All caught attacksATTACK WALKTHROUGH / EVIDENCE TRACE
Attack #28Single Stage, Single PointWater Treatment570m 13s attack · first catch 13m 10s
P302 — UF feed pump
Attacker's intended impact: Stop inflow of tank T-401
Physical Residual29m 25sTemporal Sequence37m 20sProcess Invariants13m 10sFused Ensemble23m 24s
Where it hit the plant
P1
raw water intake
P2
chemical dosing
P3
ultrafiltration
P302
P4
dechlorination / UV
P5
reverse osmosis
P6
permeate transfer & backwash
Attack window & detections
2015-12-31 01:45:19 → 2015-12-31 11:15:27 (plant local time)
Physical Residual
29m 25s
Temporal Sequence
37m 20s
Process Invariants
13m 10s
Fused Ensemble
23m 24s
Shaded band = labeled attack window from the iTrust ground-truth catalog. Dots = first second each engine flagged the window — click a dot for the evidence.