선박의 사이버 복원력 통합 요구사항(IACS UR E26)과 기존 사이버보안 및 사이버 복원력 프레임워크의 비교
A Study on the Comparison of the United Requirement for Cyber Resilience of Ships (IACS UR E26) with Existing Cybersecurity and Cyber Resilience Frameworks
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
스마트 선박 건조량의 급증과 함께 선박 IT 기자재의 비중이 증가하면서, 해양 사이버 사고의 빈도와 심각성 또한 크게 증가하고 있다. 국제선급협회(IACS)는 이러한 상황을 인식하여 최근 UR E26 규정을 발효하였다. 본 연구는 사이버 복원력의 정의와 기존 연구를 조사하고, AHP 기법을 이용하여 UR E26 규정에서 제시하는 선박 생애주기에 따라 요인 간 우선순위를 파악한다. 또한 UR E26 규정을 미국 표준기술연구소의 사이버보안 프레임워크 및 사이버 복원력 시스템과 비교 분석하였다. 이를 통해, 선박 사이버보안에 대해 익숙하지 않은 기업들이 UR E26 규정을 효과적으로 대응하도록 지원하고, 나아가 E26 규정의 개선 방향을 제언하였다.
Abstract
With the rapid increase in the construction of smart ships and the growing proportion of IT equipment on vessels, the frequency and severity of maritime cyber incidents have significantly escalated. Recognizing this situation, the International Association of Classification Societies recently enacted the UR E26 regulation. This study investigates the definition of cyber resilience and reviews existing research, using the Analytic Hierarchy Process to determine the priority of factors across the ship lifecycle as presented in the E26 regulation. Additionally, the E26 regulation is compared and analyzed against Cybersecurity Framework and Cyber Resiliency System of the NIST. Through this analysis, the study aims to assist companies that are unfamiliar with maritime cybersecurity in effectively responding to the IACS UR E26 regulation and proposes recommendations for the improvement of the UR E26 regulation.
참고문헌 (18)
- "SME Strategic Technology Roadmap 2024~2026 Futuristic Ship", Ministry of SMEs and Startups, ~ (2024)
- "Maritime Cyber Attack MAP" (2024)[URL]
- "Oxford English Dictionary" (2021)[URL]
- Björck, F., "Cyber Resilience –Fundamentals for a Definition", Advances in Intelligent Systems and Computing, 353, pp.p311~p316 (2015)
- M. Omer, "A framework for assessing resiliency of maritime transportation systems", Maritime Policy Manage, 39(7), pp.685~703 (2012)
- A. M. Madni, "Towards a conceptual framework for resilience engineering", IEEE Systems Journal, 3(2), pp.181~191 (2009)
- A. M. Madni, "Agile Systems Architecting (ASA): Placing Agility Where it Counts", Proceedings of Conference on Systems Engineering Research, pp.1~7 (2007)
- Cyber resiliency engineering framework, "D. Bodeau", MITRE Corporation, ~, pp.MTR110237 (2011)
- Twumasi-Boakye, "Resilience of regional transportation networks subjected to hazard-induced bridge damages", J. Transp. Eng., Part A, Syst, 144(10), pp.04018062~ (2018)
- Y. Zhou, "Resilience of transportation systems:concepts and comprehensive review", IEEE Trans. Intell. Transp. Syst, 20(12), pp.4262~4276 (2019)
- U.S. Obama's Second-Term Cybersecurity Policy, "E. Song", Korea Internet & Security Agency, ~ (2014)
- NIST, "The NIST Cybersecurity Framework 2.0", ~ (2023)
- Developing Cyber-Resilient Systems: A Systems Security Engineering Approach, "NIST", ~ (2021)
- "The Great Disconnect" (2022)[URL]
- "Guidelines on Cyber Securit y Onboard Ships" (2016)[URL]
- International Maritime Organization, "Resolution IMO MSC 428(98), Maritime Cyber Risk Management in Safety Management Systems", ~ (2017)
- "Unified Regulation E26 Cyber Resilience of Ships – New" (2022)[URL]
- S. Choi, "Defects in Exposed Concrete Finishing Method Using AHP Techniques", Korea Construction Management Association, 20(4), pp.46~55 (2019)