DTSECOPEN DIGITAL TWIN SECURITY LAB
SECTOR GUIDE

Digital Twin Security for Water

Water twins may connect treatment, pumping, distribution, field sensors, chemical dosing, SCADA interaction, and infrastructure models. Security decisions must follow the actual architecture and operational authority of each implementation.

Published
Last reviewed
Evidence
SUPPORTED
Author
Open Digital Twin Security Lab

Architecture

Document physical assets, sensing and actuation, edge gateways, transport, ingestion, twin services, model execution, operator interfaces, enterprise integrations, and every path capable of producing or authorizing a physical effect.

Critical assets and consequences

public health, environmental protection, equipment safety, service continuity, and regulatory evidence.

Consequences depend on deployment context. Evaluate unsafe control, silent quality loss, incorrect maintenance, privacy exposure, service interruption, damaged evidence, and cascading dependencies.

Primary trust boundaries

Prioritize device-to-gateway identity, gateway-to-platform transport, source-to-record provenance, data-to-model assumptions, model-to-decision logic, and decision-to-controller authorization.

Defensive priorities

  1. Inventory every physical/digital relationship and owner.
  2. Authenticate data sources and retain usable provenance.
  3. Separate analytic recommendations from control authority.
  4. Monitor cyber state alongside physical process invariants.
  5. Exercise safe degraded operation and evidence-preserving recovery.

Research questions

  • Which state must be authoritative when trusted sources disagree?
  • What evidence is required before model output can influence operations?
  • How can the system remain safe when synchronization or connectivity fails?
PRIMARY SOURCES

References

  1. NIST IR 8356: Security and Trust Considerations for Digital Twin TechnologyNIST · 2025 · Government research publication

    Primary NIST treatment of digital-twin characteristics, cybersecurity, and trust considerations.

  2. NIST SP 800-82 Rev. 3: Guide to Operational Technology (OT) SecurityNIST · 2023 · Government guidance

    Security guidance for OT while accounting for performance, reliability, and safety requirements.

  3. NIST SP 800-160 Vol. 1 Rev. 1: Engineering Trustworthy Secure SystemsNIST · 2022 · Systems-security engineering guidance

    Principles and life-cycle activities for engineering trustworthy secure systems.