4차 산업혁명 기술 도입에 따른 하드웨어 공급망 위협과 대응 방안

Abstract

As new technologies following the 4th industrial revolution, such as production of parts using 3D printing, are introduced across industries for the efficiency of the manufacturing process, companies are relying on information and communication technology in the process of acquiring raw materials and converting them into final materials. Currently, raw materials in the supply chain are complexly intertwined with producers and distributors, so there may be things where the ingredients of the finished product are unknown. It is not easy to find an attack because the attacker uses these vulnerabilities to attack using hardware components and uses the structure of the manufacturing process to carefully plan from the design and production stages to perform malicious functions. In particular, attacks using hardware are serious in that unlike software, they do not solve problems with program patches, but replace parts themselves. Therefore, in this study, we would like to analyze the cases of supply chain protection studied abroad based on hardware, discuss possible hardware attacks during the production, assembly and distribution stages of parts, and present physical, technical and administrative methods as a countermeasure. Recognizing the seriousness of the untrustworthy supply chain threat through this study in the future, we would like to contribute to industrial security by allowing companies to select parts supplied through safe distribution when developing or producing products throughout the industry.