Digital Twins as an Object and Tool of Information Security

Problem Statement. In the context of rapid digitalization of the economy and public administration, ensuring the information security (IS) of critical information infrastructure (CII) has become an increasingly urgent task. CII includes facilities that play a key role in the functioning of vital sectors of society such as energy, transportation, healthcare, industry, and others. As these systems grow in complexity, the need arises for advanced technologies to ensure their protection. One such tool is the use of digital twins (DTs), which enable the modeling of threats and the testing of security measures. However, the integration of DTs into IS tasks within CII encounters a number of challenges that must be addressed for the effective implementation of this technology. The aim of this study is to identify the key challenges associated with the use of digital twins in the context of CII information security. Methods. The research employs the analysis of standards, classification of problems by category (technical, organizational, legal), and evaluation of DT usage scenarios within CII. Novelty. This work identifies new aspects of DT application within CII, particularly related to model characteristics, as well as issues of verification and integrity control of digital models. Security concerns are addressed, including risks associated with open APIs and telemetry channels, which may serve as vectors for attacks. A set of measures is proposed to overcome these challenges, including the development of regulatory standards for DT usage and the enhancement of professional training. Results. Key challenges have been identified and classified into the following categories: technical, security-related, organizational, legal, and those arising from incorrect usage. Each category encompasses specific issues, the consequences of which range from modeling errors and reduced protection efficiency to threats of critical infrastructure compromise and loss of trust in the technology. Theoretical / Practical Significance. The results of this study contribute to improving approaches to ensuring the information security of CII through the use of digital twins. The proposed recommendations for addressing identified challenges can be used to enhance the reliability, safety, and effectiveness of DT implementation and operation in CII systems.