{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,2]],"date-time":"2026-09-02T08:19:23Z","timestamp":1788337163186,"version":"build-2803163510"},"reference-count":60,"publisher":"MDPI AG","issue":"17","license":[{"start":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T00:00:00Z","timestamp":1787788800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Cyber-Physical Systems (CPS) are using more AI for smart decisions and automation, but also faces new security issues. This study surveys existing CPS security assessment methodologies across healthcare, automotive, energy, and critical infrastructure, identifying their limitations in addressing emerging digital-physical threats. We find that traditional risk assessment and testing approaches, often network-centric and compliance-driven, are insufficient for AI-powered CPS. New vulnerabilities arise from the tight coupling of cyber and physical components, such as adversarial manipulation of sensors that can cause dangerous misbehavior, supply chain attacks on AI models, and the inability to patch critical devices on the fly. We use AI techniques and problem-solving methods to improve the security of CPS. The framework helps detect threats, monitor system activities, and reduce security risks in real time. It also follows important security and privacy standards such as NIST, IEC 62443, ISO 21434, and GDPR. The system continuously checks CPS operations, uses AI tools to find weaknesses, and supports security compliance. We also study real-world CPS attacks, including industrial malware, car hacking, and medical device attacks, to show the importance of the framework. In this research, we present prototype implementation and experimental evaluation along with a case study of protecting a smart manufacturing plant during a ransomware attack using the proposed approach.<\/jats:p>","DOI":"10.3390\/s26175412","type":"journal-article","created":{"date-parts":[[2026,8,27]],"date-time":"2026-08-27T10:58:21Z","timestamp":1787828301000},"page":"5412","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["AI-Driven Problem Solving for Cyber-Physical Systems Security: An Assessment Framework"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-3930-1028","authenticated-orcid":false,"given":"Vikram","family":"Kulothungan","sequence":"first","affiliation":[{"name":"Capitol Technology University, Laurel, MD 20708, USA"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"writing-original-draft","vocabulary":"credit"},{"role":"formal-analysis","vocabulary":"credit"},{"role":"validation","vocabulary":"credit"},{"role":"project-administration","vocabulary":"credit"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7844-9092","authenticated-orcid":false,"given":"Deepti","family":"Gupta","sequence":"additional","affiliation":[{"name":"Subhani Department of Computer Information Systems, Texas A&M University-Central Texas, Killeen, TX 76549, USA"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"methodology","vocabulary":"credit"},{"role":"resources","vocabulary":"credit"},{"role":"supervision","vocabulary":"credit"},{"role":"software","vocabulary":"credit"},{"role":"validation","vocabulary":"credit"},{"role":"writing-original-draft","vocabulary":"credit"},{"role":"writing-review-editing","vocabulary":"credit"},{"role":"project-administration","vocabulary":"credit"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-0492-2658","authenticated-orcid":false,"given":"Raju","family":"Dhakal","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Embry-Riddle Aeronautical University at Daytona Beach, Daytona Beach, FL 32114, USA"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"methodology","vocabulary":"credit"},{"role":"conceptualization","vocabulary":"credit"}]},{"given":"Laxima Niure","family":"Kandel","sequence":"additional","affiliation":[{"name":"Department of Electrical Engineering and Computer Science, Embry-Riddle Aeronautical University at Daytona Beach, Daytona Beach, FL 