VARDARCYBER-PHYSICAL SECURITY
InsightsGalleryProduct
Evaluate one critical processEvaluate
All caught attacks
ATTACK WALKTHROUGH / EVIDENCE TRACE
Attack #20Single Stage, Single PointWater Treatment6m 39s attack · first catch instant

AIT504 — RO permeate conductivity analyzer

Attacker's intended impact: RO shut down sequence starts after 30 minutes. Water should go to drain.

Physical ResidualinstantTemporal SequenceinstantProcess InvariantsFused Ensembleinstant

Where it hit the plant

P1

raw water intake

P2

chemical dosing

P3

ultrafiltration

P4

dechlorination / UV

P5

reverse osmosis

AIT504
P6

permeate transfer & backwash

Attack window & detections

2015-12-29 18:15:43 → 2015-12-29 18:22:17 (plant local time)
Physical Residual
instant
Temporal Sequence
instant
Process Invariants
no flag
—
Fused Ensemble
instant

Shaded band = labeled attack window from the iTrust ground-truth catalog. Dots = first second each engine flagged the window — click a dot for the evidence.

SWaT and WaDi datasets courtesy of iTrust, Centre for Research in Cyber Security, Singapore University of Technology and Design. Detection figures trace to reproducible model runs shown with each dataset.

InsightsTechnical evaluationvardar.ai