This article presents an attack-resilient architecture for cyber-physical systems (CPSs). As a case study, the authors build a radio-based train control testbed and validate the proposed resilient design architecture. The target CPS application is a hierarchical control system.