원자력발전소 사이버보안 훈련을 위한 HIL(Hardware In the Loop) System 개발
Development of Hardware In the Loop System for Cyber Security Training in Nuclear Power Plants
1
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
원자력을 포함한 산업제어시스템에 대한 사이버보안 사건이 증가함에 따라 기술적 보안 조치와 더불어 사이버보안교육 훈련 및 사이버 비상사건 대응 훈련이 요구되고 있다. 대상 설비를 운영 관리하는 담당자들에게 효과적인 사이버보안 인식 및 교육 훈련을 위해서는 센서 수준에서부터 발전소 운영 상태까지 사이버공격으로 인한 영향 분석이 가능한 훈련용 시스템이 요구된다. 이에 본 논문에서는 원자력 운영 상태를 모사하는 발전소 시뮬레이션과 특정 계통의시뮬레이션 및 물리장치를 포함하는 원자력발전소 사이버보안 훈련용 HIL 시스템을 개발하였다. 이를 통해 계통담당자 및 사이버보안조직을 대상으로 하는 기술적 훈련, 사이버보안 조직 및 비상사건대응 조직을 대상으로 하는 특화된사이버보안 훈련을 지원하고자 한다.
Abstract
Security awareness and training are becoming more important as cyber security incidents tend to increase in industrialcontrol systems, including nuclear power plants. For effective cyber security awareness and training for the personnel whomanage and operate the target facility, a TEST-BED is required that can analyze the impact of cyber attacks from thesensor level to the operation status of the nuclear power plant. In this paper, we have developed an HIL system for nuclearpower plant cyber security training. It includes nuclear power plant status simulations and specific system status simulationtogether with physical devices. This research result will be used for the specialized cyber security training program forKorean nuclear facilities.
참고문헌 (14)
- "Regulatory Guide 5.71, Cyber security programs for nuclear facilities", U.S. Nuclear Regulatory Commission, ~ (2010)
- "Regulatory Standard 015, Regulatory standard on computer security of nuclear facilities", KINAC, ~ (2016)
- "NIST SP800-53A Revision 1, Guide for assessing the security controls in federal information systems", NIST, ~ (2010)
- "International Atomic Energy Agency Nuclear Security Series No.17, Computer security at nuclear Facilities", IAEA, ~ (2011)
- "International Atomic Energy Agency Nuclear Security Series No.23-G, Security of nuclear information implementing guide", IAEA, ~ (2015)
- C. Foreman, "Educational modules in industrial control systems for critical infrastructure cyber security", 122nd American Society for Engineering Education Annual Conference &Exposition (2015)
- G. A. Francia, "Scenario-based learning approach to industrial control systems security training", The 2018 International Conference on Security and Management (2018)
- M. Domínguez, "Cybersecurity training in control systems using real equipment", IFAC-Papers OnLine, 50(1), pp.12179~12184 (2017)
- I. Ahmed, "A SCADA system testbed for cybersecurity and forensic research and pedagogy", 1~8 (2016)
- T. Alves, "Virtualization of SCADA testbeds for cybersecurity research : a modular approach", Computer &Security, 77, pp.531~546 (2018)
- "Unified architecture"[URL]
- "Enhancing computer security incident analysis at nuclear facilities"[URL]
- Jae Geun Kim, "Nuclear power plant system" (2013), Yeungnam University Press
- "Simulink"[URL]