Search papers, labs, and topics across Lattice.
This paper introduces ByzTwin-Range, a novel cyber-range architecture that combines a production-grade Byzantine Fault Tolerant (BFT) system with a Digital Twin (DT) for realistic testing and validation. The DT mirrors real-time system state, enabling "What-if" analyses, fault injection, and identification of synchrony vulnerabilities that can undermine BFT guarantees. Insights from the DT are securely fed back into the operational deployment, facilitating continuous validation and adaptive hardening of Cyber-Physical Systems (CPS).
Uncover hidden vulnerabilities in your Byzantine Fault Tolerant systems with a Digital Twin that exposes timing-sensitive exploits and adversarial delays.
Critical infrastructures increasingly rely on interconnected and software-driven Cyber-Physical Systems (CPS), exposing operational processes to both accidental failures and sophisticated adversarial behavior. While Byzantine Fault Tolerant (BFT) protocols offer robustness against arbitrary faults, evaluating their behavior under realistic cyber-physical conditions remains challenging: traditional cyber ranges lack timing fidelity, and testing in production environments is unsafe. This paper introduces ByzTwin-Range, a dual-layer architecture that integrates a production-grade BFT deployment with a Digital Twin (DT) to enable controlled experimentation, stress testing, and Byzantine fault injection using live operational data. The DT mirrors real system state, executes"What-if"analyses through co-simulation and emulation, and identifies synchrony vulnerabilities, i.e., misconfigured timeouts, timing-sensitive false suspicions, and adversarial delay exploits, configuration weaknesses, and adversarial behaviors that may undermine BFT guarantees. Insights from the twin are fed back into the operational deployment through a secure advisory channel, supporting continuous validation and adaptive hardening. The proposed design leverages industry-standard technologies (Open Platform Communications Unified Architecture, Time-Sensitive Networking, Functional Mock-up Unit/High-Level Architecture, QUIC/mutual TLS) to maximize feasibility and compatibility with existing industrial workflows. ByzTwin-Range establishes a practical foundation for next-generation, BFT-aware cyber ranges and paves the way for more resilient CPSs through continuous testing, differential-privacy-enabled analytics, and future proof-of-concept implementations.
