Abstract: Some implementations of the disclosure are directed to a method, comprising: receiving tapped data that was tapped from a controller of an industrial control system (ICS) while the controller executed first control code to control ICS devices of the ICS, the tapped data used during execution of the first control code, and the tapped data comprising input data obtained from one or more input components of the controller communicatively coupled to the ICS devices, or output data obtained from one or more output components of the controller communicatively coupled to the ICS devices; and after receiving the tapped data, executing, using at least the tapped data, second control code that provides an emulation of the controller, the emulation comprising running, using at least the tapped data, a process of the first control code at a faster rate than it is run by the controller executing the first control code.

Abstract: Some implementations of the disclosure are directed to tapping input/output (I/O) data from an industrial control system (ICS) or applying the tapped I/O data to a learned model to perform predictive or prescriptive maintenance. In one implementation, a method comprises: tapping I/O data from a controller of an ICS while the controller executes first control code to control one or more devices of the ICS; transmitting the tapped I/O data over a network to a second system; and executing, via the second system, second control code comprising an original or modified version of all or a subset of the first control code of the ICS, wherein the second control code executes in response to receiving the tapped I/O data. The output of executing the second control code may be provided to a model to predict a future event involving the ICS or to prescribe maintenance of the ICS.

Abstract: Some implementations of the disclosure are directed to tapping input/output (I/O) data from an industrial control system (ICS) or applying the tapped I/O data to a learned model to perform predictive or prescriptive maintenance. In one implementation, a method comprises: tapping I/O data from a controller of an ICS while the controller executes first control code to control one or more devices of the ICS; transmitting the tapped I/O data over a network to a second system; and executing, via the second system, second control code comprising an original or modified version of all or a subset of the first control code of the ICS, wherein the second control code executes in response to receiving the tapped I/O data. The output of executing the second control code may be provided to a model to predict a future event involving the ICS or to prescribe maintenance of the ICS.