Digital testbench for security analysis of critical information infrastructure facilities of intelligent water transportation systems
Л. А. Баранов, N. D. Ivanova, Igor F. Mikhalevich · Dependability · 2025
Aim. The application of novel technologies in intelligent water transportation systems (IWTS) is associated with additional security risks that are due to the emergence of new types of threats. The automated corporate and process management systems that are part of IWTS are critical information infrastructure (CII) facilities. That imposes increased safety requirements on IWTSs. Hardware and software systems that implement such solutions are undergoing active development. In many cases, physical prototyping of IWTS facilities within reasonable periods of time is difficult and economically unviable. Modern simulation methods efficiently solve the above problems. They allow creating digital prototypes of IWTSs and IWTSs proper within secure virtual environments. That represents the subject matter of this paper. Methods. The paper uses system analysis, operations research, simulation, and IWTS security. Results. The authors examine the evolution of simulation and provide subject-matter terminology. The paper defines standard CII facilities as part of IWTS and facilities to be digitally simulated. It analyses the tools that contribute to the creation of a digital testbench for analysing the IWTS CII security. It provides a description of the digital testbench for analysing IWTS CII security, as well as examples of its operation. Conclusion. The digital testbench presented in the paper allows incorporating both existing Russian secure software and hardware systems, and those under development. It also enables IWTS security risk management. That allows using the testbench at various lifecycle stages of IWTS CII facilities. Further development of the testbench is associated with the development of digital twins of inland waterways, Russian-made software and hardware systems of IWTS CII facilities, IWTS CII computer attack protection tools and methods for hybrid security management.