为中小水务企业打造虚拟安全团队，自动防御网络攻击
A Virtual Cybersecurity Department for Securing Digital Twins in Water Distribution Systems
- 用开源工具构建自动化安全框架，低成本运维
- 机器学习模型在OD-IDS2022数据集上达92%检测准确率
- 适合缺乏专业安全人力的中小水务系统部署
数字孪生（DTs）提升供水系统的实时监控与决策能力，但其联网特性使其易受扫描、拒绝服务（DoS）和未授权访问等网络攻击。中小型企业（SMEs）常因预算和人力不足难以建立强大网络安全团队。为此，我们提出虚拟网络安全部门（VCD），一个专为SMEs设计的低成本、自动化安全框架。该框架集成Zabbix实现实时监控，Suricata实现网络入侵检测，Fail2Ban阻止重复登录尝试，并配合简单防火墙策略。为提升威胁检测能力，还引入基于改进集成模型的机器学习入侵检测系统（IDS），训练数据来自OD-IDS2022数据集，可有效识别暴力破解、远程代码执行（RCE）和网络洪水攻击，准确率达92%，且误报率更低。本方案为中小型水务系统提供了一种实用、高效且易于管理的安全防护路径。
原文摘要 · Abstract (English)
Digital twins (DTs) help improve real-time monitoring and decision-making in water distribution systems. However, their connectivity makes them easy targets for cyberattacks such as scanning, denial-of-service (DoS), and unauthorized access. Small and medium-sized enterprises (SMEs) that manage these systems often do not have enough budget or staff to build strong cybersecurity teams. To solve this problem, we present a Virtual Cybersecurity Department (VCD), an affordable and automated framework designed for SMEs. The VCD uses open-source tools like Zabbix for real-time monitoring, Suricata for network intrusion detection, Fail2Ban to block repeated login attempts, and simple firewall settings. To improve threat detection, we also add a machine-learning-based IDS trained on the OD-IDS2022 dataset using an improved ensemble model. This model detects cyber threats such as brute-force attacks, remote code execution (RCE), and network flooding, with 92\% accuracy and fewer false alarms. Our solution gives SMEs a practical and efficient way to secure water systems using low-cost and easy-to-manage tools.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。