항공 시스템에 대한 사이버 위협 대응 방안
Countermeasures against Cyber Threats to Aviation Systems
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
항공 보안 활동에는 테러의 차단이나 위협과 같은 직접적인 공격에 대응하는 활동과 항공기 및 항행안전시설의 유/무선 통신을 이용한 원격조정과 같은 사이버 공격에 대비하는 간접적인 보안 활동이있다. 운용중인 항공기나 공항 등 항공 인프라에서 사이버 공격이 현실화 되면 많은 국가적 손실이예상된다. 항공 통신 네트워크나 항공기 시스템의 사이버 침입은 일반적인 지상 산업에서 나타나는것과 크게 다르지 않다. 하지만 첨단 디지털 항공기의 통신, 정보, 항법, 감시 및 승객 서비스 시스템은 지상 네트워크 시스템의 통신 환경에 대한 보안과 더불어 더 많은 취약점을 갖고 진보하고 있다. 본 논문은 항공 시스템에 대한 사이버 위협의 유형과 항공기 내부 및 외부 인프라의 사이버 위협에대한 취약점을 분석하고 이에 대응하기 위한 방안들을 제시하였다.
Abstract
Aviation security activities include countering direct attacks such as preventing or responding to threats of terrorism. Also, actions against cyber attacks and remote control using wired/wireless communication of aircraft or navigation facilities are considered as important indirect security activities. If cyber attacks are occurred in aviation infrastructure such as aircraft or airports in operation, many national losses are anticipated. Cyber intrusions from aeronautical communications networks or aircraft systems are not very different from those seen in other industries. Even though, the communication, navigation, surveillance and passenger service systems of advanced aircraft are developed with enhanced security measures, there are still many vulnerabilities. This paper analyzes the types of cyber threats to the aviation systems and the vulnerabilities to cyber threats in the internal and external infrastructure of aircraft, and discusses measures to counter them.
참고문헌 (36)
- Abeyratne, R, "Cyber Terrorism and Aviation-national and International Responses", Journal of Transportaion Security, 4, pp.337~349 (2011)
- "Strategies to Mitigate Cyber Security Incidents" (2017)[URL]
- "Police Issue Warning about Unauthorised Radio Transmissions at Melbourne and Avalon Airports" (2016)[URL]
- AIAA, "The Connectivity Challenge; Protecting Critical Assets in a Networked World, A Framework for Aviation Cyber Security", American Institute of Aeronautics and Astronautics, ~ (2013)
- "Researcher: New Air Traffic Control System Is Hackable" (2012)[URL]
- Coats, D. R., "Worldwide Threat Assessment of the US Intelligence Community", The United States Intelligence Community’s 2017, Assessment of Threats to US National Security, ~ (2017)
- "Britannica®" (2019)[URL]
- EUROCAE, "ED-204A.Information Security Guidance for Continuing Airworthiness", EUROCAE, ~ (2020)
- "9/11 Investigation" (2001)[URL]
- GAO, "Air Traffic Control FAA Needs a More Comprehensive Approach to Address Cyber Security as Agency Transitions to NextGen", U.S. Government Accountability Office,GAO-15-370, ~ (2015)
- "2020 Insider Threat Report. Insider Threat" (2019)[URL]
- IATA, "IOSA Standards Manual (ISM)" (2019), International Air Transport Association
- "Aviation Cyber Security, Fact Sheet" (2020)[URL]
- ICAO, "Annex 17. Security: Aviation Security Safe Guarding Civil Aviation against Acts of Unlawful Interference" (2017), International Civil Aviation Organization
- ICAO, "Doc 9854, Global Air Traffic Management Operational Concept", International Civil Aviation Organization, ~ (2005)
- ICAO, "Doc 8973, Aviation Security Manual", International Civil Aviation Organization, ~ (2017)
- "Cyber Threats against the Aviation Industry" (2014)[URL]
- Kagalwalla, N., "Cyber Security in Aviation: An Intrinsic Review", Proceedings of the IEEE, pp.1~6 (2019)
- "Will Safety Service Ever Transmit over Cabin Connectivity Pipes?" (2017)[URL]
- 임인규, "항공기 디지털 네트워크 시스템 보안 문제점과 사이버 대응 전략", 한국항행학회논문지, 21(6), pp.633~637 (2017), 한국항행학회[DOI]
- Lim, In Kyu, "Maintenance and Retrofit Strategies for Aircraft Cabin System", Ph. D, pp.2020
- "Guide for Security-focused Configuration Management of Information Systems. NIST Special Publication 800-128" (2019)[URL]
- "Cyber Security Framework, NIST Special Publication 800-53 Rev.5" (2020)[URL]
- "National Cyber Security Strategy" (2019)[URL]
- Riley, C., "Aircraft Systems Cyber Security", Institute of Electrical and Electronics Engineers, Digital Avionics Systems Conference, pp.1C3.1~1C3.7 (2011)
- "Data Link" (2017)[URL]
- RTCA, "DO-355A Information Security Guidance for Continued Airworthiness", Radio Technical Commission for Aeronautics, ~ (2020)
- Sampigethaya, K., "Secure Operation, Maintenance and Control of Future E-enabled Airplanes", Proceedings of the IEEE, 96(12), pp.1992~2007 (2008)
- "The Roadmap for Delivering High Performing Aviation for Europe: European ATM Master Plan" (2015)[URL]
- "Guide to Industrial Control Systems (ICS) Security. NIST Special Publication 800-82 Rev.2" (2015)[URL]
- Strohmeier, M, "Security in Next Generation Air Traffic Communication Networks", Ph. D, pp.2016
- TBC, "787 Ground Network Security Guidelines", The Boeing Company,D615Z052-01, ~ (2016)
- Teso, H., "Aircraft Hacking: Practical Aero Series", Hack in the Box Conference, pp.8~14 (2013)
- "North Korea Tried to Jam GPS Signals Across Border, South Korea Says" (2016)[URL]
- "Polish Planes Grounded after Airline Hit with DDoS Attack" (2015)[URL]