PUBLIC ICS EVIDENCE / REPRODUCIBLE RUNS

Real attacks on real testbeds.See what was caught—and why.

Replay labeled attacks from public ICS datasets across the Vardar detection stack. Inspect the plant stage, detection timeline, and per-sensor evidence behind each result.

01 / DATASET

SWaT 2015

iTrust Secure Water Treatment testbed (SUTD) — 6-stage plant, 36 labeled attacks over 4 attack days.

Water Treatment · 5 caught attacks

85.5%

Detection recall

99.1%

Precision

0.55%

False-positive rate

11s

Median time-to-detect

32/36 attacks

Stack coverage

Attack #28Single Stage, Single Point

Water Treatment

P302 — UF feed pump

Intended impact: Stop inflow of tank T-401

2015-12-31 01:45:19570m 13sfirst catch: 13m 10s

Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble

Walk through the attack

Attack #22Multi Stage, Multi Point

Water Treatment

UV401 + AIT502 + P501 — multi-point manipulation

Intended impact: Possible damage to RO

2015-12-29 22:55:187m 47sfirst catch: instant

Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble

Walk through the attack

Attack #37Single Stage, Multi Point

Water Treatment

P501 + FIT502 — multi-point manipulation

Intended impact: Reduced output

2015-01-02 11:17:027m 53sfirst catch: 44s

Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble

Walk through the attack

Attack #6Single Stage, Single Point

Water Treatment

AIT202 — pH analyzer (HCl dosing control)

Intended impact: P-203 turns off; Change in water quality

2015-12-28 12:00:553m 20sfirst catch: instant

Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble

Walk through the attack

Attack #20Single Stage, Single Point

Water Treatment

AIT504 — RO permeate conductivity analyzer

Intended impact: RO shut down sequence starts after 30 minutes. Water should go to drain.

2015-12-29 18:15:436m 39sfirst catch: instant

Physical ResidualTemporal SequenceProcess InvariantsFused Ensemble

Walk through the attack

Provenance: official validation run 2026-06-11T22:34:18Z · model image sha-97752838a3f3 · artifact sha256 80c98149b000…. Recall is point-adjusted on labeled attacks; false-positive rate is measured on held-out clean data.

02 / DATASET

WaDi 2017

iTrust Water Distribution testbed (SUTD) — 3-stage distribution network, 16 labeled attacks.

Water Distribution · 3 caught attacks

100.0%

Detection recall

90.7%

Precision

2.07%

False-positive rate

57s

Median time-to-detect

15/16 attacks

Stack coverage

Attack #10Single Stage, Multi Point

Water Distribution

1P005ON + 1P006OFF — multi-point manipulation

2017-10-11 10:55:001m 32sfirst catch: 7s

Physical Residual

Walk through the attack

Attack #2Single Stage, Single Point

Water Distribution

1FIT001 — primary-grid inlet flow meter (chemical-dosing line)

Intended impact: No increase in level in primary grid

2017-10-10 10:24:109m 55sfirst catch: 2m 59s

Physical Residual

Walk through the attack

Attack #16Single Stage, Single Point

Water Distribution

2LIT002 — elevated-reservoir tank level transmitter

Intended impact: Stealthy attack

2017-07-11 15:26:3010m 35sfirst catch: 4m 43s

Physical Residual

Walk through the attack

Provenance: official validation run 2026-06-13T22:27:18Z · model image sha-de79dac53981 · artifact sha256 a05be50d6a12…. Recall is point-adjusted on labeled attacks; false-positive rate is measured on held-out clean data.