We study adversarial pressures on real-time publish/subscribe visualization pipelines. We target three practical
attack classes—poison, flood, and replay—and evaluate two
lightweight defenses: envelope checks and per-source quota. Using
a synthetic but calibrated harness, we show that combining the two
mitigations sustains up to 2905.1 msgs/s with a minimum drop-rate
of 0.03, while keeping p50/p99 detection latency near 177/352 ms.
Our results suggest most viz-layer attacks can be neutralized
without heavy cryptography when basic schema validation and
per-source shaping are enforced at the broker edge.