## 4 Results  
The implementation of a secure SCADA architecture has yielded significant measurable security improvements across key metrics over the 6 months following deployment. Unauthorized access events, as measured by the count of unauthorized access attempts per month, decreased by 57.4% from a monthly average of 3574 events down to 1523 events after introducing NFC badge authentication. This greatly reduced potential security breaches through strengthened access controls. The mean time to threat containment, calculated as the average elapsed time from threat detection to successful containment, saw a 41.2% reduction from 3.08 h down to 1.81 h due to newly implemented automated response capabilities. This enabled much faster reactions to and mitigation of identified threats. Hacking attempts against the fog-level MES dashboard, tracked via the count of hacking attempts in SIEM logs per week, declined sharply by 79.2% from a weekly average of 842 attempts down to 176 attempts following the hardening of the web interface through defenses like HTTPS and access tokens. The quantified enhancements across key security metrics like unauthorized access, threat containment time, and hacking attempts validate the efficacy of the secure SCADA implementation in improving the system's overall resilience against threats. Key gains were realized in reducing attack surfaces, enabling rapid automated threat response, and limiting potential breach impacts and blast radii. Encrypting SCADA links completely prevented the tampering of sensor measurements, while VLAN micro-segmentation limited the potential blast radius damage. Together, these measures significantly strengthened the system's resilience against threats by reducing vulnerabilities. The measurable security advancements validate the effectiveness of the secure SCADA implementation in improving the system's overall security posture through reduced attack surfaces, rapid threat response, and limited breach impacts. Figure 6 shows the charts depicting security improvements achieved through the implementation of a secure SCADA system across four key metrics. The most substantial improvement is seen in unauthorized access events, with a 57.4% reduction following the  
Figure 5: Three-dimensional scatter plot to visualize the LSTM model’s analysis. introduction of NFC badge authentication. Automated threat response capabilities led to a 41.2% decrease in mean time to containment. In the SIEM logs, hacking attempts against the fog-level MES dashboard saw a sharp 79.2% decline after deploying defenses like HTTPS and access tokens. Finally, encrypting SCADA links led to 100% prevention of sensor measurement tampering. The deep learning-based IDS continuously monitors network activity for anomalous patterns indicative of potential intrusions. Upon such patterns exceeding defined threshold values of abnormality, the system automatically triggers alerts and initiates automated containment actions, such as blocking suspicious IP addresses or disabling associated user accounts. These capabilities enable rapid, programmatic responses to contain detected threats until more comprehensive forensic analysis and remediation can be performed. In the 6 months after the IDS was implemented, 17 intrusion events were detected. Moreover, 3 accounts were disabled, and 17 risky IP addresses were cut off. Figure 7 shows intrusion detection system (IDS) activity over a typical production day. The standard shift runs from 08:00 to 20:00, with meal breaks at 12:00 and 18:00. SCADA bandwidth ranges up to 100 Mbps during production hours, dropping to a few Mbps after the production shift ends. The IDS continuously monitors network traffic for intrusion patterns, taking appropriate automated actions and sending alerts if configured detection thresholds are reached. In this study, the deep learning-based IDS detected anomalous intrusion patterns anytime throughout the day, regardless of production or meal hours. Figure 6: This figure shows the before and after values for 4 SCADA security metrics.