32114, USA"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"methodology","vocabulary":"credit"},{"role":"conceptualization","vocabulary":"credit"},{"role":"investigation","vocabulary":"credit"},{"role":"writing-review-editing","vocabulary":"credit"},{"role":"formal-analysis","vocabulary":"credit"}]}],"member":"1968","published-online":{"date-parts":[[2026,8,27]]},"reference":[{"key":"ref_1","unstructured":"Industrial Cyber (2025, February 14). Growing Need to Balance Benefits, Risks of Integrating AI in OT Cybersecurity in Evolving Threat Landscape. Available online: https:\/\/industrialcyber.co\/ai\/growing-need-to-balance-benefits-risks-of-integrating-ai-in-ot-cybersecurity-in-evolving-threat-landscape\/."},{"key":"ref_2","unstructured":"Zetter, K. (2025, February 14). Stuxnet: The World\u2019s First Cyber Weapon. Available online: https:\/\/cisac.fsi.stanford.edu\/news\/stuxnet."},{"key":"ref_3","unstructured":"Erwin, B. (2025, February 14). The Groundbreaking 2015 Jeep Hack Changed Automotive Cybersecurity. Available online: https:\/\/www.linkedin.com\/pulse\/groundbreaking-2015-jeep-hack-changed-automotive-blane-erwin."},{"key":"ref_4","unstructured":"Wagner, L. (2023). Mitigating Emergent Safety and Security Incidents of CPS by a Protective Shell. [Master\u2019s Thesis, Technical University of Munich]."},{"key":"ref_5","unstructured":"(2025, February 14). Gartner Details Emergence of Cyber-Physical Systems Protection Platforms. Available online: https:\/\/industrialcyber.co\/news\/gartner-details-emergence-of-cyber-physical-systems-protection-platforms\/."},{"key":"ref_6","unstructured":"(2020). Security for Industrial Automation and Control Systems: Part 3-2: Security Risk Assessment for System Design (Standard No. IEC 62443-3-2:2020)."},{"key":"ref_7","unstructured":"(2013). System Security Requirements and Security Levels (Standard No. IEC 62443-3-3:2013)."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Khan, R., Mclaughlin, K., Laverty, D.M., and Sezer, S. (2017). STRIDE-based threat modeling for cyber-physical systems. 2017 IEEE PES Innovative Smart Grid Technologies Conference Europe (ISGT-Europe), IEEE.","DOI":"10.1109\/ISGTEurope.2017.8260283"},{"key":"ref_9","unstructured":"(2021). Road Vehicles: Cybersecurity Engineering (Standard No. ISO\/SAE 21434:2021)."},{"key":"ref_10","unstructured":"(2021). Application of Risk Management for IT-Networks Incorporating Medical Devices (Standard No. IEC 80001-1:2021)."},{"key":"ref_11","unstructured":"(2019). Medical Devices: Application of Risk Management to Medical Devices (Standard No. ISO 14971:2019)."},{"key":"ref_12","unstructured":"(2025, February 14). Chapter 3: A History of Medical Device Hacking. Available online: https:\/\/www.armis.com\/blog\/chapter-3-a-history-of-medical-device-hacking\/."},{"key":"ref_13","unstructured":"Rockwell Automation (2026, June 04). NERC CIP Standards in OT and ICS Security. Available online: https:\/\/www.rockwellautomation.com\/en-us\/company\/news\/blogs\/nerc-cip-standards-in-ot-and-ics.html."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Paredes, C.M., Mart\u00ednez Castro, D., Gonz\u00e1lez Potes, A., Rey Piedrahita, A., and Ibarra Junquera, V. (2024). Design Procedure for Real-Time Cyber\u2013Physical Systems Tolerant to Cyberattacks. Symmetry, 16.","DOI":"10.3390\/sym16060684"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"334","DOI":"10.1049\/enc2.12097","article-title":"Review of Cybersecurity for Integrated Energy Systems with Integration of Cyber-Physical Systems","volume":"4","author":"Ding","year":"2023","journal-title":"Energy Convers. Econ."},{"key":"ref_16","first-page":"101222","article-title":"Hybrid AI Framework for Detecting Cyberattacks and Predicting Cascading Failures in Power Systems","volume":"48","author":"Agarwal","year":"2025","journal-title":"Sustain. Comput. Inform. Syst."