Home▸Cybersecurity▸SCADA Replay Attack: Sequence & Timestamp Validation

SCADA Replay Attack: Sequence & Timestamp Validation

Record a window of legitimate SCADA network traffic, then launch a replay attack that masks a malicious breaker command inside recycled, normal-looking status messages — compare a naive receiver against one that validates sequence numbers and timestamps.

Cybersecurity3DModerate60 FPS💧 Water

Details

CategoryCybersecurity

RenderingThree.js · WebGL

DifficultyModerate

Target FPS60

ControlsRecord Legitimate Traffic button captures a window of live SCADA status messages; Launch Replay Attack button replays the recorded messages at the operator dashboard while injecting one forged breaker-open command; Seq/Timestamp Check toggle switches the receiver between naive (accepts everything) and validated (rejects stale/duplicate sequence numbers); Reset clears all state; drag to orbit the 3D camera.

SCADAreplay attacksequence number validationtimestamp validationICS securityOT securitycybersecurity

Related simulations

ICS Attack: Falsified Sensors vs Real EquipmentA Stuxnet-style ICS attack simulator: watch a real centrifuge rotor get pushed past its safe…

Purdue Model Network Segmentation Simulator3D visualization of the Purdue Enterprise Reference Architecture for ICS/OT security:…

DNS Cache Poisoning vs DNSSEC: Race the Spoofed ResponseA 3D DNS resolution chain (client, recursive resolver, authoritative server) plays out a… ⊞ All 217 in Cybersecurity →

A substation controller and its operator dashboard exchange status and command messages over a network link. Record a window of that genuine traffic, then launch a replay attack that floods the dashboard with the recorded "everything normal" messages while quietly sending a forged breaker-open command. Toggle sequence/timestamp validation to see whether the receiver can tell a fresh message from a recycled one — and whether the attack gets masked or exposed.

⚙ Under the hood

Record a window of legitimate SCADA breaker traffic, then launch a replay attack that floods the operator dashboard with recycled 'normal' status messages while sneaking in a forged breaker-open command — compare a naive receiver that gets fooled against one that validates sequence numbers and timestamps, with a live accepted-vs-rejected message tally and a final attack-succeeded/blocked outcome.

SCADAreplay attacksequence number validationtimestamp validationICS securityOT securitycybersecurity

3D · Three.js / WebGL renderer · 60 FPS target · runs fully client-side, no install