基于数字孪生的工控系统信息安全防护研究综述

doi:10.3778/j.issn.1002-8331.2508-0252

摘要/Abstract

摘要： 数字孪生技术通过构建实体对象的高保真动态机理模型，在虚拟空间中模拟实体对象行为，孪生空间与实体对象进行实时交互与协同演化，为工控系统信息安全防护研究提供了新的视角。概述了工控系统在信息安全防护过程中面临的多重挑战，阐述了数字孪生的基本原理、发展历程和关键技术；综述了数字孪生技术在工控系统信息安全防护中的应用研究，重点总结了其在系统仿真模拟、防护体系、异常检测和风险评估等方面的研究进展，并对现有研究的局限性进行了总结分析。最后，对数字孪生在工控系统信息安全防护中的未来发展方向进行了总结与展望。

关键词: 数字孪生, 工控系统（ICSs）, 信息安全防护, 异常检测, 风险评估

Abstract: Digital twin technology constructs high-fidelity dynamic models of physical entities in a digital space, enabling real-time simulation of their behaviors in virtual spaces, and facilitating interactive coevolution between the digital twin and its physical counterpart. It offers a novel perspective for addressing security challenges in industrial control systems (ICSs). This paper outlines the multiple challenges faced by ICSs in ensuring system availability. The fundamental principles, evolutionary history, and key enabling technologies of digital twins are delineated. The applications of digital twin technology in ICSs security are surveyed, emphasizing progress in system emulation, protective architectures, anomaly detection, and risk assessment, alongside an assessment of current research shortcomings. The future development directions of digital twins in the information security protection of ICSs are summarized and prospected.

Key words: digital twin, industrial control systems (ICSs), security protection, anomaly detection, risk assessment

王昆昆, 李亚辉, 杜鑫, 徐裴行, 周纯杰. 基于数字孪生的工控系统信息安全防护研究综述[J]. 计算机工程与应用, 2026, 62(6): 1-15.

WANG Kunkun, LI Yahui, DU Xin, XU Peihang, ZHOU Chunjie. Review of Security Protection of Industrial Control Systems Based on Digital Twin[J]. Computer Engineering and Applications, 2026, 62(6): 1-15.

