TwinFedPot: Honeypot Intelligence Distillation into Digital Twin for Persistent Smart Traffic Security

[EN] The integration of digital twins (DTs) with intelligent traffic systems (ITSs) holds strong potential for improving real-time management in smart cities. However, securing digital twins remains a significant challenge due to the dynamic and adversarial nature of cyber-physical environments. In...

ver descrição completa

Detalhes bibliográficos
Autores: Sahraoui, Yesin, Hadjkouider, Abdessalam Mohammed, Kerrache, Chaker Abdelaziz, Tavares De Araujo Cesariny Calafate, Carlos Miguel|||0000-0001-5729-3041
Tipo de documento: artigo
Data de publicação:2025
País:España
Recursos:Universitat Politècnica de València (UPV)
Repositório:RiuNet. Repositorio Institucional de la Universitat Politécnica de Valéncia
Idioma:inglês
OAI Identifier:oai:riunet.upv.es:10251/230418
Acesso em linha:https://riunet.upv.es/handle/10251/230418
Access Level:Acceso aberto
Palavra-chave:Digital twin
Honeypots
Federated distillation
Zero-Shot Learning
Cybersecurity
Internet of Vehicles (IoV)
Descrição
Resumo:[EN] The integration of digital twins (DTs) with intelligent traffic systems (ITSs) holds strong potential for improving real-time management in smart cities. However, securing digital twins remains a significant challenge due to the dynamic and adversarial nature of cyber-physical environments. In this work, we propose TwinFedPot, an innovative digital twin-based security architecture that combines honeypot-driven data collection with Zero-Shot Learning (ZSL) for robust and adaptive cyber threat detection without requiring prior sampling. The framework leverages Inverse Federated Distillation (IFD) to train the DT server, where edge-deployed honeypots generate semantic predictions of anomalous behavior and upload soft logits instead of raw data. Unlike conventional federated approaches, TwinFedPot reverses the typical knowledge flow by distilling collective intelligence from the honeypots into a central teacher model hosted on the DT. This inversion allows the system to learn generalized attack patterns using only limited data, while preserving privacy and enhancing robustness. Experimental results demonstrate significant improvements in accuracy and F1-score, establishing TwinFedPot as a scalable and effective defense solution for smart traffic infrastructures.