The digital twin attack surface includes every component and trust relationship that creates, transports, transforms, represents, analyzes, shares, or acts on twin state. It spans physical access, sensors, firmware, gateways, networks, identity, data stores, models, simulations, AI, APIs, operators, vendors, federation, and control systems.
Map capabilities before products
Product inventories alone miss implicit trust. Trace how a physical observation becomes a digital fact, how a model becomes a recommendation, and how a recommendation becomes a physical action.
Include lifecycle pathways
Development, test, update, remote support, model training, certificate issuance, backup, recovery, and decommissioning often hold authority equal to runtime services.
Analyze consequence
The same interface has different significance in a visualization-only twin and a closed-loop system. Record maximum plausible authority and safe failure behavior.
Related resources
References
- NIST IR 8356: Security and Trust Considerations for Digital Twin TechnologyNIST · 2025 · Government research publication
Primary NIST treatment of digital-twin characteristics, cybersecurity, and trust considerations.
- NIST SP 800-82 Rev. 3: Guide to Operational Technology (OT) SecurityNIST · 2023 · Government guidance
Security guidance for OT while accounting for performance, reliability, and safety requirements.