参考文献

[1] MO Y L，KIM T H，BRANCIK K，et al.Cyber-physical security of a smart grid infrastructure[J].Proceedings of the IEEE，2012，100（1）：195-209.
[2] ZHOU Y A，MO Z，XIAO Q J，et al.Privacy-preserving transportation traffic measurement in intelligent cyber-physical road systems[J].IEEE Transactions on Vehicular Technology，2016，65（5）：3749-3759.
[3] MCLAUGHLIN S，KONSTANTINOU C，WANG X Y，et al.The cybersecurity landscape in industrial control systems[J].Proceedings of the IEEE，2016，104（5）：1039-1057.
[4] ZHOU C J，HU B W，SHI Y，et al.A unified architectural approach for cyberattack-resilient industrial control systems[J].Proceedings of the IEEE，2021，109（4）：517-541.
[5] HUMAYED A，LIN J Q，LI F J，et al.Cyber-physical systems security：a survey[J].IEEE Internet of Things Journal，2017，4（6）：1802-1831.
[6] 李欣，刘秀，万欣欣.数字孪生应用及安全发展综述[J].系统仿真学报，2019，31（3）：385-392.
LI X，LIU X，WAN X X.Overview of digital twins application and safe development[J].Journal of System Simulation，2019，31（3）：385-392.
[7] BATCHKOVA I A，TZAKOVA D L，BELEV Y A.Standards for monitoring and control of cyber-physical systems[J].Industry 4.0，2019，4（1）：3-6.
[8] 赖英旭，刘增辉，蔡晓田，等.工业控制系统入侵检测研究综述[J].通信学报，2017，38（2）：143-156.
LAI Y X，LIU Z H，CAI X T，et al.Research on intrusion detection of industrial control system[J].Journal on Communications，2017，38（2）：143-156.
[9] 杨安，孙利民，王小山，等.工业控制系统入侵检测技术综述[J].计算机研究与发展，2016，53（9）：2039-2054.
YANG A，SUN L M，WANG X S，et al.Intrusion detection techniques for industrial control systems[J].Journal of Computer Research and Development，2016，53（9）：2039-2054.
[10] 孙彦斌，汪弘毅，田志宏，等.工业控制系统安全防护技术发展研究[J].中国工程科学，2023，25（6）：126-136.
SUN Y B，WANG H Y，TIAN Z H，et al.Development of security protection technologies for industrial control system[J].Strategic Study of CAE，2023，25（6）：126-136.
[11] 陶飞，刘蔚然，刘检华，等.数字孪生及其应用探索[J].计算机集成制造系统，2018，24（1）：1-18.
TAO F，LIU W R，LIU J H，et al.Digital twin and its potential application exploration[J].Computer Integrated Manufacturing Systems，2018，24（1）：1-18.
[12] GRIEVES M W.Digital twins：past，present，and future[M]//The digital twin.Cham：Springer International Publishing，2023：97-121.
[13] STARK R，KIND S，NEUMEYER S.Innovations in digital modelling for next generation manufacturing system design[J].CIRP Annals，2017，66（1）：169-172.
[14] TAO F，QI Q L.Make more digital twins[J].Nature，2019，573：490-491.
[15] 陶飞，刘蔚然，张萌，等.数字孪生五维模型及十大领域应用[J].计算机集成制造系统，2019，25（1）：1-18.
TAO F，LIU W R，ZHANG M，et al.Five-dimension digital twin model and its ten applications[J].Computer Integrated Manufacturing Systems，2019，25（1）：1-18.
[16] ZHOU Y，LI X，WANG J，et al.A digital twin framework for process control systems[J].IEEE Transactions on Industrial Informatics，2022，18（9）：6051-6062.
[17] LU H，ZHANG Q，CHEN Y，et al.Multi-layer CPS security architecture based on digital twin integration[J].ISA Transactions，2024，150：120-134.
[18] KREUTZ D，RAMOS F M V，VERíSSIMO P E，et al.Software-defined networking：a comprehensive survey[J].Proceedings of the IEEE，2015，103（1）：14-76.
[19] 陈升，宗志锋，倪华，等.基于数字孪生的水务工业控制系统攻防验证技术[J].信息技术与网络安全，2021，40（9）：9-13.
CHEN S，ZONG Z F，NI H，et al.Digital twins based attack and defense verification technology for water industrial control systems[J].Information Technology and Network Security，2021，40（9）：9-13.
[20] OLIVARES-ROJAS J C，REYES-ARCHUNDIA E，GUTIéRREZ-GNECCHI J A，et al.Towards cybersecurity of the smart grid using digital twins[J].IEEE Internet Computing，2022，26（3）：52-57.
[21] SEN ?，BLESER N，ULBIG A.Digital twin for evaluating detective countermeasures in smart grid cybersecurity[C]//Proceedings of the 2023 IEEE International Conference on Communications，Control，and Computing Technologies for Smart Grids.Piscataway：IEEE，2023：1-6.
[22] DIETZ M，VIELBERTH M，PERNUL G.Integrating digital twin security simulations in the security operations center[C]//Proceedings of the 15th International Conference on Availability，Reliability and Security.New York：ACM，2020：1-9.
[23] MURILLO A，TAORMINA R，TIPPENHAUER N，et al.Co-simulating physical processes and network data for high-fidelity cyber-security experiments[C]//Proceedings of the Sixth Annual Industrial Control System Security（ICSS） Workshop.New York：ACM，2020：13-20.
[24] KANDASAMY N K，VENUGOPALAN S，WONG T K，et al.An electric power digital twin for cyber security testing，research and education[J].Computers and Electrical Engineering，2022，101：108061.
[25] DIETZ M，HAGEMAN L，VON HORNUNG C，et al.Employing digital twins for security?by?design system testing[C]//Proceedings of the 2022 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems.New York：ACM，2022：97-106.
[26] SOMMA A，CASOLA V，CAVALLI A R，et al.A cyber digital twin framework to support cyber-physical systems security[C]//Proceedings of the 2023 IEEE Smart World Congress.Piscataway：IEEE，2023：1-10.
[27] MASI M，SELLITTO G P，ARANHA H，et al.Securing critical infrastructures with a cybersecurity digital twin[J].Software and Systems Modeling，2023，22（2）：689-707.
[28] PAL P.The adoption of waves of digital technology as antecedents of digital transformation by financial services institutions[J].Journal of Digital Banking，2022，7（1）：70.
[29] GEHRMANN C，GUNNARSSON M.A digital twin based industrial automation and control system security architecture[J].IEEE Transactions on Industrial Informatics，2020，16（1）：669-680.
[30] SAAD A，FADDEL S，YOUSSEF T，et al.On the implementation of IoT-based digital twin for networked microgrids resiliency against cyber attacks[J].IEEE Transactions on Smart Grid，2020，11（6）：5138-5150.
[31] DAI W B，LI S Y，LU L，et al.Research on application of mimic defense in industrial control system security[C]//Proceedings of the 2021 IEEE 2nd International Conference on Information Technology，Big Data and Artificial Intelligence.Piscataway：IEEE，2021：573-577.
[32] DE BENEDICTIS A，ESPOSITO C，SOMMA A.Toward the adoption of secure cyber digital twins to enhance cyber-physical systems security[C]//Proceedings of the International Conference on Quality of Information and Communications Technology.Cham：Springer，2022：307-321.
[33] EMPL P，PERNUL G.Digital-twin-based security analytics for the Internet of Things[J].Information，2023，14（2）：95.
[34] ALI M，KADDOUM G，LI W T，et al.A smart digital twin enabled security framework for vehicle?to?grid cyber-physical systems[J].IEEE Transactions on Information Forensics and Security，2023，18：5258-5271.
[35] LI Y B，TAO Z Y，WANG L，et al.Digital twin-based job shop anomaly detection and dynamic scheduling[J].Robotics and Computer-Integrated Manufacturing，2023，79：102443.
[36] 马佳利，郭渊博，方晨，等.基于数字孪生的工业互联网安全检测与响应研究[J].通信学报，2024，45（6）：87-100.
MA J L，GUO Y B，FANG C，et al.Research on industrial Internet security detection and response based on digital twin[J].Journal on Communications，2024，45（6）：87-100.
[37] MA J L，GUO Y B，FANG C，et al.Digital-twin-based CPS anomaly diagnosis and security defense countermeasure recommendation[J].IEEE Internet of Things Journal，2024，11（10）：18726-18738.
[38] JIANG Y N，WANG W，DING J G，et al.Leveraging digital twin technology for enhanced cybersecurity in cyber-physical production systems[J].Future Internet，2024，16（4）：134.
[39] HUANG K X，ZHANG Q，ZHOU C J，et al.An efficient intrusion detection approach for visual sensor networks based on traffic pattern learning[J].IEEE Transactions on Systems，Man，and Cybernetics：Systems，2017，47（10）：2704-2713.
[40] HUANG K X，ZHOU C J，TIAN Y C，et al.Assessing the physical impact of cyberattacks on industrial cyber-physical systems[J].IEEE Transactions on Industrial Electronics，2018，65（10）：8153-8162.
[41] HUANG H Y，YANG L，WANG Y B，et al.Digital Twin-driven online anomaly detection for an automation system based on edge intelligence[J].Journal of Manufacturing Systems，2021，59：138-150.
[42] CASTELLANI A，SCHMITT S，SQUARTINI S.Real-world anomaly detection by using digital twin systems and weakly supervised learning[J].IEEE Transactions on Industrial Informatics，2021，17（7）：4733-4742.
[43] LIU J W，ZHANG S P，LIU H，et al.Distributed collaborative anomaly detection for trusted digital twin vehicular edge networks[C]//Proceedings of the International Conference on Wireless Algorithms，Systems，and Applications.Cham：Springer，2021：378-389.
