안전한 스마트공장 구축을 위한 위험우선순위(SFRPN) 기반 최소보안요구사항에 관한 연구
Study on Minimum Security Requirement Using Risk Priority Number(SFRPN) for Secure Smart Factory
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
현대의 공장은 스마트기기의 확산과 통신 기술의 발달로 스마트화 됨에 따라 보안 문제가 대두되고 있다. 그 중에서스마트공장은 기기 간 정보가 상호 교환되기 때문에 스마트공장에서 발생할 수 있는 보안위험을 식별, 평가 및 통제하기 위한 위험관리 방안이 필요하다. 본 논문에서는 국내 스마트공장(기초수준)을 현장에서 확인 한 결과를 토대로 스마트공장 위험우선순위(SFRPN, Smart Factory Risk Priority Number) 모형을 적용하여 국내 스마트공장(기초수준)에서 적용 가능한 최소보안요구사항을 연구 제안한다.
Abstract
According to spreading of smart devices and development of communication technology, the security issues come to the fore in the modern factory. Especially, the smart facpry should be considered the risk management plan how to identify and evaluate, control the risks. In this paper, we suggest the minimum security requirements applying SFRPN(Smart Factory Risk Priority Number) model to domestic smart factory on the basis of the results inspecting factories.
참고문헌 (24)
- Jin-woo Park, "Government policies and Achievements on Smart Factory", Industrial Engineering Magazine, 23(1), pp.13~17 (2016)
- Yong-woon Kim, "International and Domestic standardization for Smart Factory", The Journal of The Korean Institute of Communication Sciences, 33(1), pp.30~36 (2015)
- The diagnostic model and Practical using plan for Smart Factory, "Jeong-cheol Lee", Korean Institute of Industrial Engineers, 2105~2127 (2015)
- Industry classification System and Driving direction related to Smart Factory, "Jeong-cheol Lee", Korean Institute of Industrial Engineers, 1493~1515 (2016)
- 박종만, "중소제조업 스마트공장 기술 동향과 이슈", 한국통신학회논문지, 40(12), pp.2491~2502 (2015), 한국통신학회
- KATS, "Standardization Roadmap for Smart Factory", ~ (2015)
- KATS, "Smart Manufacturing Standardized Framework", ~ (2015)
- Deok-gi Kim, "Smart Factory Part I, Basic concepts and Structures", KS proposed by KATS, ~ (2015)
- Industrial Control Systems Cyber Emergency Response Team Report 2015, "ICS-CERT", ~ (2015)
- "IEC 60812, “Analysis techniques for system reliability-Procedures for failure mode and effect analysis(FMEA)"", IEC, ~ (2006)
- Failure mode, effects and criticality analysis, "FMECA", ~, pp.FMECA MIL-P-1629 (2007)
- Young-jae Choi, "Risk Evaluation Model for FMEA", Korean Institute of Industrial Engineers, 586~595 (2012)
- "ISO", IEC 27002:2013, "Code of practice for information security controls", IEC, pp.2013, ~
- "ISO", IEC 61508, "Functional Safety of Electrical, Programmable Electronic Safety-related Systems (E, pp.E, PE, or E[DOI]
- "IEC 62443-3-3, "Industrial communication networks - Network and system security - Part 3-3: System security requirements and security levels"", IEC, Part 3-3, ~ (2013)
- 2016 Industrial Control Systems Vulnerability Trend Report, "FireEye", ~ (2016)
- SANS, "The Impact of Dragonfly Malware on Industrial Control Systems", SANS Institute InforSec Reading Room, ~ (2016)
- "The Stuxnet Wiki"[URL]
- Teemu M, "3 KEY LEARNINGS :Ransomware Hits A Concrete Manufacturer", F-Secure, ~ (2015)
- Vermont Manufacturing Extension Center, "Ransomware on the Rise in Regional Manufacturers", Vermont Manufacturing Extension Center, ~ (2016)
- Jp Buntinx, "Toy Manufacturer Website Spreads Crypto-ransomware Through Joomla", Bitcoinist. net Cryptocurrency Reviews And Technology, ~ (2016)
- Bill McGee, "Move over Healthcare, Ransomware Has Manufacturing In Its Sights", FORTINET, ~ (2016)
- KnowBe4, "Survey : Rising Concern Over Ransomware", Manufacturing Business Technology, ~ (2016)
- NIS, "2015 National Information Security White Paper" (2015), NIS