Insider Threat Detection Within Operational Technology Using Digital Twins

Managing unintentional insider threat is a growing challenge in digital industries because the biggest threat to operational technologies (OT) originates internally, irrespective of the type or size of the organisation. Data breaches and other advanced persistent threats are often caused by users with legitimate access to systems who often make genuine mistakes. This paper highlights the necessity to bring forward a more proactive approach in terms of understanding, raising awareness, and tackling unintentional insider threats. A novel effective method of securing OT systems against insider threats based on data-driven modelling and machine learning has been suggested, tested and trialled using a digital twin that provides a secure and conducive environment for addressing operational challenges in the era of Industry 4.0/5.0.