Article Details

Title · Authors · Abstract · Keywords · DOI · References

Overview of IoT Security Threats to Ship Digital Twins Authors

MA Chuan1, ZHU Yulei1, LIU Huifei1, GONG Jiahao2

(1.Zhoushan COSCO Shipping Heavy Industry Co., Ltd., Zhoushan 316131, China; 2.Tongji University, Shanghai 201804, China)

Section：Internet of Things · Vol. 2026, Issue 2 · Pages：187-193 · 2096-4706（2026）02-0187-07 · CLC number：TP309 · Document code：A · DOI：10.19850/j.cnki.2096-4706.2026.02.035

Abstract

With the acceleration of digital transformation in the shipbuilding industry, Digital Twin technology significantly improves the efficiency of ship design, manufacturing, and operation and maintenance through the real-time interaction between physical ships and digital models. However, ship Digital Twin systems under the Internet of Things (IoT) environment face multiple security threats. This paper systematically analyzes the core architecture and application scenarios of ship Digital Twin technology and focuses on the IoT security challenges it faces. The study finds that expanded attack surfaces, data leakage and tampering, identity authentication loopholes, network attacks (such as Man-in-the-Middle attacks and DDoS attacks), and software attacks are the main threats. These risks not only threaten the integrity of sensitive data but also affect the navigation safety of ships through remote control. The study further points out that existing security protection measures have deficiencies in standardization, dynamic authentication mechanisms, and cross-layer collaborative defense. By reviewing literature and analyzing cases, this paper provides theoretical support for the security protection of ship Digital Twin technology and calls on the industry to pay attention to security governance throughout the full life cycle.

