ECLSS Sensor Spoofing: Life-Support Intrusion Detector

This simulator models a real cyber-physical attack on a spacecraft's Environmental Control and Life Support System: an attacker injects false telemetry into one of three redundant oxygen sensors feeding the cabin's PI control loop. With the naive mean-of-three estimator, the spoofed reading quietly drags the controller's belief away from reality and the true cabin oxygen partial pressure drifts toward hypoxia while the dashboard looks calm. Switching on the median-voting defense — the same robust-statistics technique used in triple-modular-redundancy spacecraft avionics — neutralizes the outlier's effect on control and flags the compromised sensor once its deviation crosses a tunable detection threshold, all rendered live in 3D as data pulses flowing from each sensor to the controller hub.