원자로보호계통 사이버보안 연계 위협 분석 연구
A Study on Chaining Threat Analysis of Cybersecurity against Reactor Protection Systems
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
The application of digital technology to instrumentation and control systems in nuclear power plants has overcome many shortcomings of analog technology, but the threat of cybersecurity has increased. Along with other systems, the reactor protection system also uses digital-based equipment, so responding to cybersecurity threats is essential. We generally determine cybersecurity threats according to the role and function of the system. However, since the instrumentation and control system has various systems linked to each other, it is essential to analyze cybersecurity threats together between the connected systems. In this paper, we analyze the cybersecurity threat of the reactor protection system with the associated facilities. To this end, we quantitatively identified the risk of the reactor protection system by considering safety functions, a communication type, the use of analog or digital-based equipment of the associated systems, and the software vulnerability of the configuration module of the reactor protection system.
Abstract
The application of digital technology to instrumentation and control systems in nuclear power plants has overcome many shortcomings of analog technology, but the threat of cybersecurity has increased. Along with other systems, the reactor protection system also uses digital-based equipment, so responding to cybersecurity threats is essential. We generally determine cybersecurity threats according to the role and function of the system. However, since the instrumentation and control system has various systems linked to each other, it is essential to analyze cybersecurity threats together between the connected systems. In this paper, we analyze the cybersecurity threat of the reactor protection system with the associated facilities. To this end, we quantitatively identified the risk of the reactor protection system by considering safety functions, a communication type, the use of analog or digital-based equipment of the associated systems, and the software vulnerability of the configuration module of the reactor protection system.
참고문헌 (19)
- Secure Network Design, "U.S NRC", Nuclear Regulatory Commission, ~, pp.NUREG (2012), CR-7117
- Protection of Digital Computer and Communication System and Networks, "U.S NRC", ~, pp.10CFR73.54 (2009)
- 이동일, "원자력 안전등급 제어기기의 통신망을 위한 통신보드 설계", 한국정보통신학회논문지, 19(1), pp.185~191 (2015), 한국정보통신학회[DOI]
- 이성진, "가상화 기반 APR1400 MMIS 디지털 트윈 개발", 대한전기학회 학술대회 논문집, pp.350~351 (2021)
- 김발호, "대규모 지능형 전력망의 사이버보안 위험성에 대한 평가 방법론", 전기학회논문지, 71(3), pp.477~487 (2022), 대한전기학회
- 정성민, "다양성보호계통 사이버보안 연계 위협 분석 방안", (사)디지털산업정보학회 논문지, 17(1), pp.35~44 (2021), (사)디지털산업정보학회
- 한국원자력통제기술원, "원자력 시설 등의 컴퓨터 및 정보시스템 보안 기술 기준" (2016)
- 한국원자력통제기술원, "원자력 시설 등의 필수디지털자산 식별 기술기준" (2015)
- IAEA, "Computer Security Techniques for Nuclear Facilities" (2021), Nuclear Security Series
- 김국헌, "안전필수 시스템 제어설계" (2021), 한빛아카데미
- 한국원자력안전기술원, "한국원자력안전기술원" (2018)
- 임준희, "원자력발전소 디지털시스템 설계요건을 고려한 보안성 평가에 관한 연구", 정보보호학회지, 30(2), pp.59~63 (2020), 한국정보보호학회
- 한국원자력연구원, "SFR 원형로 NSSS 설계·검증" (2017)
- 공명복, "디지털 원자로 보호시스템의 공통원인고장 분석에 관한 사례연구", 산업공학(IE interfaces), 25(4), pp.382~392 (2012), 대한산업공학회[DOI]
- Seo-Ryong Koo, "Design Features of Reactor Protection System for SMART", 2018 Spring Meeting of the KNS (2018)
- Han Gyu Kim, "Design Improvement for the Reactor Trip Switchgear System for APR1400 Design Certification", 2016 Autumn Meeting of the KNS (2016)
- 오양균, "Fault-Tolerant Design for Advanced Diverse Protection System", Nuclear Engineering and Technology, 45(6), pp.795~802 (2013), 한국원자력학회
- "원자로시설의안전등급과 등급별 규격에 관한 규정" (2018)
- DHS, "Common Cybersecurity Vulnerabilities in Industrial Control Systems" (2011)