RISK: Auditing Industrial Control Systems for Too-Late-to-Recover Vulnerabilities
RISK is an automated framework designed to find 'too-late-to-recover' (TLTR) vulnerabilities in industrial control systems. It models PLC logic, detection policies, and recovery procedures to generate specific attack scenarios that drain the system's safety margin before detection occurs. The framework confirms 392 TLTR attacks across multiple testbeds, showing existing tools miss these critical risks.