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"201","DOI":"10.1007\/s10462-024-10805-3","article-title":"A Review of Digital Twins and Their Application in Cybersecurity Based on Artificial Intelligence","volume":"57","author":"Homaei","year":"2024","journal-title":"Artif. Intell. Rev."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"111186","DOI":"10.1016\/j.compeleceng.2026.111186","article-title":"A comprehensive review of malicious URLs: Detection techniques, features and datasets","volume":"136","author":"Osmanoglu","year":"2026","journal-title":"Comput. Electr. Eng."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Solanki, O., Praharaj, L., Gupta, D., and Gupta, M. (2026). Policy-Aware Edge LLM-RAG Framework for Internet of Battlefield Things Mission Orchestration. arXiv.","DOI":"10.1109\/AIS69919.2026.11621620"},{"key":"ref_20","unstructured":"Mhatre, A., Karthick, V., Gupta, D., and Zou, J. (August, January July). MUC-FL: Block-Wise Marginal Utility Contribution for Communication-Efficient Federated Learning. Proceedings of the 2026 IEEE International Conference on Information Reuse and Integration for Data Science (IRI), Seattle, WA, USA."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Karim, H., Sitharaman, S., Gupta, D., and Rawat, D.B. (2026, January 13\u201318). Securing Autonomous Clinical Agents: Time-Scoped Hypergraph Delegation for Controlling Patient Data Access. Proceedings of the 2026 IEEE World Congress on SERVICES (SERVICES 2026), Sydney, Australia.","DOI":"10.1109\/ICDH72779.2026.00047"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Webb, J.L., Kandel, L.N., Gupta, D., and Elluri, L. (2026). Microbenchmarking Cloud Cryptographic Workloads for Privacy-Preserving Healthcare IoT. arXiv.","DOI":"10.1109\/ICDH72779.2026.00052"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Kavuri, L.A., Gupta, D., and Hammad, E. (2026). Agentic AI for continuous intelligence in future smart connected systems. 2026 56th Annual IEEE International Conference on Dependable Systems and Networks Workshops (DSN-W), IEEE.","DOI":"10.1109\/DSN-W70714.2026.00024"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Karim, H., Sitharaman, S., Gupta, D., and Rawat, D.B. (2026). From agent failure paths to quantified residual risk: A compositional framework for resilient agentic AI. 2026 56th Annual IEEE International Conference on Dependable Systems and Networks Workshops (DSN-W), IEEE.","DOI":"10.1109\/DSN-W70714.2026.00022"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"69631","DOI":"10.1109\/ACCESS.2025.3561235","article-title":"Securing llm workloads with nist ai rmf in the internet of robotic things","volume":"13","author":"Karim","year":"2025","journal-title":"IEEE Access"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Kulothungan, V., and Gupta, D. (2025). Towards adaptive AI governance: Comparative insights from the US, EU, and Asia. 2025 IEEE 11th Conference on Big Data Security on Cloud (BigDataSecurity), IEEE.","DOI":"10.1109\/BigDataSecurity66063.2025.00018"},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Kulothungan, V., Mohan, P.R., and Gupta, D. (2025). AI regulation and capitalist growth: Balancing innovation, ethics, and global governance. 2025 IEEE 11th Conference on Big Data Security on Cloud (BigDataSecurity), IEEE.","DOI":"10.1109\/BigDataSecurity66063.2025.00020"},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Gupta, D., Elluri, L., Jain, A., Moni, S.S., and Aslan, O. (2024). Blockchain-enhanced framework for secure third-party vendor risk management and vigilant security controls. 2024 IEEE International Conference on Big Data (BigData), IEEE.","DOI":"10.1109\/BigData62323.2024.10825025"},{"key":"ref_29","unstructured":"National Institute of Standards and Technology (2015). Workshop Brief on Cyber Supply Chain Best Practices."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"103201","DOI":"10.1016\/j.micpro.2020.103201","article-title":"Cyber-Physical Systems Security: Limitations, Issues and Future Trends","volume":"77","author":"Yaacoub","year":"2020","journal-title":"Microprocess. Microsyst."