1: \begin{abstract}

2:  This work studies the distributed resilient output containment control of heterogeneous multiagent systems against composite attacks, including denial-of-services (DoS) attacks, false-data injection (FDI) attacks, camouflage attacks (CAs), and actuation attacks (AAs). Inspired by digital twins, a twin layer (TL) with higher security and privacy is used to decouple the above problem into two subproblems: defense protocols against DoS attacks on the TL and defense protocols against AAs on the cyber-physical layer (CPL). First, considering TL modeling errors, we provide distributed observers to remold the leader dynamics for each follower. Then, distributed estimators use the remolded leader dynamics to estimate follower states during DoS attacks. For the CPL, we develop a solver that addresses output regulation equations according to the remolded leader dynamics. Moreover,

3: distributed adaptive attack-resilient control schemes that address unbounded AAs are provided. Furthermore, we apply the above control protocols to prove that the followers can achieve uniformly ultimately bounded (UUB) convergence, and the upper bound of the UUB convergence is determined explicitly. Finally, simulations are provided to show the effectiveness of the proposed control protocols.

4: \end{abstract}

5: