{"id":"https://openalex.org/W4293234295","doi":"https://doi.org/10.1145/3510547.3517929","title":"Employing Digital Twins for Security-by-Design System Testing","display_name":"Employing Digital Twins for Security-by-Design System Testing","publication_year":2022,"publication_date":"2022-04-18","ids":{"openalex":"https://openalex.org/W4293234295","doi":"https://doi.org/10.1145/3510547.3517929"},"language":"en","primary_location":{"id":"doi:10.1145/3510547.3517929","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3510547.3517929","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3510547.3517929","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3510547.3517929","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088734950","display_name":"Marietheres Dietz","orcid":"https://orcid.org/0000-0002-6885-4622"},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marietheres Dietz","raw_affiliation_strings":["University of Regensburg, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076875082","display_name":"Leon Hageman","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Leon Hageman","raw_affiliation_strings":["University of Regensburg, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016704083","display_name":"Constantin von Hornung","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Constantin von Hornung","raw_affiliation_strings":["University of Regensburg, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068820890","display_name":"G\u00fcnther Pernul","orcid":null},"institutions":[{"id":"https://openalex.org/I60668342","display_name":"University of Regensburg","ror":"https://ror.org/01eezs655","country_code":"DE","type":"education","lineage":["https://openalex.org/I60668342"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"G\u00fcnther Pernul","raw_affiliation_strings":["University of Regensburg, Regensburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Regensburg, Regensburg, Germany","institution_ids":["https://openalex.org/I60668342"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I60668342"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"97","last_page":"106"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10763","display_name":"Digital Transformation in Industry","score":0.9908999800682068,"subfield":{"id":"https://openalex.org/subfields/2209","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12495","display_name":"Electrostatic Discharge in Electronics","score":0.9785000085830688,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/security-testing","display_name":"Security testing","score":0.6778151988983154},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6226959228515625},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6153314113616943},{"id":"https://openalex.org/keywords/control-system-security","display_name":"Control system security","score":0.47392234206199646},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.4727284014225006},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.4688222110271454},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.46764111518859863},{"id":"https://openalex.org/keywords/security-controls","display_name":"Security controls","score":0.459930956363678},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.4316387176513672},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.42429083585739136},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.4147726893424988},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.3789072036743164},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.3253748416900635},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.32248201966285706},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.2201421558856964},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.11961290240287781},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.08181223273277283}],"concepts":[{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.6778151988983154},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6226959228515625},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6153314113616943},{"id":"https://openalex.org/C172862783","wikidata":"https://www.wikidata.org/wiki/Q5165888","display_name":"Control system security","level":5,"score":0.47392234206199646},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.4727284014225006},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.4688222110271454},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.46764111518859863},{"id":"https://openalex.org/C178148461","wikidata":"https://www.wikidata.org/wiki/Q1632136","display_name":"Security controls","level":3,"score":0.459930956363678},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.4316387176513672},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.42429083585739136},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.4147726893424988},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.3789072036743164},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.3253748416900635},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.32248201966285706},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2201421558856964},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.11961290240287781},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.08181223273277283},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3510547.3517929","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3510547.3517929","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3510547.3517929","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:epub.uni-regensburg.de:52233","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.5283/epub.52233","is_oa":true,"landing_page_url":"https://doi.org/10.5283/epub.52233","pdf_url":null,"source":{"id":"https://openalex.org/S4306401229","display_name":"University of Regensburg Publication Server (University of Regensburg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60668342","host_organization_name":"University of Regensburg","host_organization_lineage":["https://openalex.org/I60668342"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"chapter"}],"best_oa_location":{"id":"doi:10.1145/3510547.3517929","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3510547.3517929","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3510547.3517929","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2022 ACM Workshop on Secure and Trustworthy Cyber-Physical Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320323803","display_name":"Bundesministerium f\u00fcr Wirtschaft und Energie","ror":"https://ror.org/02vgg2808"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4293234295.pdf","grobid_xml":"https://content.openalex.org/works/W4293234295.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W302919920","https://openalex.org/W1645615506","https://openalex.org/W2029693536","https://openalex.org/W2039427951","https://openalex.org/W2330650066","https://openalex.org/W2471947132","https://openalex.org/W2586572477","https://openalex.org/W2597956280","https://openalex.org/W2618452333","https://openalex.org/W2755214325","https://openalex.org/W2769331426","https://openalex.org/W2795852664","https://openalex.org/W2803857222","https://openalex.org/W2907933969","https://openalex.org/W2910597635","https://openalex.org/W2963753542","https://openalex.org/W2985576076","https://openalex.org/W2990143838","https://openalex.org/W3002981277","https://openalex.org/W3036994727","https://openalex.org/W3081093222","https://openalex.org/W3134108468","https://openalex.org/W4256369317"],"related_works":["https://openalex.org/W1909163279","https://openalex.org/W2152250926","https://openalex.org/W2123251735","https://openalex.org/W2940646603","https://openalex.org/W896362041","https://openalex.org/W4205206960","https://openalex.org/W2979370664","https://openalex.org/W2293554594","https://openalex.org/W2306584517","https://openalex.org/W58517048"],"abstract_inverted_index":{"Ever":[0],"since":[1],"cyber":[2],"attacks":[3],"focused":[4],"on":[5,29],"industrial":[6,23],"and":[7,31,71,179,222,240],"critical":[8],"infrastructure":[9],"settings,":[10],"the":[11,14,41,52,55,68,94,129,151,177,195,247,253,257,271],"awareness":[12],"of":[13,17,35,96,131,154,164,230,252,270],"security":[15,38,48,75,196],"issues":[16],"these":[18,61],"systems":[19,25,114],"has":[20],"increased.":[21],"These":[22],"control":[24],"(ICS)":[26],"mainly":[27],"focus":[28],"operation":[30],"availability":[32],"--":[33],"instead":[34],"providing":[36,180],"general":[37],"features.":[39],"Moreover,":[40],"current":[42],"Industry":[43],"4.0":[44],"movement":[45],"aggravates":[46],"this":[47,117,235],"gap":[49],"by":[50,128,249],"connecting":[51],"ICS":[53],"to":[54,112,140,159,203,225,259],"enterprise":[56],"network,":[57],"which":[58,87],"facilitates":[59],"targeting":[60],"systems.":[62],"Proper":[63],"system":[64,97,126,143,190,207,248],"testing":[65,127,191,208],"can":[66,174,245,265],"reveal":[67],"system's":[69,200],"vulnerabilities":[70,171,239],"provide":[72],"remedies.":[73],"However,":[74],"measures":[76],"are":[77],"usually":[78],"neglected":[79],"or":[80],"addressed":[81],"after":[82],"an":[83,121,243,268],"emerging":[84],"incident":[85],"only,":[86],"results":[88],"in":[89,176,194,263,267],"high":[90],"costs.":[91],"To":[92,148],"maximize":[93],"benefit":[95],"testing,":[98],"we":[99,119,213,237],"argue":[100],"that":[101],"it":[102],"should":[103],"be":[104],"carried":[105],"out":[106,227],"as":[107,109],"early":[108],"possible,":[110],"especially":[111],"render":[113],"secure-by-design.":[115],"In":[116],"work,":[118],"propose":[120],"approach":[122,209],"for":[123],"introducing":[124],"security-by-design":[125,189,206],"application":[130],"a":[132,142,161,165,181,199,205,215,219],"digital":[133,136,155,211,216],"twin.":[134],"A":[135],"twin":[137,156,217],"is":[138,157,192],"able":[139],"represent":[141],"virtually":[144],"along":[145,198],"its":[146],"lifecycle.":[147,201],"enable":[149],"security-by-design,":[150],"simulation":[152],"capability":[153],"harnessed":[158],"create":[160],"prospective":[162],"environment":[163],"planned":[166],"system.":[167],"This":[168],"allows":[169],"detecting":[170],"before":[172],"they":[173],"emerge":[175],"real-world":[178],"adequate":[182],"risk":[183],"strategy.":[184],"Our":[185],"work":[186],"shows":[187],"how":[188,224,242],"anchored":[193],"applications":[197],"Next":[202],"proposing":[204],"with":[210,256],"twins,":[212],"implement":[214],"representing":[218],"pressure":[220,254],"vessel,":[221],"demonstrate":[223],"carry":[226],"each":[228],"step":[229],"our":[231],"proposed":[232],"approach.":[233],"During":[234],"proof-of-concept,":[236],"identify":[238],"show":[241],"attacker":[244],"compromise":[246],"manipulating":[250],"values":[251],"vessel":[255],"potential":[258],"cause":[260],"over-pressure,":[261],"which,":[262],"turn,":[264],"result":[266],"explosion":[269],"vessel.":[272]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}