COMPUTER-IMPLEMENTED METHOD AND SURVEILLANCE ARRANGEMENT FOR IDENTIFYING MANIPULATIONS OF CYBER-PHYSICAL-SYSTEMS AS WELL AS COMPUTER-IMPLEMENTED-TOOL AND CYBER-PHYSICAL-SYSTEM

In order to identify manipulations of cyber-physical-systems, in which cyber-security attacks or manual attacks, can be identified in real-time, it is proposed with regard to (i) a cyber-physical-system with an embedded, distributed and complex system structure and providing sensor/actor-signal-information depicting a behavior of the cyber-physical-system during operation or commissioning, and (ii) a Digital-Twin-Unit, creates and executes a digital twin replicating the behavior of the cyber-physical-system and consequently producing replicated sensor/actor-signal-information by simulating the cyber-physical-system and when the cyber-physical-system and the Digital-Twin-Unit are run in parallel, (1) to detect cyclically a deviation in the behavior of the cyber-physical-system, (2) to determine an environmental model impacts on the deviation due to external and environmental conditions and based on external information, (3) to identify a manipulation of the cyber-physical-system if-for each detection cycle the sensor/actor-signal-information (SASI) and the replicated sensor/actor-signal-information (SASIrp) are different and consequently the deviation is detected.