Abstract:Smart manufacturing (SM) systems utilize run-time data to improve productivity via intelligent decision-making and analysis mechanisms on both machine and system levels. The increased adoption of cyber-physical systems in SM leads to the comprehensive framework of cyber-physical manufacturing systems (CPMS) where data-enabled decision-making mechanisms are coupled with cyber-physical resources on the plant floor. Due to their cyber-physical nature, CPMS are susceptible to cyber-attacks that may cause harm to the manufacturing system, products, or even the human workers involved in this context. Therefore, detecting cyber-attacks efficiently and timely is a crucial step toward implementing and securing high-performance CPMS in practice. This paper addresses two key challenges to CPMS cyber-attack detection. The first challenge is distinguishing expected anomalies in the system from cyber-attacks. The second challenge is the identification of cyber-attacks during the transient response of CPMS due to closed-loop controllers. Digital twin (DT) technology emerges as a promising solution for providing additional insights into the physical process (twin) by leveraging run-time data, models, and analytics. In this work, we propose a DT framework for detecting cyber-attacks in CPMS during controlled transient behavior as well as expected anomalies of the physical process. We present a DT framework and provide details on structuring the architecture to support cyber-attack detection. Additionally, we present an experimental case study on off-the-shelf 3D printers to detect cyber-attacks utilizing the proposed DT framework to illustrate the effectiveness of our proposed approach. Note to Practitioners—This work is motivated by developing a general-purpose and extensible digital twin-enabled cyber-attack detection framework for manufacturing systems. Existing works in the field consider specialized attack scenarios and models that may not be extensible in practical manufacturing scenarios. We utilize digital twin (DT) technology as a key enabler to develop a systematic and extensible framework where we identify the abnormality of a resource and detect if the abnormality is due to an attack or an expected anomaly. We provide several remarks on how our proposed framework can extend existing industrial control systems (ICS) and can accommodate further extensions. The presented DTs utilize data-driven machine learning models, physics-based models, and subject matter expert knowledge to perform detection and differentiation tasks in the context of expected anomalies and model-based controllers that control the manufacturing process between multiple setpoints. We utilize a model predictive controller on an off-the-shelf 3D printer to run the process, and stage anomalies and cyber-attacks that are successfully detected by the proposed framework.

A Security Framework in Digital Twins for Cloud-based Industrial Control Systems: Intrusion Detection and Mitigation

Digital Twin-based Intrusion Detection for Industrial Control Systems

CyberDefender: an integrated intelligent defense framework for digital-twin-based industrial cyber-physical systems

Leveraging Digital Twins and Intrusion Detection Systems for Enhanced Security in IoT-Based Smart City Infrastructures

A Taxonomy of Security and Defense Mechanisms in Digital Twins-based Cyber-Physical Systems

Digital Twin-Based Cyber-Attack Detection Framework for Cyber-Physical Manufacturing Systems

Intrusion Detection Framework for Industrial Internet of Things Using Software Defined Network

TwinSec‐IDS: An Enhanced Intrusion Detection System in SDN‐Digital‐Twin‐Based Industrial Cyber‐Physical Systems

A Digital Twin Framework for Cyber Security in Cyber-Physical Systems

Securing critical infrastructures with a cybersecurity digital twin

A Machine Learning Based Framework for Real-Time Detection and Mitigation of Sensor False Data Injection Cyber-Physical Attacks in Industrial Control Systems

An Integrated Cyber-Physical Risk Assessment Framework for Worst-Case Attacks in Industrial Control Systems

An Analytics Framework for Heuristic Inference Attacks against Industrial Control Systems

A Deep Learning-based Framework for Conducting Stealthy Attacks in Industrial Control Systems

A Threat Hunting Framework for Industrial Control Systems

Assessment of Cyber-Physical Intrusion Detection and Classification for Industrial Control Systems

Digital Twin: A Comprehensive Survey of Security Threats

Putting Together the Pieces: A Concept for Holistic Industrial Intrusion Detection

ICSSIM-A Framework for Building Industrial Control Systems Security Simulation Testbeds

A Lightweight Hybrid Intrusion Detection Framework using Machine Learning for Edge-Based IIoT Security

A Hierarchical Intrusion Detection System for Industrial Control Networks based on EtherNet/IP