Keywords

data leakage; identity authentication; network attack; software attack

References

  1. [1] Yang Shaolong, Sun Yanhao, Xiang Xianbo, etc A review of research on ship digital twin and its service lifecycle [J]. Journal of Ship Science and Technology, 2020, 42 (21): 1-8
  2. [2] ECKHART M，EKELHART A， ALLISON D，et al. Security-Enhancing Digital Twins: Characteristics, Indicators, and Future Perspectives [J].IEEE Security & Privacy，2023，21（6）：64-75.
  3. [3] Tao Fei, Liu Weiran, Liu Jianhua, etc Exploration of Digital Twins and Their Applications [J]. Computer Integrated Manufacturing Systems, 2018, 24 (1): 1-18
  4. [4] Li Xin, Liu Xiu, Wan Xinxin Overview of Digital Twin Applications and Security Development [J]. Journal of System Simulation, 2019, 31 (3): 385-392
  5. [5] Li Kai, Qian Hao, Gong Mengyao, etc Exploration of Digital Ships and Their Applications Based on Digital Twin Technology [J]. Ship, 2018, 29 (6): 101-108
  6. [6] Guo Suchang, Huang Jintao, Deng Leisheng, etc Research on Network Security Digital Twin [J]. Information Security and Communication Confidentiality, 2023 (6): 29-39
  7. [7] ALHAMAM N，HAFIZUR RAHMAN MM，ALJUGHAIMAN A. A Comprehensive Review on Cybersecurity of Digital Twins Issues, Challenges, and Future Research Directions [J].IEEE Access，2025，13：45106-45124.
  8. [8] BOKHAR M U，SHALLAL Q M. A Review on Symmetric Key Encryption Techniques in Cryptography [J].International Journal of Computer Applications，2016，147（10）：43-48.
  9. [9] Zhang Xiang Design of Medical Network Data Security Protection System Based on Digital Twin Technology [J]. Intelligent IoT Technology, 2025, 57 (1): 71-74
  10. [10] ALCARAZ C，LOPEZ J. Digital Twin: A Comprehensive Survey of Security Threats [J].IEEE Communications Surveys & Tutorials，2022，24（3）：1475-1503.
  11. [11] KARAARSLAN E，BABIKER M. Digital Twin Security Threats and Countermeasures: An Introduction [C]//2021 International Conference on Information Security and Cryptology (ISCTURKEY).Ankara：IEEE，2021：7-11.
  12. [12] WANASINGHE T R，WROBLEWSKI L，PETERSEN B K，et al. Digital Twin for the Oil and Gas Industry: Overview, Research Trends, Opportunities, and Challenges [J].IEEE Access，2020，8：104175-04197.
  13. [13] WANG Y T，SU Z，GUO S L，et al. A Survey on Digital Twins: Architecture, Enabling Technologies, Security and Privacy, and Future Prospects [J].IEEE Internet of Things Journal，2023，10（17）：14965-14987.
  14. [14] XU H S，WU J，PAN Q Q，et al. A Survey on Digital Twin for Industrial Internet of Things: Applications, Technologies and Tools [J].IEEE Communications Surveys & Tutorials，2023，25（4）：2569-2598.
  15. [15] HASHMI R，LIU H，YAVARI A. Digital Twins for Enhancing Efficiency and Assuring Safety in Renewable Energy Systems: A Systematic Literature Review [J/OL].Energies，2024，17（11）：2456[2025-05-03].https://doi.org/10.3390/en17112456.
  16. [16] LIPSA S，DASH RK，CENGIZ K. Mitigating Security Threats for Digital Twin Platform: A Systematic Review with Future Scope and Research Challenges [J].International Journal of Electronics and Communications Systems，2024，4（1）：1-17.
  17. [17] JØRGENSEN C S，SHUKLA A，KATT B. Digital Twins in Healthcare: Security, Privacy, Trust and Safety Challenges [C]//Computer Security. ESORICS 2023 International Workshops.The Hague：Springer，2024：140-153.
  18. [18] AZAMBUJA A J G，GIESE T，SCHÜTZER K，et al. Digital Twins in Industry 4.0 - Opportunities and Challenges Related to Cyber Security [J].Procedia CIRP，2024，121：25-30.
  19. [19] HE C，LUAN T H，LU R X，et al. Security and Privacy in Vehicular Digital Twin Networks: Challenges and Solutions [J].IEEE Wireless Communications，2023，30（4）：154-160.
  20. [20] HOLMES D，PAPATHANASAKI M，MAGLARAS L，et al. Digital Twins and Cyber Security - solution or Challenge? [C]//2021 6th South-East Europe Design Automation, Computer Engineering, Computer Networks and Social Media Conference (SEEDA-CECNSM).Preveza：IEEE，2021：1-8.
  21. [21] ZEMSKOV A D，FU Y，LI R，et al. Security and Privacy of Digital Twins for Advanced Manufacturing: A Survey [J/OL].arXiv:2412.13939 [eess.SY].[2025-04-17].https://doi.org/10.48550/arXiv.2412.13939.
  22. [22] LUO X F，WEN J B，KANG J W，et al. Privacy Attacks and Defenses for Digital Twin Migrations in Vehicular Metaverses [J].IEEE Network，2023，37（6）：82-91.
  23. [23] ABDULLAHI S M，ZARE A，LAZAROVA-MOLNAR S. Cybersecurity in Distributed Industrial Digital Twins: Threats, Defenses, and Key Takeaways [C]//DiDiT 2024: 1st International Workshop on Distributed Digital Twins.Groningen：CEUR-WS，2024：1-18.
  24. [24] RAGHURAMU A，LILJENSTAM M，UJJWAL S，et al. Network Digital Twins: A Threat Analysis [C]//2023 IEEE International Conference on Communications Workshops (ICC Workshops).Rome：IEEE，2023：733-739.
  25. [25] JAFARI M，KAVOUSI-FARD A，CHEN T，et al. A Review on Digital Twin Technology in Smart Grid, Transportation System and Smart City: Challenges and Future [J].IEEE Access，2023，11：17471-17484.
  26. [26] SUHAIL S，HUSSAIN R，JURDAK R，et al. Blockchain-Based Digital Twins: Research Trends, Issues, and Future Challenges [J].ACM Computing Surveys (CSUR)，2022，54（11s）：1-34.
