用数字孪生与AI生成真实攻防场景，提升网络安全教学实战性。
Enabling Cyber Security Education through Digital Twins and Generative AI
- 构建基于数字孪生的攻防演练平台，集成自研渗透工具链。
- 引入大模型提供实时反馈与自然语言威胁解释，增强学习效果。
- 适合高校安全课程与企业实训，解决理论与实战脱节问题。
数字孪生（DT）在网络安全领域日益重要，能复现复杂的IT、OT和IoT基础设施，实现实时监控、威胁分析与系统仿真。本研究探讨将数字孪生与渗透测试工具及大型语言模型（LLMs）结合，以提升网络安全教育与实战准备能力。通过模拟真实网络环境，该方法为探索漏洞与防御策略提供了实践性、互动性强的框架。核心是红队刀具（RTK），一个符合攻击链（Cyber Kill Chain）模型的定制渗透测试工具包，引导学习者完成侦察、利用与响应等关键阶段。大语言模型（LLMs）进一步提供智能实时反馈、自然语言威胁解析和自适应学习支持。该数字孪生-大模型联合框架已在学术环境中试点，用于培养漏洞评估、威胁检测与安全运营的实操技能。初步结果表明，该融合方案显著提升了训练的有效性与相关性，弥合了理论知识与实际应用之间的鸿沟。研究证明，数字孪生与大模型协同可有效推动网络安全教育变革，以应对不断演进的行业需求。
原文摘要 · Abstract (English)
Digital Twins (DTs) are gaining prominence in cybersecurity for their ability to replicate complex IT (Information Technology), OT (Operational Technology), and IoT (Internet of Things) infrastructures, allowing for real time monitoring, threat analysis, and system simulation. This study investigates how integrating DTs with penetration testing tools and Large Language Models (LLMs) can enhance cybersecurity education and operational readiness. By simulating realistic cyber environments, this approach offers a practical, interactive framework for exploring vulnerabilities and defensive strategies. At the core of this research is the Red Team Knife (RTK), a custom penetration testing toolkit aligned with the Cyber Kill Chain model. RTK is designed to guide learners through key phases of cyberattacks, including reconnaissance, exploitation, and response within a DT powered ecosystem. The incorporation of Large Language Models (LLMs) further enriches the experience by providing intelligent, real-time feedback, natural language threat explanations, and adaptive learning support during training exercises. This combined DT LLM framework is currently being piloted in academic settings to develop hands on skills in vulnerability assessment, threat detection, and security operations. Initial findings suggest that the integration significantly improves the effectiveness and relevance of cybersecurity training, bridging the gap between theoretical knowledge and real-world application. Ultimately, the research demonstrates how DTs and LLMs together can transform cybersecurity education to meet evolving industry demands.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品；中文卡片由大模型生成，请以原文为准。