1: \begin{abstract}

2:  This work studies the distributed resilient output containment control of heterogeneous multi-agent systems against composite attacks , including Denial-of-Services (DoS) attacks, false-data injection attacks, camouflage attacks,and actuation attacks (AAs). Firstly, Consider the case that not any follower know the leaders dynamics, we provide the full distributed observers to estimate the dynamics of leaders for each follower. Then, inspired by the concept of Digital Twin, a Twin Layer (TL) with  higher security and privacy is used to decouples the above Problem into the defense protocol against Dos attacks on the TL and  the defense protocol against AAs on the Cyber-Physical Layer (CPL). On the TL,  distributed observer is provided to predict the trajectories of followers which used the estimations of leaders dynamics by the above observers to against DoS attacks. And on the CPL, full distributed attack-resilient control schemes are provided to deal with the unbounded AAs. Furthermore, the output containment error could achieve uniformly ultimately bounded (UUB) convergence by the above control protocols and the boundary of output containment error can be given explicitly. Finally, the simulation has shown the effectiveness of these proposed control protocols.

3: \end{abstract}

4: