform and behavioral changes. Similarly, one speaker cited public road data as the initial spark for Google Map. Hoping to invoke similar ingenuity, many water experts believe that open water data will empower people to make better-informed decisions regarding sustainable water management.

Jesper Elkjær Christensen, Senior Advisor of the Water Technology Alliance of the Consulate General of Denmark, presented an enlightening case study on the benefits of open water data in Denmark. Public, private, and academic organizations have long collaborated on public groundwater data, mapping groundwater since 1999 and creating other tools to help guide important water decisions. Jesper’s conclusion from Denmark’s success: “make water data useful, public, standardized, and collaborative”.

Denmark’s publicly available and interactive groundwater maps

Denmark’s publicly available and interactive groundwater maps

Establish Trust (in the Internet of Water)

The Internet of Water (IoW) is a project started at Duke University, designed to enable open water data to help guide sustainable water management. One example goal depicted the ability to look up local water quality on Google. According to IoW’s co-founder and panelist Martin Doyle, most of the breakthrough water technology already exists in AMI and improved water sensors. However, the issue remains in spreading these technologies as the industry standard. Many organizations still maintain legacy infrastructure and data.

On the same IoW panel and from a different perspective, Deven Upadhyay represented the Metropolitan Water District of Southern California. He discussed his vision of publicly accessible and trusted water data for every locale. However, he cited trust and cyber security as the most important challenges for an open data platform. Cyber security, as another main summit topic, is covered in more detail in the section below.

No Utility Left Behind

One recurring issue of the conference addressed small water utilities that would not be able to comply with proposed open water data policies, much less be well-equipped to protect their data against cyber attacks. Hoping to address such issues, the Aspen Institute Dialogue Series convened in 2017, acting as a neutral space. The Dialogue gathered a diverse group including public and private sectors, water experts, and academics to discuss national policy, water data, and sustainable water management. Accordingly, IoW aims only for voluntary participants in producing open data, instead of focusing on influencing public policy on open data.

Water Data Needs Work

“Water and data have not been married for long,'' stated one presenter. It is a fledgling field that necessitates adopting present and newly available technology to be robust, secure, and useful. Surprisingly, 2019 is the first year that all California water utilities were able to provide aggregate monthly water usage, and only as a direct result of an emergency measure due California’s 2011-2017 drought. 

Joaquin Esquivel, Chair of the California State Water Board, presented similar findings on the state-level. Citing both his current position and his previous position as Director of Information and Technology under California Senator Barbara Boxer, he acknowledged that while California is progressive, its data infrastructure still needs much work.

Open Data Works

As open data helped empower everyday people to innovate, open source tools and software aim to do similar good. The California Data Collaborative hosts a plethora of open source tools and software on their GitHub, such as an evapotranspiration estimator, real-time snow water estimator, and real-time reservoir visualization.

Similarly, many other organizations presented open source projects or research on open data:

  • Sacramento State’s open source tool for mapping groundwater quality, designed to help water managers identify disadvantaged communities with contaminated groundwater

  • One Stanford University PhD candidate’s research on Google search trends appears to show a correlation between media coverage of the 2011-2017 California drought and state-wide voluntary water usage reduction. Mandatory water restrictions seemed to correlate less with water conservation.

  • University of California, Irvine presented a disturbing recent trend of increasingly unsafe water in rural and low-income areas, especially in Oklahoma and Texas. In 2015, 9% of water systems in 2015 violating the Safe Water Act and affecting 21 million people.

  • FlowWest showcased their open source software such as a salmon life cycle model, supporting the efforts of the Central Valley Project Improvement Act to protect fish and wildlife.

Cyber Security

Online privacy and security have become increasingly important topics in more recent years, and for good reason. Data breaches and ransomware seem to occur far too often. However, the rising public awareness should hold agencies more accountable for our private and sensitive data. Indeed, cyber security cemented itself as a keystone topic at the 4th Annual Water Data Summit as well. This year, speakers at the summit helped us better understand the full stack of data security.

