원전 안전계통의 사이버보안 위협 및 대응
Cybersecurity Threats and Responses of Safety Systems in NPPs
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
In the past, conservative concepts have been applied in terms of the characteristic of nuclear power plants(NPPs), resulting in analog-based equipment and closed networks. However, as digital technology has recently been applied to the design, digital-based facilities and communication networks have been used in nuclear power plants, increasing the risk of cybersecurity than using analog-based facilities. Nuclear power plant facilities are divided into a safety system and a non-safety system. It is essential to identify the difference and cope with cybersecurity threats to the safety system according to its characteristics. In this paper, we examine the cybersecurity regulatory guidelines for safety systems in nuclear power plant facilities. Also, we analyze cybersecurity threats to a programmable logic controller of the safety system and suggest cybersecurity requirements be applied to it to respond to the threats. By implementing security functions suitable for the programmable logic controller according to the suggested cybersecurity requirements, regulatory guidelines can be satisfied, and security functions can be extended according to other system requirements. Also, it can effectively cope with cybersecurity attacks that may occur during the operation of nuclear power plants.
Abstract
In the past, conservative concepts have been applied in terms of the characteristic of nuclear power plants(NPPs), resulting in analog-based equipment and closed networks. However, as digital technology has recently been applied to the design, digital-based facilities and communication networks have been used in nuclear power plants, increasing the risk of cybersecurity than using analog-based facilities. Nuclear power plant facilities are divided into a safety system and a non-safety system. It is essential to identify the difference and cope with cybersecurity threats to the safety system according to its characteristics. In this paper, we examine the cybersecurity regulatory guidelines for safety systems in nuclear power plant facilities. Also, we analyze cybersecurity threats to a programmable logic controller of the safety system and suggest cybersecurity requirements be applied to it to respond to the threats. By implementing security functions suitable for the programmable logic controller according to the suggested cybersecurity requirements, regulatory guidelines can be satisfied, and security functions can be extended according to other system requirements. Also, it can effectively cope with cybersecurity attacks that may occur during the operation of nuclear power plants.
참고문헌 (16)
- 정성민, "계측제어시스템 사이버보안 요건서 고려사항", 디지털산업정보학회 공동학술대회, pp.27~29 (2016)
- 정만현, "원전 디지털 계측제어시스템 사이버보안 기술 체계 수립 방법 연구", 정보보호학회논문지, 24(3), pp.561~570 (2014), 한국정보보호학회[DOI]
- 김도연, "원전 계측제어계통의 안전 네트워크 설계 및 평가를 위한 보안 기준", 한국전자통신학회 논문지, 9(2), pp.267~271 (2014), 한국전자통신학회
- U.S. NRC, "Criteria for Digital Computers in Safety Systems of Nuclear Power Plants,”Regulatory Guide 1.152", ~ (2006)
- 정성민, "계측제어시스템 개발을 위한 사이버보안 요구사항", 디지털산업정보학회 공동학술대회, pp.34~37 (2017)
- Jung-Woon Lee, "Cyber Security Considerations in the Development of I&C Systems for Nuclear Power Plants", The 2011International Conference on Security and Management(SAM'11) (2011)
- "원자력안전위원회규칙 제24호, 원자로시설 등의기술기준에 관한 규칙", ~ (2020)
- 정성민, "계측제어시스템을 위한 기술적보안 요건 적용", 디지털산업정보학회 공동학술대회, pp.69~72 (2018)
- Sadegh vosough, "PLC and its Applications", International Journal of multidisciplinary Sciences and Engineering, 2(8) (2011)
- U.S. NRC, "Protection of Digital Computer and Communication Systems and Networks, 10CFR 73.54", ~ (2009)
- U. S. NRC, "Cyber Security Programs for Nuclear Facilities, Regulatory Guide 5.71", ~ (2010)
- 한국원자력통제기술원, "원자력시설등의 필수디지털자산 식별 기술기준, KINAC RS-019", ~ (2015)
- 한국원자력통제기술원, "원자력 시설 등의 컴퓨터 및 정보시스템 보안 기술기준, KINAC RS-015", ~ (2016)
- 정성민, "원전 계측제어시스템에 적합한운영적 및 관리적 보안 요건", 디지털산업정보학회 공동학술대회, pp.175~178 (2019)
- 이철권, "원전 계측제어시스템 사이버보안 기술동향", 정보보호학회지, 22(5), pp.28~34 (2012), 한국정보보호학회
- DHS, "Common Cybersecurity Vulnerabilities in Industrial Control Systems", ~ (2011)