  27. [27] HEMDAN E E，EL-SHAFAI W，SAYED A. Integrating Digital Twins with IoT-Based Blockchain: Concept, Architecture, Challenges, and Future Scope [J].Wireless Personal Communications，2023，131：2193-2216.
  28. [28] SUHAIL S，JURDAK R，HUSSAIN R. Security Attacks and Solutions for Digital Twins [J/OL].arXiv:2202.12501 [cs.CR].[2025-05-03].https://doi.org/10.1016/j.compind.2023.103961.
  29. [29] VANDERHORN E，MAHADEVAN S. Digital Twin: Generalization, Characterization and Implementation [J/OL].Decision Support Systems，2021，145：113524[2025-03-28].https://doi.org/10.1016/j.dss.2021.113524.
  30. [30] OTOOM S. Risk Auditing for Digital Twins in Cyber Physical Systems: A Systematic Review [J].Journal of Cyber Security and Risk Auditing，2025（1）：22-35.
  31. [31] QIN B L，PAN H，DAI Y Y，et al. Machine and Deep Learning for Digital Twin Networks: A Survey [J].IEEE Internet of Things Journal，2024，11（21）：34694-34716.
  32. [32] Li Zheng Research on Data Security Sharing and Incentive Mechanisms for Digital Twin Networks [D]. Xi'an: Xi'an University of Electronic Science and Technology, 2023
  33. [33] JEREMIAH S R，AZZAOUI A E，XIONG N N，et al. A Comprehensive Survey of Digital Twins: Applications, Technologies and Security Challenges [J/OL].Journal of Systems Architecture，2024，151：103120[2025-04-06].https://doi.org/10.1016/j.sysarc.2024.103120.
  34. [34] SIRIGU G， CARMINATI B， FERRARI E. Privacy and Security Issues for Human Digital Twins [C]//2022 IEEE 4th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA).Atlanta：IEEE，2022：1-9.
  35. Ren Qiankun, Xiong Xinli, Liu Jingju, etc Research on Digital Twin Technology in Cyberspace Security [J]. Journal of System Simulation, 2024, 36 (8): 1944-1957
  36. [36] HEARN M，RIX S. Cybersecurity Considerations for Digital Twin Implementations [J].IIC Journal of Innovation，2024，10：107-113.
  37. [37] SNEPS-SNEPPE M，NAMIOT D. On Digital Twin Software and Cyber Threats [C]//Internet of Things, Smart Spaces, and Next Generation Networks and Systems，Tashkent：Springer，2023：481-493.
  38. [38] EMPL P，PERNUL G. Digital-Twin-Based Security Analytics for the Internet of Things [J/OL].Information，2023，14（2）：95[2025-04-12].https://doi.org/10.3390/info14020095.
  39. [39] Wang Jie, Yu Hailan Design of Wireless Sensor Network Security Mechanism Based on Internet of Things [J]. Information Recording Materials, 2025, 26 (1): 35-37, 99
  40. [40] Lu Yaru Research on the Security of IoT Sensor Nodes in Smart Pipeline Network [J]. Safety, Health and Environment, 2024, 24 (7): 16-20
  41. Zhao Shaofei, Lv Liping, Yue Jianhui A Brief Analysis of the Means and Preventive Measures of Man in the Middle Attacks [J]. Network Security Technology and Applications, 2023 (12): 21-22
  42. [42] ČEKEREVAC Z，CEKEREVAC P，PRIGODA L，et al. Security Risks from the Modern Man-in-the-middle Attacks [J].MEST Journal，2025，13（1）：34-51.
  43. [43] Xu Jing Research on Identity Authentication Based on Vehicle mounted Digital Twins [D]. Xi'an: Xi'an University of Electronic Science and Technology, 2022
  44. [44] FERRAG M A，MAGLARAS L A，JANICKE H，et al. Authentication Protocols for Internet of Things: A Comprehensive Survey [J].Security and Communication Networks，2017（1）：1-41.
  45. [45] SABENA F，DEHGHANTANHA A，SEDDON A P. A Review of Vulnerabilities in Identity Management Using Biometrics [C]//2010 Second International Conference on Future Networks.Sanya：IEEE，2010：42-49.
  46. [46] GARRETT K，TALLURI SR，ROY S. On Vulnerability Analysis of Several Password Authentication Protocols [J].Innovations in Systems and Software Engineering，2015，11（3）：167-176.
  47. [47] DHAMIJA R，DUSSEAULT L. The Seven Flaws of Identity Management: Usability and Security Challenges [J].IEEE Security & Privacy，2008，6（2）：24-29.
  48. Xue Fangfang, Fang Dingyi, Wang Huaijun, etc Research on Software Attack Classification Method Based on Attack Purpose [J]. Computer Applications and Software, 2015, 32 (2): 283-287
  49. [49] SOMANI G，GAUR M S，SANGHI D，et al. DDoS Attacks in Cloud Computing: Issues, Taxonomy, and Future Directions [J].Computer Communications，2017，107：30-48.
  50. [50] MIRKOVIC J，REIHER P. A Taxonomy of DDoS Attack and DDoS Defense Mechanisms [J].ACM SIGCOMM Computer Communication Review，2004，34（2）：39-53.

About the authors

Ma Chuan (1979-), male, Han ethnicity, from Zouping, Shandong, is an engineer with a bachelor's degree in Ship and Ocean Engineering; Zhu Yulei (1981-), male, Han ethnicity, from Zhoushan, Zhejiang, is a senior engineer with a bachelor's degree. His research interests include technological innovation and digital transformation in shipbuilding enterprises; Liu Huifei (1987-), male, Han ethnicity, from Zhoukou, Henan, engineer, bachelor's degree, research direction: technological innovation and digital transformation of shipbuilding enterprises; Gong Jiahao (2001-), male, Tujia ethnic group, from Zhangjiajie, Hunan Province, is currently pursuing a master's degree in Control Science and Engineering.