원전 제어시스템 사이버보안 위험 분석방법의 효율성 개선
Improving the Efficiency of Cybersecurity Risk Analysis Methods for Nuclear Power Plant Control Systems
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
국내 원전은 방사능방재법에 의거하여 ‘정보시스템 보안규정’이 수립됨과 함께 조직구성부터 자산의 기술적/운영적/관리적 보안조치에 이르는 사이버보안 체계를 도입하여 운영하고 있다. 단계별 접근법, 물리적방호체계의 대안조치 등이 시도되고 있지만, 관리대상의 감소는 이루어지지 않기 때문에 현장의 한정된 인력으로 운영하기엔 보안 역량의 부담이 가중되고 있다. 본문에서는 원전 안전기능을 수행하는 A1 유형 자산에 대해 정비규정(MR, Maintenance Rule), EPRI 기술적 평가 방법론(TAM, Technical Assessment Methodology)를 활용하여 정비적인 측면과 기기 특성에 대한 측면으로 분석하였다. 이를 통해 사이버침해로 인한 자산기능의 영향을 재분석하는 방안을 제시한다.
Abstract
Domestic nuclear power plants operate under the establishment of the "Information System Security Regulations" in accordance with the Nuclear Safety Act, introducing and implementing a cybersecurity system that encompasses organizational structure as well as technical, operational, and managerial security measures for assets. Despite attempts such as phased approaches and alternative measures for physical protection systems, the reduction in managed items has not been achieved, leading to an increased burden on security capabilities due to limited manpower at the site. In the main text, an analysis is conducted on Type A1 assets performing nuclear safety functions using Maintenance Rules (MR) and EPRI Technical Assessment Methodology (TAM) from both a maintenance perspective and considering device characteristics. Through this analysis, approaches to re-evaluate the impact of cyber intrusions on asset functionality are proposed.
참고문헌 (21)
- "Protection of Digital Computer and Communication System and Networks" (2021)[URL]
- "CYBER SECURITY PROGRAMS FOR NUCLEAR FACILITIES" (2023)[URL]
- "Identifying System and Assets Subject to the Cyber Security Rule" (2012)[URL]
- "Cyber Security Control Assessments" (2017)[URL]
- "Cyber Security Technical Assessment Methodology" (2019)[URL]
- DUON System, "APT3700N Operation Manual for Nuclear Power Plant Differential Pressure Transmitter", M3700N-K01C, ~
- DUON System, "APT3700N Operation Manual for Nuclear Power Plant Pressure Transmitter", M3700N-K01E, ~ (2010)
- Kim, C., "Development Trends of HART Communication", pp.106~112 (2016), Doon System Co., Ltd. Subsidiary Research Institute, Instrumentation Technology
- "Requirements for monitoring the effectiveness of maintenance at nuclear power plants" (2021)[URL]
- "MONITORINGTHE EFFECTIVENESS OF MAINTENANACE AT NUCLEAR POWER PLANTS" (2018)[URL]
- Kim, G., "A Study of Adopting Maintenance Rule in the Korean NPP", Journal of the Korean Society of Safety, 16(2), pp.110~116 (2001)
- Yeom, D., "Development of Maintenance Effectiveness Monitoring Program for APR1400 Safety Related Systems", Energy Engineering, 23(2) (2014)
- Ryu, J., "A Study on the Engineering Programs used for Improving Equipment Reliability in NPPs", Master, pp.2018
- Kwon, K., "Research for Digital Asset Analysis Methodology for Cyber Security of Nuclear Power Plant", Master, pp.2013
- Kim, I., "Analysis of the Application Method of Cyber Security Control to Develop Regulatory Requirement for Digital Assets in NPP", Korea Institute of Nuclear Nonproliferation and Control, Journal of the Korea Institute of Information Security &Cryptology, 29(5) (2019)
- Jung, D., "A Study on the Use of TAM for the Assessment and Application of Cyber Security Controls for Critical Infrastructure", Master, pp.2022
- Park, J., "Cyber Security Consideration on Digital Instrumentation and Control System Development Process in Nuclear Power Plants", Korea Computer Congress 2012, pp.354~356 (2012)
- Kim, S., "A Study on the Effectiveness of Grouping of the Critical Digital Assets at the Nuclear Facilities", 2017Korea Institute of Communication Sciences Winter Conference, pp.656~657 (2017)
- Cha, G., "A Study on Effective Implementation of Security Controls to Critical Digital Assets in NPPs", CICS `17 Information and Control Conference, pp.271~272 (2017)
- Choi, Y., "A Study on the Implementation of Technical Security Control for Critical Digital Asset of Nuclear Facilities", Journal of the Korea Institute of Information Security & Cryptology, 29(4) (2019)
- Lee, S., "A Study on Alternative Security Measures for Control Systems in Nuclear Power Plants", 2021 Korea Energy Society Spring Conference, pp.150~ (2021)