Paper scores ICS cyber risk with digital twins and a social metric
Original title: A Digital Twin to Improve Cyber-Social Impact
CSVSS adds a Social Impact dimension to CVSS, while an LLM drafts reports a human analyst must still validate.
A research paper argues the CIA triad misses societal effects of attacks on industrial control systems and proposes digital twins plus a Cyber-Social Security model. Virtual ICS environments built with Mininet and MiniCPS are used to simulate attacks and score them with the Cyber-Social Vulnerability Scoring System, which extends CVSS using Entity and Place pillars. An LLM does a first-pass vulnerability mapping and draft risk report; the analyst keeps decision authority. The authors say experiments show the framework can model and score cyber-social impact, and they treat human oversight as a design principle rather than automated assessment.
Unconfirmed: Reported experimental ability to score impact is the authors' result; no external validation is stated.
- The framework targets critical infrastructure ICS integrated with IT.
- CSVSS is meant to produce one reproducible severity score.
- Risk assessment is not automated; explainable AI feedback supports the analyst.
- No named operational deployment is described.
From the original article
1 min read at arxiv.orgThe increasing complexity of Industrial Control Systems (ICS) and their integration with IT infrastructures has significantly expanded the cyber threat landscape. Traditional cybersecurity models, primarily based on the Confidentiality, Integrity, and Availability (CIA triad), fail to capture the broader societal and operational impacts of cyberattacks.
By Vita Santa Barletta · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.