One Small Change Can Affect an Entire City
The Eastwater Facility inside Labshock demonstrates why industrial cybersecurity begins with understanding physical processes, not network traffic.
Labshock now includes a simulated water treatment environment called Eastwater Facility.
The purpose is simple.
To show what industrial systems are actually protecting.
When people look at OT environments, they often focus on:
- PLCs
- Industrial protocols
- IP addresses
- Network traffic
- Security controls
These technologies are important.
But none of them exist for their own purpose.
They exist to control a physical process.
The Physical System Comes First
Water treatment is a good example.
A modern facility consists of multiple connected stages.
Raw water enters the plant.
It passes through:
1. Filtration 2. Chemical dosing 3. Aeration 4. Sedimentation 5. Carbon filtration 6. Reverse osmosis 7. Storage and distribution
Every stage depends on the stage before it.
Every sensor influences decisions.
Every valve affects flow.
Every pump changes process behavior.
Every control action has physical consequences.
Small Change. Large Impact.
Industrial incidents rarely begin with a city-wide failure.
They begin with a small change.
A sensor reports an incorrect value.
A valve remains open.
A pump stops unexpectedly.
A dosing system injects too much chemical.
A controller receives an incorrect command.
What appears to be a small modification inside a process can propagate throughout an entire facility.
Not because the network failed.
Because the physical system changed.
This is the reality of industrial operations.
The objective is not protecting packets.
The objective is protecting water production.
Why Eastwater Exists
Eastwater Facility was created to make process behavior visible.
The environment includes:
- Field devices
- Sensors
- Valves
- Pumps
- PLC control logic
- HMI visualization
- Industrial communications
Users can follow the entire operational chain:
Sensor → PLC → Process → Physical Change
Every action can be traced from the field level to process impact.
This makes it possible to understand not only how industrial systems communicate, but why they communicate.
Process Context Matters
Many security tools focus on network activity.
But network activity without process context provides only a partial view.
A packet may be valid.
A protocol message may be legitimate.
A command may be correctly formatted.
Yet the resulting process change may still be dangerous.
Understanding the process is what transforms industrial telemetry into operational knowledge.
Without process context, network traffic becomes noise.
The Goal
Industrial cybersecurity begins with understanding what is being controlled.
Before protocols.
Before detections.
Before dashboards.
There is a physical process.
Eastwater Facility was built to make that process observable.
Because OT security starts with understanding the process.