The proliferation of digitization and complexity of connectivity in Cyber-Physical Systems (CPSs) calls for a mechanism that can evaluate the functionality and security of critical infrastructures. In this regard, Digital Twins (DTs) are revolutionizing the CPSs. Driven by asset-centric data, DTs are virtual replicas of physical systems that mirror every facet of a product or process and can provide actionable insights through monitoring, optimization, and prediction. Furthermore, replication and simulation modes in DTs can prevent and detect security flaws in the CPS without obstructing the ongoing operations of the live system. However, such benefits of DTs are based on an assumption about data trust, integrity, and security. Data trustworthiness is considered to be more critical when it comes to the integration and interoperability of multiple components or sub-components among different DTs owned by multiple stakeholders to provide an aggregated view of the complex physical system. Moreover, analyzing the huge volume of data for creating actionable insights in real-time is another critical requirement that demands automation. This article focuses on securing CPSs by integrating Artificial Intelligence (AI) and blockchain for intelligent and trusted DTs. We envision an AI-aided blockchain-based DT framework that can ensure anomaly prevention and detection in addition to responding against novel attack vectors in parallel with the normal ongoing operations of the live systems. We discuss the applicability of the proposed framework for the automotive industry as a CPS use case. Finally, we identify challenges that impede the implementation of intelligence-driven architectures in CPS.
翻译:数字化的扩大和网络-物理系统连通性的复杂性的扩大要求有一个机制来评估关键基础设施的功能和安全性。在这方面,数字双双(DTs)正在对CPS进行革命。受资产中心数据驱动,DTs是反映产品或过程的每个方面并通过监测、优化和预测提供可采取行动的洞见的物理系统的虚拟复制品。此外,在DTs的复制和模拟模式可以防止和发现CPS的安全缺陷,而不妨碍现场系统的运行。但是,DTs的这种好处是基于数据信任、完整性和安全的假设。当涉及多个利益攸关方拥有的不同DTs的多个组成部分或次级组成部分的整合和互操作性时,数据可靠性被认为更为关键,从而可以提供综合的、优化和预测。此外,分析在实时中创建可采取行动的洞察看数据的大量数据是另一个关键要求。这篇文章的重点是确保CPSs的安全,办法是将数据实时情报(AI)和链路的可操作纳入数据信任性和安全性。 数据信任性可靠性被认为,可以确保我们无法持续地对C-数据系统进行持续的检测。