DIGITAL TWINS AND VIRTUALIZED TESTBEDS FOR INVESTIGATING CYBERATTACKS AGAINST ELECTRIC POWER SYSTEMS

Abstract

This article examines the application of digital twins and virtualized testbeds to cybersecurity research involving power generation, transmission, and distribution systems. It analyzes the limitations of conventional industrial control system security testing and the need for experimental platforms combining physical process models, industrial communication protocols, supervisory control components, and defensive monitoring. A methodological architecture is proposed for safe and reproducible cyber-physical experiments, separating the simulated electrical process from virtualized controllers, SCADA components, and evidence collection systems. The study discusses IEC 60870-5-104, DNP3, Modbus TCP, and PROFINET, together with the role of process-aware telemetry in anomaly detection. Evaluation criteria are introduced for experimental fidelity, observability, reproducibility, and operational safety. The proposed approach is methodological and requires subsequent empirical validation.