{"id":"https://openalex.org/W4413788828","doi":"https://doi.org/10.3390/smartcities8050142","title":"Threat Modeling and Attacks on Digital Twins of Vehicles: A Systematic Literature Review","display_name":"Threat Modeling and Attacks on Digital Twins of Vehicles: A Systematic Literature Review","publication_year":2025,"publication_date":"2025-08-28","ids":{"openalex":"https://openalex.org/W4413788828","doi":"https://doi.org/10.3390/smartcities8050142"},"language":"en","primary_location":{"id":"doi:10.3390/smartcities8050142","doi":"https://doi.org/10.3390/smartcities8050142","is_oa":true,"landing_page_url":"https://doi.org/10.3390/smartcities8050142","pdf_url":"https://www.mdpi.com/2624-6511/8/5/142/pdf?version=1756391021","source":{"id":"https://openalex.org/S4210184358","display_name":"Smart Cities","issn_l":"2624-6511","issn":["2624-6511"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Smart Cities","raw_type":"journal-article"},"volume":null,"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-6511/8/5/142/pdf?version=1756391021","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Uzair Muzamil Shah","orcid":"https://orcid.org/0009-0009-1556-4224","observed_orcids":["https://orcid.org/0009-0009-1556-4224"]},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Uzair Muzamil Shah","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad 44230, Pakistan"],"raw_orcid":"https://orcid.org/0009-0009-1556-4224","affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad 44230, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042041022","display_name":"Daud Mustafa Minhas","orcid":"https://orcid.org/0000-0002-4861-6862","observed_orcids":["https://orcid.org/0000-0002-4861-6862"]},"institutions":[{"id":"https://openalex.org/I4387155389","display_name":"Zentrum f\u00fcr Mechatronik und Automatisierungstechnik","ror":"https://ror.org/019hph417","country_code":"DE","type":"facility","lineage":["https://openalex.org/I4387155389"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Daud Mustafa Minhas","raw_affiliation_strings":["Industrial Security Lab, ZeMA\u2014Center for Mechatronics and Automation Technology, D-66121 Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-4861-6862","affiliations":[{"raw_affiliation_string":"Industrial Security Lab, ZeMA\u2014Center for Mechatronics and Automation Technology, D-66121 Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4387155389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106182605","display_name":"Kashif Kifayat","orcid":"https://orcid.org/0000-0001-5088-0825","observed_orcids":["https://orcid.org/0000-0001-5088-0825"]},"institutions":[{"id":"https://openalex.org/I4405259941","display_name":"University of Khorfakkan","ror":"https://ror.org/02yvzq394","country_code":"AE","type":"education","lineage":["https://openalex.org/I4405259941"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Kashif Kifayat","raw_affiliation_strings":["College of Computing and Intelligent Systems, University of Khorfakkan, Sharjah 18119, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0001-5088-0825","affiliations":[{"raw_affiliation_string":"College of Computing and Intelligent Systems, University of Khorfakkan, Sharjah 18119, United Arab Emirates","institution_ids":["https://openalex.org/I4405259941"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Khizar Ali Shah","orcid":"https://orcid.org/0009-0002-7431-2958","observed_orcids":["https://orcid.org/0009-0002-7431-2958"]},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Khizar Ali Shah","raw_affiliation_strings":["Department of Cyber Security, Air University, Islamabad 44230, Pakistan"],"raw_orcid":"https://orcid.org/0009-0002-7431-2958","affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Air University, Islamabad 44230, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056060218","display_name":"Georg Frey","orcid":"https://orcid.org/0000-0001-8483-0295","observed_orcids":["https://orcid.org/0000-0001-8483-0295"]},"institutions":[{"id":"https://openalex.org/I91712215","display_name":"Saarland University","ror":"https://ror.org/01jdpyv68","country_code":"DE","type":"education","lineage":["https://openalex.org/I91712215"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Georg Frey","raw_affiliation_strings":["Automation and Energy Systems, Saarland University, D-66123 Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0001-8483-0295","affiliations":[{"raw_affiliation_string":"Automation and Energy Systems, Saarland University, D-66123 Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I91712215"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5056060218"],"corresponding_institution_ids":["https://openalex.org/I91712215"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2413},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2413},"fwci":0.9363,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.79008746,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"8","issue":"5","first_page":"142","last_page":"142"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3684000074863434,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3684000074863434,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.2687999904155731,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.052299998700618744,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/threat-modeling","display_name":"threat modeling","score":0.8330000042915344},{"id":"https://openalex.org/keywords/attack-simulation","display_name":"attack simulation","score":0.5580000281333923},{"id":"https://openalex.org/keywords/threat-taxonomy","display_name":"threat taxonomy","score":0.6169999837875366},{"id":"https://openalex.org/keywords/security-testing","display_name":"security testing","score":0.652999997138977},{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.7879999876022339},{"id":"https://openalex.org/keywords/vehicle-security","display_name":"automotive cybersecurity","score":0.3529999852180481}],"concepts":[{"id":"https://openalex.org/C526921623","wikidata":"https://www.wikidata.org/wiki/Q190117","display_name":"Automotive