1: \begin{abstract}

2:  This work studies the distributed resilient output containment control of heterogeneous multi-agent systems against composite attacks, including Denial of Services (DoS) attacks, false-data injection (FDI) attacks, camouflage attacks (CAs), and actuation attacks (AAs). Inspired by Digital Twin, a twin layer (TL) with  higher security and privacy is used to decouple the above problem into two subproblems: defense protocols against DoS attacks on the TL and  defense protocols against AAs on the cyber-physical layer (CPL). First, considering TL  modeling errors, we provide distributed observers to remold the leader dynamics for each follower. Then, distributed estimators use the remolded leader dynamics  to estimate the states of followers under DoS attacks. On the CPL, we give a solver that addresses output regulation equations according to the remolded leader dynamics. Moreover,

3:  distributed adaptive attack-resilient control schemes that addresses unbounded AAs are provided. Furthermore, we apply the above control protocols to prove that the followers can achieve uniformly ultimately bounded (UUB) convergence, and the upper bound of the UUB convergence is determined explicitly. Finally, simulations are provided to show the effectiveness of the proposed control protocols.

4: \end{abstract}

5: