Version 1
: Received: 10 September 2024 / Approved: 10 September 2024 / Online: 10 September 2024 (09:48:38 CEST)
How to cite:
El-Hajj, M. Digital Twins and Intrusion Detection Systems: A Synergistic Approach to Securing Smart Cities. Preprints2024, 2024090792. https://doi.org/10.20944/preprints202409.0792.v1
El-Hajj, M. Digital Twins and Intrusion Detection Systems: A Synergistic Approach to Securing Smart Cities. Preprints 2024, 2024090792. https://doi.org/10.20944/preprints202409.0792.v1
El-Hajj, M. Digital Twins and Intrusion Detection Systems: A Synergistic Approach to Securing Smart Cities. Preprints2024, 2024090792. https://doi.org/10.20944/preprints202409.0792.v1
APA Style
El-Hajj, M. (2024). Digital Twins and Intrusion Detection Systems: A Synergistic Approach to Securing Smart Cities. Preprints. https://doi.org/10.20944/preprints202409.0792.v1
Chicago/Turabian Style
El-Hajj, M. 2024 "Digital Twins and Intrusion Detection Systems: A Synergistic Approach to Securing Smart Cities" Preprints. https://doi.org/10.20944/preprints202409.0792.v1
Abstract
In this research, we investigate the integration of an Intrusion Detection System (IDS) with a Digital Twin (DT) to enhance the cybersecurity of physical devices in cyber-physical systems. Using Eclipse Ditto as the DT platform and Snort as the IDS, we developed a near-realistic test environment that included a Raspberry Pi as the physical device and a Kali Linux virtual machine to perform common cyberattacks such as Hping3 flood attacks and NMAP reconnaissance scans. The results demonstrated that the IDS effectively detected Hping3-based flood attacks but showed limitations in identifying NMAP scans, suggesting areas for IDS configuration improvements. Furthermore, the study uncovered significant system resource impacts, including high CPU usage during SYN and ACK flood attacks and persistent memory usage after NMAP scans, highlighting the need for enhanced recovery mechanisms. This research presents a novel approach by coupling a Digital Twin with an IDS, enabling real-time monitoring and providing a dual perspective on both system performance and security. The integration offers a holistic method for identifying vulnerabilities and understanding resource impacts during cyberattacks. The work contributes new insights into the use of Digital Twins for cybersecurity and paves the way for further research into automated defense mechanisms, real-world validation of the proposed model, and the incorporation of additional attack scenarios. The results suggest that this combined approach holds significant promise for enhancing the security and resilience of IoT devices and other cyber-physical systems.
Keywords
Cybersecurity; Digital Twin; Intrusion Detection System; Hping3; NMAP; Eclipse Ditto; Cyber-Physical Systems
Subject
Computer Science and Mathematics, Security Systems
Copyright:
This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.
