---
格式版本: 2
标题: "An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments"
原文链接: "https://arxiv.org/abs/2608.17650"
发布日期: "2026-08-18"
发布时间校准状态: "found"
发布时间需复核: "否"
发布时间来源: "rule:local:strict_original_body"
发布时间证据: "**\\[v1\\]** Tue, 18 Aug 2026 11:10:11 UTC (1,079 KB)"
发布时间校准原因: "规则确认唯一严格发布时间，来源 local:strict_original_body"
发布时间校准置信度: "high"
发布时间候选数量: 18
发布时间严格候选数量: 6
发布时间原页读取状态: "source template page reused from URL open"
发布时间未找到原因: ""
发布时间校准时间: "2026-08-20T15:38:26+08:00"
发布时间仲裁状态: "skipped"
发布时间仲裁尝试次数: 0
发布时间仲裁耗时毫秒: 0
发现时间: "2026-08-20T15:33:55+08:00"
入库时间: "2026-08-20T07:38:26.237Z"
来源平台: "arXiv 学术论文搜索"
搜索渠道: "source_template"
搜索词: "https://arxiv.org/search/?query=latency&searchtype=all"
匹配关键词:
  - "latency"
相关厂家:
  []
相关专家:
  []
内容类型: "网页"
抓取工具: "Free Fetch + Defuddle"
清洗工具: "Defuddle Markdown + Defuddle/Readability 正文提取"
原始附件:
  []
AI优质: "否"
AI打分: 0
AI分档: "非优质"
AI质检状态: "不通过"
AI打分理由: "该资料为医院IT/OT网络安全测试床的学术论文，主题涉及医疗系统网络攻击仿真，与超节点、AI Rack、机柜级AI基础设施及供电散热互连等完全无关。"
AI质检模型: "ali-deepseek-v4-flash"
AI质检时间: "2026-08-20T15:41:33+08:00"
AI主题相关性: 0
AI来源权威性: 0
AI新颖性: 0
AI技术细节: 0
AI商业部署信号: 0
AI完整性: 0
AI摘要: "研究者构建了一个仿真锚定的医院IT/OT网络安全实验台，并扩展为数字孪生，支持模拟网络攻击、防御训练和补丁评估。实验显示开销极低，容器平均CPU利用率低于0.4%，Modbus TCP操作中位延迟为0.901毫秒。"
AI摘要模型: "ali-deepseek-v4-flash"
AI摘要时间: "2026-09-07T03:21:55.241Z"
采集批次: "2026年8月20日14点19分32秒"
采集批次ID: "20260820-141932-079"
去重键: "https://arxiv.org/abs/2608.17650"
---

## Computer Science > Cryptography and Security

## Title:An Emulation Anchored Digital Twin Testbed for Cyberattack and Defense Analysis in Hospital IT OT Environments

Authors:[Prashant Rawat](https://arxiv.org/search/cs?searchtype=author&query=Rawat,+P), [Ravi Kumar Bairagi](https://arxiv.org/search/cs?searchtype=author&query=Bairagi,+R+K), [Arunima](https://arxiv.org/search/cs?searchtype=author&query=Arunima), [Geeta Yadav](https://arxiv.org/search/cs?searchtype=author&query=Yadav,+G)

[View PDF](https://arxiv.org/pdf/2608.17650) [HTML (experimental)](https://arxiv.org/html/2608.17650v1)

> Abstract:Modern hospitals increasingly rely on integrated Information Technology (IT) and Operational Technology (OT) infrastructures to support critical healthcare services. However, this convergence expands the cybersecurity attack surface and makes safe validation of defensive mechanisms difficult on live systems. Existing testbeds often focus on isolated IT or OT environments and do not capture realistic cross-domain healthcare interactions. This work presents a hospital IT and OT cybersecurity testbed coupled with a digital twin for monitoring, experimentation, and validation of countermeasures. The testbed emulates a central server, Electronic Health Record (EHR) systems, SCADA-based infrastructure, and segmented IT, OT, and DMZ networks. It supports controlled cyberattack execution, software-patch evaluation, and training of RL-based defense agents. The testbed is further extended to a digital twin that models the real-time state of the environment using log and network statistics and enables bidirectional interaction through command execution and container lifecycle orchestration. Modbus/TCP and FHIR/HL7 support realistic communication across healthcare and industrial components. Experimental evaluation shows low computation overhead, with average normalized CPU utilization below 0.4 % per container and most lightweight services operating below 0.01%. OpenPLC Modbus TCP operations achieve a median round-trip latency of 0.901 ms. The testbed also captures a multi-stage SSH-based attack propagating from the DMZ to the IT and PLC networks. The framework provides a foundation for extending the emulated environment toward a hardware-enabled hospital digital twin.

| Subjects: | Cryptography and Security (cs.CR) |
| --- | --- |
| Cite as: | [arXiv:2608.17650](https://arxiv.org/abs/2608.17650) \[cs.CR\] |
|  | (or [arXiv:2608.17650v1](https://arxiv.org/abs/2608.17650v1) \[cs.CR\] for this version) |
|  | [https://doi.org/10.48550/arXiv.2608.17650](https://doi.org/10.48550/arXiv.2608.17650) |

## Submission history

From: Geeta Yadav \[[view email](https://arxiv.org/show-email/649822d7/2608.17650)\]  
**\[v1\]** Tue, 18 Aug 2026 11:10:11 UTC (1,079 KB)

[Which authors of this paper are endorsers?](https://arxiv.org/auth/show-endorsers/2608.17650) | Disable MathJax ([What is MathJax?](https://info.arxiv.org/help/mathjax.html))