Newest papers

A Digital Twin to Improve Cyber-Social Impact

Vita Santa Barletta, Danilo Caivano, Gabriel Cellammare, Andrea Dimauro, Pasquale Mesagna, Massimiliano Morga · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.28430 · cited by 0 works (OpenAlex) · open-access PDF

Chinese

目前工业控制系统(ICS)框架的日益复杂性和与IT框架的整合已经显著扩大了网络威胁景观。传统的网络安全模型,主要基于隐私性、完整性和可用性(CIA三角形)的概念,未能捕捉网络攻击的更广泛的社会和运营影响。本文提出了一个新框架,将数字双胞胎技术与网络社会安全模型相结合,以模拟、分析和定量化关键基础设施中的网络威胁。用Mininet和MiniCPS构建的虚拟化ICS环境用于模拟网络攻击场景并评估其在技术和社会层面上的后果。该框架的核心是网络社会安全漏洞评估系统(CSVSS),一种量化指标,延伸了CVSS的可用性,以社会影响

Machine translation (Meta M2M100); the English original follows.

Abstract

The increasing complexity of Industrial Control Systems (ICS) and their integration with IT infrastructures has significantly expanded the cyber threat landscape. Traditional cybersecurity models, primarily based on the Confidentiality, Integrity, and Availability (CIA triad), fail to capture the broader societal and operational impacts of cyberattacks. This paper proposes a novel framework that integrates Digital Twin technology with a Cyber-Social Security model to simulate, analyze, and quantify cyber threats in critical infrastructures. Virtualized ICS environments built with Mininet and MiniCPS are used to model attack scenarios and assess their consequences across technical and social dimensions. At the core of the framework lies the Cyber-Social Vulnerability Scoring System (CSVSS), a quantitative metric that extends CVSS with a Social Impact dimension grounded in the Entity and Place pillars, producing a single, reproducible severity score that reflects real-world consequences. Crucially, the framework does not automate risk assessment but keeps the human analyst at its center: a Large Language Model (LLM) performs a first-pass analysis, mapping vulnerabilities and drafting risk reports, while the analyst, supported by explainable AI feedback, validates the findings and retains decision authority over critical cases. Experimental results demonstrate the framework's ability to model and score cyber-social impact, while the human-in-the-loop design is presented as a conceptual principle to preserve oversight.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Computer science, Vulnerability (computing), Dimension (graph theory), Metric (unit), Computer security, Risk analysis (engineering)

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange