Research on industrial Internet security detection and response based on digital twin

Considering that traditional network security defense methods cannot meet the strict requirements of industrial Internet for reliability and stability, a method for anomaly detection and response in digital space was studied based on the idea of digital twins by collecting on-site data and using twi...

Full description

Saved in:
Bibliographic Details
Main Authors: MA Jiali, GUO Yuanbo, FANG Chen, CHEN Qingli, ZHANG Qi
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2024-06-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024091/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841539221977825280
author MA Jiali
GUO Yuanbo
FANG Chen
CHEN Qingli
ZHANG Qi
author_facet MA Jiali
GUO Yuanbo
FANG Chen
CHEN Qingli
ZHANG Qi
author_sort MA Jiali
collection DOAJ
description Considering that traditional network security defense methods cannot meet the strict requirements of industrial Internet for reliability and stability, a method for anomaly detection and response in digital space was studied based on the idea of digital twins by collecting on-site data and using twin model security cognition. Firstly, four types of modeling methods were summarized and integrated into the multi module digital twin (DT) architecture by analyzing the digital twin modeling solutions. Secondly, the cognition of different twin models was transformed into a standard signal temporal logic (STL) specification set by introducing signal temporal logic technology, and anomaly detection was achieved by monitoring system behavior based on the specification set, by the reliability of detection results was increased. Finally, anomaly localization was achieved through the analysis of violations of the STL specification set, and corresponding STL weak specifications were designed through the analysis of known device faults to achieve anomaly classification. Two aspects of response to anomalies were beneficial for helping the system restore normal operation. The case study demonstrates that the effectiveness of the proposed method in anomaly detection and response. Comparing the proposed method with the intrusion detection system based on deep learning, the experimental results show that the detection rate of the proposed method increases by 25%~40.9% in detecting anomalies.
format Article
id doaj-art-a65d4f2da3ac47cab4348b701c14eb8d
institution Kabale University
issn 1000-436X
language zho
publishDate 2024-06-01
publisher Editorial Department of Journal on Communications
record_format Article
series Tongxin xuebao
spelling doaj-art-a65d4f2da3ac47cab4348b701c14eb8d2025-01-14T07:24:30ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2024-06-01458710063977210Research on industrial Internet security detection and response based on digital twinMA JialiGUO YuanboFANG ChenCHEN QingliZHANG QiConsidering that traditional network security defense methods cannot meet the strict requirements of industrial Internet for reliability and stability, a method for anomaly detection and response in digital space was studied based on the idea of digital twins by collecting on-site data and using twin model security cognition. Firstly, four types of modeling methods were summarized and integrated into the multi module digital twin (DT) architecture by analyzing the digital twin modeling solutions. Secondly, the cognition of different twin models was transformed into a standard signal temporal logic (STL) specification set by introducing signal temporal logic technology, and anomaly detection was achieved by monitoring system behavior based on the specification set, by the reliability of detection results was increased. Finally, anomaly localization was achieved through the analysis of violations of the STL specification set, and corresponding STL weak specifications were designed through the analysis of known device faults to achieve anomaly classification. Two aspects of response to anomalies were beneficial for helping the system restore normal operation. The case study demonstrates that the effectiveness of the proposed method in anomaly detection and response. Comparing the proposed method with the intrusion detection system based on deep learning, the experimental results show that the detection rate of the proposed method increases by 25%~40.9% in detecting anomalies.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024091/industrial Internetdigital twinanomaly detectionanomaly responsesignal temporal logic
spellingShingle MA Jiali
GUO Yuanbo
FANG Chen
CHEN Qingli
ZHANG Qi
Research on industrial Internet security detection and response based on digital twin
Tongxin xuebao
industrial Internet
digital twin
anomaly detection
anomaly response
signal temporal logic
title Research on industrial Internet security detection and response based on digital twin
title_full Research on industrial Internet security detection and response based on digital twin
title_fullStr Research on industrial Internet security detection and response based on digital twin
title_full_unstemmed Research on industrial Internet security detection and response based on digital twin
title_short Research on industrial Internet security detection and response based on digital twin
title_sort research on industrial internet security detection and response based on digital twin
topic industrial Internet
digital twin
anomaly detection
anomaly response
signal temporal logic
url http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2024091/
work_keys_str_mv AT majiali researchonindustrialinternetsecuritydetectionandresponsebasedondigitaltwin
AT guoyuanbo researchonindustrialinternetsecuritydetectionandresponsebasedondigitaltwin
AT fangchen researchonindustrialinternetsecuritydetectionandresponsebasedondigitaltwin
AT chenqingli researchonindustrialinternetsecuritydetectionandresponsebasedondigitaltwin
AT zhangqi researchonindustrialinternetsecuritydetectionandresponsebasedondigitaltwin