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Yousseef, A., Satam, S., Latibari, B.S., Pacheco, J., Salehi, S., Hariri, S., and Satam, P. (2024). Autonomous Vehicle Security: A Deep Dive into Threat Modeling. arXiv.","DOI":"10.1109\/OJVT.2025.3580538"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Eykholt, K., Evtimov, I., Fernandes, E., Li, B., Rahmati, A., Xiao, C., Prakash, A., Kohno, T., and Song, D. (2018). Robust Physical-World Attacks on Deep Learning Models. arXiv.","DOI":"10.1109\/CVPR.2018.00175"},{"key":"ref_33","unstructured":"Jana, A.K. (2025, February 14). Defending Against Adversarial Attacks in the Era of Generative AI. Available online: https:\/\/roundtable.datascience.salon\/defending-against-adversarial-attacks-in-the-era-of-generative-ai."},{"key":"ref_34","unstructured":"Trampski, H. (2025, February 14). The Triton Malware Attack. Available online: https:\/\/cyber.tap.purdue.edu\/blog\/articles\/the-triton-malware-attack\/."},{"key":"ref_35","unstructured":"National Institute of Standards and Technology (2025, February 14). Cybersecurity Supply Chain Risk Management (C-SCRM) Project, Available online: https:\/\/csrc.nist.gov\/projects\/cyber-supply-chain-risk-management."},{"key":"ref_36","unstructured":"(2025, March 01). Supply Chain Cyber Attacks Surge Over 400 percent Expected to Continue Rising. Available online: https:\/\/www.insurancebusinessmag.com\/us\/news\/cyber\/supply-chain-cyber-attacks-surge-over-400-expected-to-continue-rising\u2013cowbell-report-525369.aspx."},{"key":"ref_37","unstructured":"Knapp, E. (2025, March 01). Strengthening Industrial Supply Chain Security by Addressing Challenges, Strategies, Collaborative Initiatives. Available online: https:\/\/industrialcyber.co\/features\/strengthening-industrial-supply-chain-security-by-addressing-challenges-strategies-collaborative-initiatives\/."},{"key":"ref_38","unstructured":"Wyckhouse, M. (2025, March 01). Need to Build Robust Industrial Supply Chain Security While Considering Emerging Technologies. Available online: https:\/\/industrialcyber.co\/features\/need-to-build-robust-industrial-supply-chain-security-while-considering-emerging-technologies\/."},{"key":"ref_39","unstructured":"Gordon, J. (2025, March 01). Addressing AI in Industrial Cybersecurity: A Strategic Imperative. Available online: https:\/\/industrialcyber.co\/expert\/addressing-ai-in-industrial-cybersecurity-a-strategic-imperative\/."},{"key":"ref_40","unstructured":"Hickenlooper, J., and Tillis, T. (2025, March 01). US Senators Seek Federal Response on Security of Critical Infrastructure Amid AI Advancements. Available online: https:\/\/industrialcyber.co\/ai\/us-senators-seek-federal-response-on-security-of-critical-infrastructure-amid-ai-advancements\/."},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Zhu, Y., Wen, H., Zhao, R., Jiang, Y., Liu, Q., and Zhang, P. (2023). Research on Data Poisoning Attack against Smart Grid Cyber\u2013Physical System Based on Edge Computing. Sensors, 23.","DOI":"10.3390\/s23094509"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Erba, A., Taormina, R., Galelli, S., Pogliani, M., Carminati, M., Zanero, S., and Tippenhauer, N.O. (2019). Real-time evasion attacks with physical constraints on deep learning-based anomaly detectors in industrial control systems. arXiv.","DOI":"10.1145\/3427228.3427660"},{"key":"ref_43","unstructured":"Gordon, J. (2025, March 01). Industrial Cybersecurity Buyers\u2019 Guide 2024 Navigates Complex Industrial Landscape. Available online: https:\/\/industrialcyber.co\/essential-guides\/industrial-cybersecurity-buyers-guide-2024-navigates-complex-industrial-landscape\/."},{"key":"ref_44","unstructured":"Homaei, M., Gutierrez, O.M., Nunez, J.C.S., Vegas, M.A., and Lindo, A.C. (2023). Cybersecurity based on Artificial Intelligence. arXiv."