Cyber-Resilient Digital Twins: Discriminating Attacks for Safe Critical Infrastructure Control

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Homaei, Mohammadhossein, Khazrak, Iman, Molano, Rubén, Caro, Andrés, Ávila, Mar
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866910059425955840
author Homaei, Mohammadhossein
Khazrak, Iman
Molano, Rubén
Caro, Andrés
Ávila, Mar
author_facet Homaei, Mohammadhossein
Khazrak, Iman
Molano, Rubén
Caro, Andrés
Ávila, Mar
contents Industrial Cyber-Physical Systems (ICPS) face growing threats from cyber-attacks that exploit sensor and control vulnerabilities. Digital Twin (DT) technology can detect anomalies via predictive modelling, but current methods cannot distinguish attack types and often rely on costly full-system shutdowns. This paper presents i-SDT (intelligent Self-Defending DT), combining hydraulically-regularized predictive modelling, multi-class attack discrimination, and adaptive resilient control. Temporal Convolutional Networks (TCNs) with differentiable conservation constraints capture nominal dynamics and improve robustness to adversarial manipulations. A recurrent residual encoder with Maximum Mean Discrepancy (MMD) separates normal operation from single- and multi-stage attacks in latent space. When attacks are confirmed, Model Predictive Control (MPC) uses uncertainty-aware DT predictions to keep operations safe without shutdown. Evaluation on SWaT and WADI datasets shows major gains in detection accuracy, 44.1% fewer false alarms, and 56.3% lower operational costs in simulation-in-the-loop evaluation. with sub-second inference latency confirming real-time feasibility on plant-level workstations, i-SDT advances autonomous cyber-physical defense while maintaining operational resilience.
format Preprint
id arxiv_https___arxiv_org_abs_2603_18613
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle Cyber-Resilient Digital Twins: Discriminating Attacks for Safe Critical Infrastructure Control
Homaei, Mohammadhossein
Khazrak, Iman
Molano, Rubén
Caro, Andrés
Ávila, Mar
Cryptography and Security
Machine Learning
Industrial Cyber-Physical Systems (ICPS) face growing threats from cyber-attacks that exploit sensor and control vulnerabilities. Digital Twin (DT) technology can detect anomalies via predictive modelling, but current methods cannot distinguish attack types and often rely on costly full-system shutdowns. This paper presents i-SDT (intelligent Self-Defending DT), combining hydraulically-regularized predictive modelling, multi-class attack discrimination, and adaptive resilient control. Temporal Convolutional Networks (TCNs) with differentiable conservation constraints capture nominal dynamics and improve robustness to adversarial manipulations. A recurrent residual encoder with Maximum Mean Discrepancy (MMD) separates normal operation from single- and multi-stage attacks in latent space. When attacks are confirmed, Model Predictive Control (MPC) uses uncertainty-aware DT predictions to keep operations safe without shutdown. Evaluation on SWaT and WADI datasets shows major gains in detection accuracy, 44.1% fewer false alarms, and 56.3% lower operational costs in simulation-in-the-loop evaluation. with sub-second inference latency confirming real-time feasibility on plant-level workstations, i-SDT advances autonomous cyber-physical defense while maintaining operational resilience.
title Cyber-Resilient Digital Twins: Discriminating Attacks for Safe Critical Infrastructure Control
topic Cryptography and Security
Machine Learning
url https://arxiv.org/abs/2603.18613