Your data is in good hands…

Despite, or perhaps because of, the recent prevalence and awareness of data breaches, many organizations have been actively preparing for and defending against the worst. Listed here are a few cyber security best-practices brought up during the summit.

Cyber Security panel. Pictured (L-R): William Johnson, David Wegman, Rocky Smith

Cyber Security panel. Pictured (L-R): William Johnson, David Wegman, Rocky Smith


William Johnson, Information System Division Manager at East Bay Municipal Utility District (EBMUD), outlined their best practices as a business-to-consumer entity that uses consumer data:

  • Defend against infiltration: EBMUD regularly performs penetration assessments both internally as well as through third party auditors, in order to find and fortify any weak points.

  • Defend against exfiltration: employees must abide by clear protocols (e.g. no sending cleartext via email, correctly storing and transferring data, etc.) and participate in random phishing tests that automatically enroll them into anti-phishing programs if they fail.

  • Cloud security: EBMUD employs a cloud-first approach, knowing that Amazon and other cloud providers often employ the best specialist teams in cyber security that other organizations generally cannot match with on-site solutions.

David Wegman, our very own CTO at Valor Water Analytics (a Xylem brand), presented Valor’s guidelines as a business-to-business agency that receives data from other businesses:

  • Minimize data: sometimes, clients send Valor extraneous data and personally identifiable information that we do not want nor ask for. Valor does not store this data, so that there is no possibility of such sensitive information leaking.

  • Grant as little access as necessary: users are only given access to what they need, and in the form of temporary access tokens that expire shortly afterwards. This reduces the damage of a potential breach by forcibly limiting its duration.

  • Layering approach: in addition to minimizing data, blocking unwanted visitors with a firewall, and granting only temporary access, Valor encrypts sensitive data so that it cannot be traced back to its origins. This layered security addresses the worst case scenario, lessening the impact of any stage of a potential breach.

  • Cloud security: Valor shares EBMUD’s sentiments on the cloud, understanding that an on-site solution would likely be less secure and more difficult to maintain.

Rocky Smith, Business Solutions Architect at Cisco, and Internet of Things (IoT) expert, stated, “You have not been attacked yet, are being attacked, or in the aftermath of an attack”. With this mindset, Cisco prepares for every scenario, designing the best possible outcome.

  • Establish perimeters everywhere: extend firewalls and permissions barriers frequently - even between internal tools, to mitigate potential breaches.

  • Minimize data: even if IoT or other connected devices are compromised, they should not have any sensitive data to leak, only anonymous or useless strings of numbers.

  • Properly back up data: ransomware only has leverage against an organization when, by definition, they hold hostage something valuable. With proper backups, an agency protects itself by being able to recover their valuable data without the need to comply with a malicious entity’s demands.

...as long as it is prioritized

Given these industry-standard practices, one might ask “why are there breaches at all?”. Frankly, organizations need to understand and prioritize security in the first place to even have these measures in place. Instead, some organizations may be far too small, too large and slow-moving, or simply unaware of security threats. Fortunately for everyone, we do have some brilliant individuals and unbiased organizations hoping to tackle some of these issues.

Related Links

California Data Collaborative

http://californiadatacollaborative.org/

https://github.com/California-Data-Collaborative

Internet of Water

https://internetofwater.org/

Aspen Dialogue on Sustainable Water Infrastructure

https://www.aspeninstitute.org/programs/energy-and-environment-program-3/water/

Denmark’s Groundwater Maps and Data

https://eng.geus.dk/products-services-facilities/data-and-maps/groundwater-maps-and-data/ 

Sacramento State - California Groundwater Contamination Risk Index

https://www.owp.csus.edu/grid/

FlowWest

http://www.flowwest.com/

https://github.com/FlowWest


Getting to Know Our Summer Interns: Introducing Celine

This is part 2 of our intern introduction blog posts. Part 3 will be posted in August. You can read part 1 here.

By: Celine Clausen

IMG_2040.jpg

I am a 23 year old woman from Norway and graduated with a bachelor's degree from the Norwegian School of Economics. As a part of my masters, I am attending a 10-week long program called Innovation School, during which I am studying at UC Berkeley and interning with Valor Water Analytics - A Xylem Company. 

