6 min read
When Valid OT Commands Become Attacks
OT ExploitsIndustrial ProtocolsPCAP Analysis
01 / A personal introduction
About.
I’m Ruqaya, a cybersecurity engineer exploring the space where digital security meets the physical world.
My focus is operational technology and industrial cybersecurity. I’m interested in how industrial environments can be better understood, monitored, tested, and secured. From vulnerabilities and attack techniques to network visibility threat detection, security controls, and resilience.
A lot of my work involves hands-on OT security research: simulating threats in controlled environments, analyzing industrial network traffic and security events, testing detection logic, validating security controls, and exploring practical ways to reduce cyber risk in industrial systems.
This is my little corner of the internet: a place to share what I’m working on, explore ideas across OT and ICS security, and document what I’m learning along the way.
“I like understanding how OT security works in practice, how threats behave, how we detect them, and how we can build stronger defenses around industrial environments.”
From research to resilience
My work connects OT security research with practical defensive validation. I study vulnerabilities, simulate threats in controlled environments, test detection approaches, and evaluate how security controls perform against realistic scenarios. I’m interested in understanding both where industrial systems are exposed and what makes their defenses effective.
Across PLCs, industrial protocols, digital twins, and cyber ranges, I explore how those findings can inform stronger protections and more resilient operations. The aim is to reduce cyber risk while respecting the safety, reliability, and availability that industrial environments depend on.