A Digital Twin Network for Proactive Security: The Smart Grid Use-Case

As IT systems become increasingly complex and challenging to manage, Software Defined Networks (SDNs) are establishing the foundation for externally managed network infrastructures. In alignment with SDN principles, Digital Twin Network (DTN) technology offers significant potential to enhance network security accuracy and proactiveness. This paper presents a formal, comprehensive architecture that seamlessly integrates real-time monitoring capabilities, security policy enforcement mechanisms, and predictive analytics within a unified digital twin model. The architecture has been implemented in a smart grid case study, showcasing its usage in environments characterized by proprietary protocols and heterogeneous device ecosystems. The architecture incorporates advanced VLAN segmentation approaches and adaptive firewall policy management while maintaining cross-network visibility. This research establishes a reference for future DTN security applications leveraging SDN environments, offering enhanced visibility, faster incident detection, and more effective threat mitigation strategies for complex network infrastructures.