{"id":"https://openalex.org/W4413368975","doi":"https://doi.org/10.1007/s10207-025-01113-0","title":"Digital Twin-Enabled Incident Detection and Response: A Systematic Review of Critical Infrastructures Applications","display_name":"Digital Twin-Enabled Incident Detection and Response: A Systematic Review of Critical Infrastructures Applications","publication_year":2025,"publication_date":"2025-08-21","ids":{"openalex":"https://openalex.org/W4413368975","doi":"https://doi.org/10.1007/s10207-025-01113-0"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-025-01113-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01113-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01113-0.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01113-0.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106718665","display_name":"Konstantinos E. Kampourakis","orcid":null},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Konstantinos E. Kampourakis","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071334624","display_name":"Vasileios Gkioulos","orcid":"https://orcid.org/0000-0001-7304-3835"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Vasileios Gkioulos","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038704333","display_name":"Georgios Kavallieratos","orcid":"https://orcid.org/0000-0003-1278-1943"},"institutions":[{"id":"https://openalex.org/I12337491","display_name":"University Graduate Center","ror":"https://ror.org/01svqjv39","country_code":"NO","type":"education","lineage":["https://openalex.org/I12337491"]},{"id":"https://openalex.org/I4210090492","display_name":"Kjeller Innovasjon (Norway)","ror":"https://ror.org/000e19x32","country_code":"NO","type":"company","lineage":["https://openalex.org/I4210090492"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Georgios Kavallieratos","raw_affiliation_strings":["Department of Technology Systems, University of Oslo, 2007, Kjeller, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Technology Systems, University of Oslo, 2007, Kjeller, Norway","institution_ids":["https://openalex.org/I4210090492","https://openalex.org/I12337491"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103166673","display_name":"Jia\u2010Chun Lin","orcid":"https://orcid.org/0000-0003-3374-8536"},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Jia-Chun Lin","raw_affiliation_strings":["Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Security and Communication Technology, Norwegian University of Science and Technology, Gj\u00f8vik, 2802, Norway","institution_ids":["https://openalex.org/I204778367"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5106718665"],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":{"value":2590,"currency":"EUR","value_usd":3190},"apc_paid":{"value":2590,"currency":"EUR","value_usd":3190},"fwci":10.3259,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.98555844,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":100},"biblio":{"volume":"24","issue":"5","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},"topics":[{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}},{"id":"https://openalex.org/T12737","display_name":"Electrical Fault Detection and Protection","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9456999897956848,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7070465087890625},{"id":"https://openalex.org/keywords/incident-response","display_name":"Incident response","score":0.5116841793060303},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4254380762577057},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4108860194683075},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3367857038974762}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7070465087890625},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.5116841793060303},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4254380762577057},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4108860194683075},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3367857038974762}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10207-025-01113-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01113-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01113-0.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10207-025-01113-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01113-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01113-0.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4413368975.pdf","grobid_xml":"https://content.openalex.org/works/W4413368975.grobid-xml"},"referenced_works_count":104,"referenced_works":["https://openalex.org/W23242426","https://openalex.org/W186035943","https://openalex.org/W1856554806","https://openalex.org/W2055452710","https://openalex.org/W2150952649","https://openalex.org/W2161374186","https://openalex.org/W2320204756","https://openalex.org/W2512711899","https://openalex.org/W2560646185","https://openalex.org/W2626325959","https://openalex.org/W2770791443","https://openalex.org/W2774161712","https://openalex.org/W2798336999","https://openalex.org/W2803857222","https://openalex.org/W2892859754","https://openalex.org/W2969943932","https://openalex.org/W2980671025","https://openalex.org/W2985576076","https://openalex.org/W3007107541","https://openalex.org/W3036286896","https://openalex.org/W3081093222","https://openalex.org/W3088400155","https://openalex.org/W3088446467","https://openalex.org/W3097471692","https://openalex.org/W3114699748","https://openalex.org/W3123390881","https://openalex.org/W3138191843","https://openalex.org/W3144411758","https://openalex.org/W3157680283","https://openalex.org/W3181987360","https://openalex.org/W3184932975","https://openalex.org/W3193358000","https://openalex.org/W3198776231","https://openalex.org/W3201640968","https://openalex.org/W3210807638","https://openalex.org/W3211182767","https://openalex.org/W4200629745","https://openalex.org/W4205103167","https://openalex.org/W4206707323","https://openalex.org/W4210336026","https://openalex.org/W4213201928","https://openalex.org/W4214486676","https://openalex.org/W4226071018","https://openalex.org/W4226103498","https://openalex.org/W4236765470","https://openalex.org/W4248763076","https://openalex.org/W4250399327","https://openalex.org/W4280493844","https://openalex.org/W4285055378","https://openalex.org/W4285090724","https://openalex.org/W4285205927","https://openalex.org/W4285731057","https://openalex.org/W4287835673","https://openalex.org/W4288956373","https://openalex.org/W4292266154","https://openalex.org/W4293004060","https://openalex.org/W4293238230","https://openalex.org/W4293637494","https://openalex.org/W4294691615","https://openalex.org/W4298126988","https://openalex.org/W4299554931","https://openalex.org/W4306392963","https://openalex.org/W4313480243","https://openalex.org/W4313481358","https://openalex.org/W4322731239","https://openalex.org/W4362514681","https://openalex.org/W4378765272","https://openalex.org/W4379621691","https://openalex.org/W4380982224","https://openalex.org/W4383315329","https://openalex.org/W4385562826","https://openalex.org/W4385688351","https://openalex.org/W4385713428","https://openalex.org/W4389201145","https://openalex.org/W4390489146","https://openalex.org/W4390561469","https://openalex.org/W4390825859","https://openalex.org/W4391425705","https://openalex.org/W4391877654","https://openalex.org/W4392014897","https://openalex.org/W4392711120","https://openalex.org/W4392946468","https://openalex.org/W4393087172","https://openalex.org/W4393201813","https://openalex.org/W4393238276","https://openalex.org/W4393990833","https://openalex.org/W4394018687","https://openalex.org/W4396214404","https://openalex.org/W4398165763","https://openalex.org/W4399055943","https://openalex.org/W4399266603","https://openalex.org/W4400507813","https://openalex.org/W4401217752","https://openalex.org/W4402675810","https://openalex.org/W4402812059","https://openalex.org/W4403390746","https://openalex.org/W4403675410","https://openalex.org/W4404420570","https://openalex.org/W4404580064","https://openalex.org/W4404800485","https://openalex.org/W4405613780","https://openalex.org/W4405862511","https://openalex.org/W4410448959","https://openalex.org/W6784472380"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4251008024","https://openalex.org/W2170135113","https://openalex.org/W4403882784","https://openalex.org/W136373522","https://openalex.org/W1996967322","https://openalex.org/W2060145807","https://openalex.org/W4248806346"],"abstract_inverted_index":{"Abstract":[0],"The":[1],"escalating":[2],"digital":[3],"interconnectivity":[4],"of":[5,28,57,114,140],"Critical":[6],"Infrastructure":[7],"(CI)":[8],"necessitates":[9],"robust":[10],"cybersecurity":[11,185],"solutions,":[12],"particularly":[13],"for":[14,86,110,159,209],"effective":[15],"incident":[16,73,95,115,160,186],"detection":[17,63,161,187],"and":[18,45,67,93,107,135,162,180,188,203],"response.":[19],"This":[20],"systematic":[21,149],"literature":[22],"review":[23,79],"explores":[24],"the":[25,108,175],"promising":[26],"role":[27],"Digital":[29],"Twins":[30],"(DTs)":[31],"in":[32,123],"enhancing":[33],"these":[34,146,165],"critical":[35,195],"functions":[36],"across":[37],"diverse":[38],"CI":[39,87,157,191],"sectors,":[40],"including":[41,101],"smart":[42],"cities,":[43],"healthcare,":[44],"energy.":[46],"Covering":[47],"research":[48],"from":[49],"2019":[50],"onwards,":[51],"we":[52,119],"conduct":[53],"an":[54],"in-depth":[55],"analysis":[56,150],"27":[58],"curated":[59],"articles,":[60],"examining":[61],"attacks,":[62],"methods,":[64],"response":[65,116,163,189],"techniques,":[66],"emerging":[68],"trends":[69],"specifically":[70,181],"related":[71],"to":[72],"handling":[74],"within":[75,190],"this":[76,172],"domain.":[77],"Our":[78],"reveals":[80],"DTs":[81,153],"as":[82,127,205],"a":[83,194,206],"powerful":[84],"tool":[85],"cybersecurity,":[88],"enabling":[89],"proactive":[90],"threat":[91,137],"simulation":[92],"improved":[94],"management":[96],"capabilities.":[97,144],"However,":[98],"challenges":[99,166],"persist,":[100],"scalability,":[102],"interoperability":[103],"with":[104],"legacy":[105],"systems,":[106],"need":[109],"rigorous":[111],"real-world":[112],"validation":[113],"effectiveness.":[117],"Furthermore,":[118],"identify":[120],"common":[121],"shortcomings":[122],"existing":[124],"research,":[125],"such":[126],"algorithmic":[128],"flaws,":[129],"inadequate":[130],"validation,":[131],"poor":[132],"metric":[133],"reporting,":[134],"insufficient":[136],"modeling,":[138],"all":[139],"which":[141],"impact":[142],"incident-handling":[143],"Despite":[145],"limitations,":[147],"our":[148,170],"underscores":[151],"that":[152],"can":[154],"significantly":[155],"bolster":[156],"security":[158],"when":[164],"are":[167],"addressed.":[168],"To":[169],"knowledge,":[171],"work":[173],"provides":[174],"first":[176],"full-fledged":[177],"survey":[178],"uniquely":[179],"focused":[182],"on":[183],"DT-enabled":[184],"contexts,":[192],"addressing":[193],"gap":[196],"not":[197],"comprehensively":[198],"covered":[199],"by":[200],"prior":[201],"reviews":[202],"serving":[204],"foundational":[207],"resource":[208],"stakeholders.":[210]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-10T14:10:52.464848","created_date":"2025-10-10T00:00:00"}