},{"key":"ref_45","doi-asserted-by":"crossref","unstructured":"Jiang, Y., Wang, W., Ding, J., Lu, X., and Jing, Y. (2024). Leveraging Digital Twin Technology for Enhanced Cybersecurity in Cyber\u2013Physical Production Systems. Future Internet, 16.","DOI":"10.3390\/fi16040134"},{"key":"ref_46","doi-asserted-by":"crossref","unstructured":"Gupta, D., Moni, S.S., and Tosun, A.S. (2023). Integration of digital twin and federated learning for securing vehicular internet of things. Proceedings of the 2023 International Conference on Research in Adaptive and Convergent Systems, ACM.","DOI":"10.1145\/3599957.3606250"},{"key":"ref_47","unstructured":"Abel, Y.O., Umar, M.I., Tymoteusz, S., and Francisca, O.B. (2021). Cyberattack ontology: A knowledge representation for cyber supply chain security. 2021 International Conference on Computing, Computational Modelling and Applications (ICCMA), IEEE."},{"key":"ref_48","unstructured":"Gioacchini, L., Mellia, M., Drago, I., Delsanto, A., Siracusano, G., and Bifulco, R. (2024). AutoPenBench: Benchmarking Generative Agents for Penetration Testing. arXiv."},{"key":"ref_49","doi-asserted-by":"crossref","first-page":"2611","DOI":"10.1007\/s12559-024-10309-w","article-title":"Generative AI and Cognitive Computing-Driven Intrusion Detection System in Industrial CPS","volume":"16","author":"Islam","year":"2024","journal-title":"Cogn. Comput."},{"key":"ref_50","first-page":"191086","article-title":"Normal-only anomaly detection in environmental sensors in CPS: A comprehensive review","volume":"12","author":"Acquaah","year":"2024","journal-title":"IEEE Access"},{"key":"ref_51","unstructured":"National Institute of Standards and Technology (2025, March 01). Joint Statement on Risk Assessment of Advanced AI Systems, Available online: https:\/\/www.nist.gov\/system\/files\/documents\/2024\/11\/20\/Joint%20Statement%20on%20Risk%20Assessment%20of%20Advanced%20AI%20Systems.pdf."},{"key":"#cr-split#-ref_52.1","unstructured":"European Parliament and Council of the European Union (2016). Regulation"},{"key":"#cr-split#-ref_52.2","unstructured":"(EU) 2016\/679 (General Data Protection Regulation), European Parliament and Council of the European Union."},{"key":"ref_53","unstructured":"(2018). Road Vehicles: Functional Safety (Standard No. ISO 26262:2018)."},{"key":"ref_54","unstructured":"National Institute of Standards and Technology (2018). SP 800-37 Revision 2\u2014Risk Management Framework for Information Systems and Organizations."},{"key":"ref_55","unstructured":"United Nations Economic Commission for Europe (2021). UN Regulation No. 155\u2014Cyber Security and Cyber Security Management System (WP.29), United Nations Economic Commission for Europe."},{"key":"ref_56","unstructured":"National Institute of Standards and Technology (2023). Artificial Intelligence Risk Management Framework (AI RMF 1.0), NIST AI 100-1."},{"key":"ref_57","unstructured":"National Institute of Standards and Technology (2024). The NIST Cybersecurity Framework (CSF) 2.0, NIST Cybersecurity White Paper NIST CSWP 29."},{"key":"ref_58","unstructured":"Alzarqawee, A.N.J., and Fritsch, L. (2023). Towards AI-powered Cybersecurity Attack Modeling with simulation tools: Review of attack simulators. Advances on P2P, Parallel, Grid, Cloud and Internet Computing, Proceedings of the 17th International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC-2022), Springer."},{"key":"ref_59","unstructured":"Vectra, A.I. (2025, March 31). Ransomware Detection & Response. Available online: https:\/\/www.vectra.ai\/solutions\/attack-types\/ransomware."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/17\/5412\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,2]],"date-time":"2026-09-02T07:53:44Z","timestamp":1788335624000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/17\/5412"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,27]]},"references-count":60,"journal-issue":{"issue":"17","published-online":{"date-parts":[[2026,9]]}},"alternative-id":["s26175412"],"URL":"https:\/\/doi.org\/10.3390\/s26175412","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,27]]}}}