산업제어시스템 보안에 관한 연구
Research on Industrial Control System Security
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
4차 산업혁명이라는 용어가 언급된 시점과 맞물려 기업들은 제조설비에 사물인터넷, 빅데이터, 인공지능 등 최신 정보통신기술의 적용을 확대하기 시작하였고, 최신 기술을 활용한 예지 정비를 수행하여 유지보수 비용 절감, 공정 설비 다운타임 축소 효과를 가져왔을 뿐 아니라 공정 운전 최적화를 통한 수율 향상 등의 효과를 확인하고 있다. 하지만 이에 대한 반대급부로 기존 폐쇄된 환경에서 운영되어 사이버 공격으로부터 상대적으로 안전하게 운영 중인 산업제어시스템들과 인터넷 간 접점이 점점 확대되고 있으며, 이로 인해 보안 위협의 증가와 함께 보안사고 발생빈도도 계속 증가하고 있다. 논문에서는 산업제어시스템 유형, 아키텍처와 함께 주요 보안 위협과 계속 증가하는 보안 위협으로부터 산업제어시스템을 안전하게 보호하기 위한 보안 대책과 방안에 대해 살펴보고자 한다.
Abstract
In association with the point at which the term 4th Industrial Revolution was mentioned, companies began to expand the application of the latest information and communication technologies such as the Internet of Things, big data, artificial intelligence to manufacturing facilities, by performing intelligence maintenance utilizing the latest technology to reduce maintenance costs, as well as bringing the effect of reducing process equipment downtime it confirms the effect of improving yields through process operating optimization. However, the contact between the industrial control system and the Internet operating relatively safely from cyberattacks operated in an existing closed environment to the opposite end of this is expanding, which, along with the increase in security threats, the incidence of security attacks continues to increase. The paper explores the types and architectures of industrial control systems, as well as security measures and measures to keep industrial control systems safe from major and ever-increasing security threats.
참고문헌 (14)
- 중소벤처기업부, "중소기업 기술로드맵 2018-2020, 정보보호", 254~ (2020)
- NIST, "SP800-82 Guide to Industrial Control Systems(ICS)Security", ~ (2015)
- Theodore Joseph Williams, "The Purdue Enterprise Reference Architecture: a technical guide for CIM planning and implementation", Instrument Society of America, ~ (1992)
- CISCO Systems, "Networking and Security in Industrial Automation Environment", CISCO systems, 9~ (2020)
- History of Industrial Control System Cyber Incidents, "Hemsley, Kevin E.", Idaho National Lab(INL), ~, pp.No. INL (2018), CON-17-44411-Rev002
- Eric Byres, "Using ANSI", ISA-99 Standards to improve Control System Security, 2012
- Positive Technologies, "ICS VULNERBILITIES:2018IN REVIEW", ~ (2019)
- "RISI Online Incident Database" (2015)[URL]
- Mandiant, "INDUSTRIAL CONTROL SYSTEMS SECURITY: Overview and Threat Briefing", 37~ (2016)
- Fortinet, "SECURING INDUSTRIAL CONTROL SYSTEMS WITH FORTINET: IEC-62443 Compliant End-to-End Security", 3~ (2019)
- NIST, "Framework for Improving Critical Infrastructue Cybersecurity", ~ (2018)
- NIST, "SP800-53 Security and PrivacyControls for Federal Information Systems and Organizations", ~ (2013)
- SANS Institute, "The Industrial Control System Cyber Kill Chain", ~ (2015)
- MITRE, "ATT&CK for ICS", ~ (2020)