[44] LI Z，DUAN M X，XIAO B，et al.A novel anomaly detection method for digital twin data using deconvolution operation with attention mechanism[J].IEEE Transactions on Industrial Informatics，2023，19（5）：7278-7286.
[45] XU Q H，ALI S，YUE T.Digital twin-based anomaly detection with curriculum learning in cyber-physical systems[J].ACM Transactions on Software Engineering and Methodology，2023，32（5）：1-32.
[46] 陈静，卢燕臻，江灏，等.基于孪生模型的堆芯自给能中子探测器信号异常检测[J].核动力工程，2023，44（3）：210-216.
CHEN J，LU Y Z，JIANG H，et al.Anomaly detection of core self-powered neutron detector based on twin model[J].Nuclear Power Engineering，2023，44（3）：210-216.
[47] HASAN M N，JAN S U，KOO I.Wasserstein GAN-based digital twin-inspired model for early drift fault detection in wireless sensor networks[J].IEEE Sensors Journal，2023，23（12）：13327-13339.
[48] KRAUSE A，KHURSHEED M D，SCHULZ P，et al.Digital twin of the radio environment：a novel approach for anomaly detection in wireless networks[C]//Proceedings of the 2023 IEEE Globecom Workshops.Piscataway：IEEE，2023：1307-1312.
[49] SALIM M M，CAMACHO D，PARK J H.Digital Twin and federated learning enabled cyberthreat detection system for IoT networks[J].Future Generation Computer Systems，2024，161：701-713.
[50] KRISHNAVENI S，CHEN T M，SATHIYANARAYANAN M，et al.CyberDefender：an integrated intelligent defense framework for digital-twin-based industrial cyber-physical systems[J].Cluster Computing，2024，27（6）：7273-7306.
[51] BOLAT-AK?A B，BOZKAYA-ARAS E，CANBERK B，et al.An intelligent digital twin model for attack detection in zero-touch 6G networks[C]//Proceedings of the 2024 IEEE International Conference on Communications Workshops.Piscataway：IEEE，2024：773-778.
[52] WANG Y T，CAO Y S，WANG F Y.Anomaly detection in digital twin model[C]//Proceedings of the 2021 IEEE 1st International Conference on Digital Twins and Parallel Intelligence.Piscataway：IEEE，2021：208-211.
[53] CALVO-BASCONES P，VOISIN A，DO P，et al.A collaborative network of digital twins for anomaly detection applications of complex systems.Snitch digital twin concept[J].Computers in Industry，2023，144：103767.
[54] BALTA E C，PEASE M，MOYNE J，et al.Digital twin-based cyber-attack detection framework for cyber-physical manufacturing systems[J].IEEE Transactions on Automation Science and Engineering，2024，21（2）：1695-1712.
[55] GOWRIPEDDI V V，GVK S，BAPAT J，et al.Digital twin and ontology based DDoS attack detection in a smart-factory 4.0[C]//Proceedings of the 2023 International Conference on Artificial Intelligence in Information and Communication.Piscataway：IEEE，2023：286-291.
[56] BOLAT-AK?A B，BOZKAYA-ARAS E.Digital twin-assisted intelligent anomaly detection system for Internet of Things[J].Ad Hoc Networks，2024，158：103484.
[57] LI X，ZHOU C J，TIAN Y C，et al.A dynamic decision-making approach for intrusion response in industrial control systems[J].IEEE Transactions on Industrial Informatics，2019，15（5）：2544-2554.
[58] HADAR E，KRAVCHENKO D，BASOVSKIY A.Cyber digital twin simulator for automatic gathering and prioritization of security controls’ requirements[C]//Proceedings of the 2020 IEEE 28th International Requirements Engineering Conference.Piscataway：IEEE，2020：250-259.
[59] LIU Z S，MENG X T，XING Z Z，et al.Digital twin-based safety risk coupling of prefabricated building hoisting[J].Sensors，2021，21（11）：3583.
[60] WANG J J，WANG S H.Risk intelligent decision system of compressed gas station equipment based on digital twin[J].Natural Gas Industry，2021，41（7）：115-124.
[61] ALLISON D，SMITH P，MCLAUGHLIN K.Digital twin-enhanced incident response for cyber-physical systems[C]//Proceedings of the 18th International Conference on Availability，Reliability and Security.New York：ACM，2023：1-10.
[62] 周波.面向数字孪生的主动配电网内生安全研究[D].北京：华北电力大学，2022.
ZHOU B.Research on endogenous safety of active distribution network considering digital twin[D].Beijing：North China Electric Power University，2022.