industry","level":2,"score":0.6719601154327393},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6263623237609863},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5457853078842163},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4862722158432007},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4627627730369568},{"id":"https://openalex.org/C2778738651","wikidata":"https://www.wikidata.org/wiki/Q16546687","display_name":"Novelty","level":2,"score":0.4607267379760742},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.4356166124343872},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.39632439613342285},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3153965473175049},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C27206212","wikidata":"https://www.wikidata.org/wiki/Q34178","display_name":"Theology","level":1,"score":0.0},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/smartcities8050142","doi":"https://doi.org/10.3390/smartcities8050142","is_oa":true,"landing_page_url":"https://doi.org/10.3390/smartcities8050142","pdf_url":"https://www.mdpi.com/2624-6511/8/5/142/pdf?version=1756391021","source":{"id":"https://openalex.org/S4210184358","display_name":"Smart Cities","issn_l":"2624-6511","issn":["2624-6511"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Smart Cities","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e74e9e6b58044efbaed41a978bcd1fa9","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/e74e9e6b58044efbaed41a978bcd1fa9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Smart Cities, Vol 8, Iss 5, p 142 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/smartcities8050142","doi":"https://doi.org/10.3390/smartcities8050142","is_oa":true,"landing_page_url":"https://doi.org/10.3390/smartcities8050142","pdf_url":"https://www.mdpi.com/2624-6511/8/5/142/pdf?version=1756391021","source":{"id":"https://openalex.org/S4210184358","display_name":"Smart Cities","issn_l":"2624-6511","issn":["2624-6511"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Smart Cities","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.7207000255584717,"display_name":"Industry, innovation and infrastructure"}],"sustainable_development_goals_aurora":[],"study_designs":[{"id":"https://openalex.org/study-designs/systematic-review","display_name":"Systematic Review"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320323322","display_name":"Universit\u00e4t des Saarlandes","ror":"https://ror.org/01jdpyv68"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4413788828.pdf","grobid_xml":"https://content.openalex.org/works/W4413788828.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2381242807","https://openalex.org/W3126131230","https://openalex.org/W2347541121","https://openalex.org/W2080951048","https://openalex.org/W4288804799","https://openalex.org/W3032237421","https://openalex.org/W2390346111","https://openalex.org/W3011883280","https://openalex.org/W2369082698","https://openalex.org/W2401808953"],"abstract_inverted_index":{"This":[0,63],"systematic":[1],"literature":[2,65],"review":[3,66],"pioneers":[4],"the":[5,43,56,97,173,176,206,214],"synthesis":[6],"of":[7,26,58,141,149,160,175,189,210],"cybersecurity":[8],"challenges":[9],"for":[10,182,216],"automotive":[11,44,79,118],"digital":[12,27,80,150],"twins":[13],"(DTs),":[14],"a":[15,161,242],"critical":[16],"yet":[17],"underexplored":[18],"frontier":[19],"in":[20,78,145,205,226],"connected":[21],"vehicle":[22,256],"security.":[23],"The":[24,139,200],"notion":[25],"twins,":[28,81],"which":[29],"act":[30],"as":[31,193],"simulated":[32],"counterparts":[33],"to":[34,68,83,108,117,245,254],"real-world":[35],"systems,":[36,55],"is":[37,61],"revolutionizing":[38],"secure":[39,247],"system":[40],"design":[41],"within":[42],"sector.":[45],"As":[46],"contemporary":[47],"vehicles":[48],"become":[49],"more":[50,217],"dependent":[51],"on":[52,72],"interconnected":[53],"electronic":[54],"likelihood":[57],"cyber":[59,260],"threats":[60,116],"escalating.":[62],"comprehensive":[64,220],"seeks":[67],"analyze":[69,102],"existing":[70],"research":[71,93,111],"threat":[73,127,134,163,211],"modeling":[74],"and":[75,90,121,136,186,195,208,219,229,231,252],"security":[76,184],"testing":[77,221],"aiming":[82],"pinpoint":[84],"emerging":[85],"patterns,":[86],"evaluate":[87],"current":[88],"approaches,":[89],"identify":[91],"future":[92],"avenues.":[94],"Guided":[95],"by":[96],"PRISMA":[98],"framework,":[99],"we":[100],"rigorously":[101],"23":[103],"studies":[104],"from":[105],"882":[106],"publications":[107],"address":[109],"three":[110],"questions:":[112],"(1)":[113],"How":[114],"are":[115],"DTs":[119],"identified":[120],"assessed?":[122],"(2)":[123],"What":[124],"methodologies":[125],"drive":[126],"modeling?":[128],"Lastly,":[129],"(3)":[130],"what":[131],"techniques":[132],"validate":[133],"models":[135],"simulate":[137],"attacks?":[138],"novelty":[140],"this":[142,239],"study":[143],"lies":[144],"its":[146,158,187],"structured":[147],"classification":[148],"twin":[151],"types":[152],"(physics":[153],"based,":[154],"data":[155],"driven,":[156],"hybrid),":[157],"inclusion":[159],"groundbreaking":[162],"taxonomy":[164,178],"across":[165],"architectural":[166],"layers":[167],"(e.g.,":[168],"ECU":[169],"tampering,":[170],"CAN-Bus":[171],"spoofing),":[172],"integration":[174],"5C":[177],"with":[179,236],"layered":[180],"architectures":[181],"DT":[183,248],"testing,":[185],"analysis":[188],"domain-specific":[190],"tools":[191],"such":[192],"VehicleLang":[194],"embedded":[196],"intrusion":[197],"detection":[198],"systems.":[199],"findings":[201],"expose":[202],"significant":[203],"deficiencies":[204],"strength":[207],"validation":[209],"models,":[212],"highlighting":[213],"necessity":[215],"adaptable":[218],"methods.":[222],"By":[223],"exposing":[224],"gaps":[225],"scalability,":[227],"trust,":[228],"safety,":[230],"proposing":[232],"actionable":[233],"solutions":[234],"aligned":[235],"UNECE":[237],"R155,":[238],"SLR":[240],"delivers":[241],"robust":[243],"framework":[244],"advance":[246],"development,":[249],"empowering":[250],"researchers":[251],"industry":[253],"fortify":[255],"resilience":[257],"against":[258],"evolving":[259],"threats.":[261]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":1}],"updated_date":"2026-10-13T10:08:12.033832","created_date":"2025-10-10T00:00:00"}