Secure and Resilient Cyber-Physical Supply Networks for Critical Infrastructure A Design Framework for Military Mobility and MissionCritical Operations

The increasing convergence of physical infrastructure and digital communication networks is transforming critical supply chains into distributed cyber-physical systems (CPS), where disruptions propagate across tightly coupled physical and network layers. In domains such as rail, energy, and defense, these systems must ensure high levels of reliability, availability, and security under conditions of geopolitical instability, hybrid threats, and evolving military mobility requirements. This paper proposes a security-oriented design framework for cyber-physical supply networks based on the concept of Resident Value Chains (RVCs). RVCs are defined as geographically bounded and strategically controlled supply configurations that reduce exposure to external dependencies while enhancing resilience against cascading failures, cyber disruptions, and cross-layer vulnerabilities. A system-level model is introduced to represent supply chains as interconnected cyber-physical networks, capturing dependencies among physical flows, digital coordination mechanisms, and critical infrastructure nodes. Within this model, four design levers—supply diversification, functional substitution, demand adaptation, and localized sourcing—are formalized and integrated into a multi-criteria decision framework incorporating mission-critical constraints such as reliability, availability, fault tolerance, and security assurance. The framework leverages real-time monitoring, predictive disruption management, and data-driven coordination to enhance situational awareness and enable adaptive responses in dual-use infrastructures supporting both commercial logistics and military mobility. A railway-based case study illustrates how long asset lifecycles, regulatory rigidity, and dependencies on critical materials increase systemic vulnerability to both physical and cyber-induced disruptions. Results highlight the need for co-design approaches integrating supply chain engineering, cyber-physical security, and network-aware infrastructure governance. The proposed framework contributes to the design of secure and resilient CPS by bridging supply chain architecture with critical infrastructure protection, communication networks, and mission-critical system performance.