# Enhancing cybersecurity using Digital Twin and AI

Hugo Bourreau, Fabien Dagnat, Marc-Oliver Pahl, Fehmi Jaafar

► To cite this version:

Hugo Bourreau, Fabien Dagnat, Marc-Oliver Pahl, Fehmi Jaafar. Enhancing cybersecurity using Digital Twin and AI. RESSI 2025, May 2025, Lannrion, France. hal-05247516

HAL Id: hal-05247516

https://hal.science/hal-05247516v1

Submitted on 14 Sep 2025

HAL is a multi-disciplinary open access
archive for the deposit and dissemination of sci-
entific research documents, whether they are pub-
lished or not. The documents may come from
teaching and research institutions in France or
abroad, or from public or private research centers.

L'archive ouverte pluridisciplinaire HAL, est
destinée au dépôt et à la diffusion de documents
scientifiques de niveau recherche, publiés ou non,
émanant des établissements d'enseignement et de
recherche français ou étrangers, des laboratoires
publics ou privés.

<figure><img src="image_1.png" /></figure>

Distributed under a Creative Commons Attribution 4.0 International License
<figure><img src="image_2.png" /><figcaption>Hugo BOURREAU</figcaption></figure>

Currently pursuing a co-supervised PhD between IMT Atlantique (France) and UQAC (Canada), I'm focusing on enhancing cybersecurity through Digital Twin and AI technologies.

My research aims to develop and highlight the potential of Digital Twin in a cyber context.

I'm currently working on a survey, gathering the state of the art of the domain.

PhD Supervisors:
- Fabien DAGNAT

- Marc-Oliver PAHL

- Fehmi JAAFAR

AIRBUS

<figure><img src="image_3.png" /></figure>

BNP PARIBAS
La banque d'un monde qui change

<figure><img src="image_4.png" /></figure>

eDF

<figure><img src="image_5.png" /></figure>

<figure><img src="image_6.png" /></figure>

cyberCNI.fr/

<figure><img src="image_7.png" /><figcaption>PhD schools</figcaption></figure>

<figure><img src="image_8.png" /></figure>

<figure><img src="image_9.png" /></figure>

<figure><img src="image_10.png" /></figure>

<figure><img src="image_11.png" /></figure>

<figure><img src="image_12.png" /></figure>

<figure><img src="image_13.png" /></figure>

<figure><img src="image_14.png" /></figure>

<figure><img src="image_15.png" /></figure>

<figure><img src="image_16.png" /></figure>

<figure><img src="image_17.png" /></figure>

<figure><img src="image_18.png" /></figure>

More information about my literature review here: https://github.com/SkYiMlTo/dt4secsurvey_slr

<figure><img src="image_19.png" /><figcaption>Fig 1: Topics of my survey</figcaption></figure>

<figure><img src="image_20.png" /><figcaption>Fig 2: Feature selection of Digital Twin</figcaption></figure>

## Reproducibility of results

To ensure consistency and comparability, a common framework is essential:

- Use of standardized metrics to evaluate DT realism and performance

- Development of reusable components to simplify DT deployment

- Adoption of shared dataset and tools for reproducible experiments

Goals:

- Allow accelerated development of DT

- Enable collaboration around DT

- Be able to tell the concrete impact of DT over other tools

<figure><img src="image_21.png" /><figcaption>Fig 3: Prediction methodologies</figcaption></figure>

<figure><img src="image_22.png" /><figcaption>Fig 4: SWAT architecture</figcaption></figure>

## Future Work

### Objectives:

- Model and simulate a Cyber-Physical System (CPS) using DT

- Create DT scenarios to test against a representative attack dataset

### Approach:

- Integrate SWAT components (e.g., pump, controller)

- Simulate fixed dataset of real attacks (ransomware e.g. WannaCry, worn e.g. Stuxnet, ...)

- Evaluate DT performance in detecting and predicting sophisticated threats