CRITICAL INFRASTRUCTURE

Retrofit Integrity for
Legacy SCADA

Protect 30-year-old PLCs from modern replay attacks. Drift Systems acts as a zero-trust gateway, enforcing strict "Time-of-Action" windows and monotonic ordering without requiring a cloud connection.


LAUNCH HMI DEMO

1. The "Stale Command" Defense

Attackers often capture valid commands (e.g., "OPEN VALVE") and replay them later to cause damage. This simulator shows how Drift's Sliding State Window rejects these packets automatically.

STATION: PUMP_04 STATUS: ONLINE
CLSD
LAST SEQ: 1042
WINDOW: ±500ms
MITM ATTACK:
> TRAFFIC MONITOR (DRIFT GATEWAY)

Instruction: Use "TOGGLE VALVE" to send valid commands. The Gateway accepts them because the state matches. Then, try "REPLAY LAST CMD". The Gateway rejects it because the Sequence/State has already moved forward (Replay) or the time window has closed (Stale).

2. Retrofit Capabilities

Zero-Touch Retrofit

Drift Gateways sit transparently between the HMI (Operator) and the PLC (Machine). No code changes are required on the legacy endpoint. We wrap standard Modbus/DNP3 packets in a Drift Integrity Envelope.

Stale Action Rejection

In safety-critical systems, a command that arrives 2 seconds late can be dangerous. Drift enforces strict Timing Budgets based on state evolution speed, dropping commands that violate the safety window.

Degraded Mode Policy

If the network is partitioned, Drift enables "Quorum-Based" degrade policies. For example, a substation can switch to local-only control if it cannot verify the freshness of the central command stream.

Audit Trail

Every state transition is cryptographically linked to the previous one. This creates an immutable, gap-free log of every control action, mathematically proving who authorized the valve open and exactly when.