Why I wanted to work at Xylem

It was mainly the combination of sustainability and technology that sparked my interest in working at Xylem. By contributing to solve challenges related to water, Valor also contributes with their software solutions to the resolution of water scarcity issues. I also liked how Valor is addressing one specific area, with the focus is to be the best in this area, rather than delivering several halfway solutions in several different areas. Also, I wanted to work for a company that will be relevant in the future, and I believe that Valor’s technological solutions are going to provide many water utilities with valuable analytics in the years to come. 

How I like working at Valor

It is very interesting to learn about an industry that is completely new to me. It is a fun challenge to understand how Valor's solutions work and the great value they bring to water utilities. I am also overwhelmed by the friendly people working here and the good vibe in the office. Valor has a very flat structure where all thoughts and opinions are heard, and even as an intern I feel appreciated which is very motivating when working. 

My future plans

I want to keep working with global challenges and combine my business degree with my interest in preserving the environment. Therefore, I will lead my master degree in a more sustainable direction, by studying energy, natural resources and the environment with an underlying business focus. 

As I enjoy learning and new challenges I can see myself working a few years in consulting before entering a more specific industry. My time with Valor has been a great learning experience, as I have learned how to quickly understand and adapt to a new industry and business area.

Life in San Francisco

I am a very active surfer so I am trying to surf as much as possible in areas close to San Francisco. Surfing has also been a great way to experience the culture, see the surrounding nature and meet new people. I also spend a lot of time checking out the different parts of the city and eat good food. San Francisco is a very cultural city, and I really enjoy all the art and music there is!

My best San Francisco experience

My best experience in San Francisco was celebrating Pride in Dolores Park with good friends. It was such a happy and colorful experience. I believe no other place does celebrating Pride better than San Francisco.


Getting to Know Our Summer Interns: Introducing Amanda

This is part 1 of our intern introduction blog posts. Part 2 and 3 will be posted later this month and in August.

By: Amanda Jennings

IMG_2039.jpg

I just finished my bachelor's degree in Economics and Business Administration at the Norwegian School of Economics, and have travelled to San Francisco to be an intern at Valor Water Analytics this summer! 

Why did I choose Valor Water Analytics?

As a recently graduated Bachelor student, I am currently in a place where I need to start making decisions about what I want to peruse as a master's degree, and beyond this what I want to work with in the future. Up until this point, my studies have been heavily focused on the theoretical. Being an intern in the tech-capital of the world, where innovation, culture and creativity intertwine, is a rare opportunity to witness the day-to-day inner workings of an organization with a purpose. 

One of the master degrees I am considering is Energy, Natural Resources and the Environment. This is why Valor caught my attention. I am not an engineer, as many of my co-workers are, but I am interested in their vision. Valor brings tech to water, in order to make utilities more efficient and to conserve one of the most valuable resources on earth.

What is your background?

My mother is Norwegian, my father is English and I lived in Latvia up until the age of 12. After this, I moved to Norway. Before starting university, I attended an international school. Because of this background, I have always been interested in the outside world, meeting new people and learning about new places. 

What do you do in your spare time?

In my spare time I love to read. Sitting outside in the sun with a good book is difficult to beat. But as I study in Bergen, also known as the rainiest city on Earth, this isn't always so easy. It should therefore come as no surprise that I also enjoy travelling, ideally to places where it rains less 240 days a year. I love being active, playing sports and being with friends. 

What do you like about your work at Valor Water Analytics?

Valor's company culture is what sets it apart from other jobs I have had in the past. I have been here about a week now, and I have only been met with positivity. From "Bagel Breakfast Monday's" to "Hump-day Lunch Wednesday's", Valor manages to bring joy into the workplace. I have been invited out for coffee, to a baseball game, to a summer picnic, and more. It's an inclusive environment, where people actually want to get to know the interns. 

I have travelled quite a distance to be here, and I am very excited to start my summer in a new city, filled with new life and new experiences!