본문 바로가기
KERD
논문KCI 등재

위협 모델링을 이용한 선박 사이버보안 요구사항 연구

A Study on Cyber Security Requirements of Ship Using Threat Modeling

차영균|조용현
한국정보보호학회 (Korea Institute Of Information Security And Cryptology)|2019.06|정보보호학회논문지 (Journal of The Korea Institute of Information Security and Cryptology)|제29권 제3호|pp. 657-673|DOI https://doi.org/10.13089/JKIISC.2019.29.3.657

0

조회

0

다운로드

10

인용

0

참고문헌

키워드

Threat AnalysisMASSMaritime Cyber SecurityThreat-ModelingShip Cyber Security
주제분류컴퓨터학

초록

최근 운항되고 있는 선박은 전자해도시스템 및 자동위치식별장치 등 다양한 IT, OT 시스템이 사용되고 있어 선박건조와 항해 환경까지 고려한 보안 요소가 요구된다. 하지만, 선박과 조선 ICT 기자재 산업에 관한 사이버보안 연구는 아직 부족한 현실이며, 위협 모델링을 통한 체계적인 방법론이 부족하다. 본 논문에서는 선박 시스템에 접근하는이해관계자를 고려하여 Data Flow Diagram을 수립하였다. 선박 시스템들의 보안 취약점과 사례들을 수집한Attack Library를 기반으로 STRIDE 방법론과 Attack Tree를 활용한 위협 모델링을 통해 선박에서 발생 가능한 위협을 식별하고 선박 사이버보안 대책을 제시하고자 한다.

Abstract

As various IT and OT systems such as Electronic Chart Display and Information System and Automatic IdentificationSystem are used for ships, security elements that take into account even the ship's construction and navigation environmentare required. However, cyber security research on the ship and shipbuilding ICT equipment industries is still lacking, andthere is a lack of systematic methodologies through threat modeling. In this paper, the Data Flow Diagram was establishedin consideration of stakeholders approaching the ship system. Based on the Attack Library, which collects the securityvulnerabilities and cases of ship systems, STRIDE methodologies and threat modeling using the Attack Tree are designed toidentify possible threats from ships and to present ship cyber security measures.

참고문헌 (68)

  1. A Study on the Policy Directions related to the Introduction of Maritime Autonomous Surface Ship (MASS), "Hye-Ri Park", Korea Maritime Institute, ~ (2018)
  2. Paul Barnes, "Assurance of Security in Maritime Supply Chains", The 6th International Business research Forum, 11(4), pp.519~540 (2005)
  3. OECD Maritime Transport Committee, "Security in maritime transport: risk factors and economic impact", OECD, ~ (2003)
  4. Joel Whitehead, "Safety and Shipping Review 2018", ALLIANZ, ~ (2018)
  5. Kimberly Tam, "Cyber-Risk Assessment for Autonomous Ships", 2018 International Conference on Cyber Security and Protection of Digital Services (Cyber Security), pp.1~8 (2018)
  6. Kevin D. Jones, "Threats and Impacts in Maritime Cyber Security", Engineering & Technology Reference, pp.5~ (2016)
  7. Adam Shostack, "Experiences Threat Modeling at Microsoft", MODSEC@MoDELS 2008 (2008)
  8. Zhendong Ma, "Threat Modeling for Automotive Security Analysis, Advanced Science and Technology Letters", SecTech 2016, 139, pp.333~339 (2016)
  9. Rafiullah Khan, "STRIDE-based Threat Modeling for Cyber-Physical", 2017 IEEE PES:Innovative Smart Grid Technologies Conference Europe (ISGT-Europe):Proceedings 2017, pp.1~7 (2017)
  10. Stijn van Winsen, "Threat Modelling for Future Vehicles, On Identifying and Analysing Threats for Future Autonomous and Connected Vehicles", Master, pp.2017
  11. Gwang-Il Lee, "International standardization trend of onboard communication", TTA Journal, 126, pp.45~51 (2009)
  12. K. I. Lee, "Standardization Activities for Ship IT Convergence Technology", ETRI, Electronics and telecommunications trends, 28(4) (2013)
  13. Dong-Keun Jeon, "TDMA based HR-WPAN Application for a Ship Area Network with Link Transmission Parameters Selection Algorithm", International Journal of Control and Automation, 8(2), pp.299~310 (2015)
  14. 김영창, "NMEA2000 프로토콜을 적용한 선박 모니터링 시스템 설계 및 구현", 한국정보통신학회논문지, 19(2), pp.317~322 (2015), 한국정보통신학회[DOI]
  15. Ik-roh Yoon, "Technology Assessment : Autonomous Ships", KIMST, ~ (2018)
  16. Dr. Marco Balduzzi, "AIS Exposed Understanding Vulnerabilities &Attacks 2.0", Blackhat asia 2014 (2014)
  17. "Hacked at sea:Researchers find ships’ data recorders vulnerable to attack" (2019)[URL]
  18. Ruben Santamarta, "SATCOM Terminals : Hacking by Air, Sea, and Land", IOACTIVE, ~ (2014)
  19. "Global Navigation Satellite Systems – Trust, But Verify - Report Disruptions Immediately" (2019)[URL]
  20. "Global Navigation Satellite Systems – Trust, But Verify - Report Disruptions Immediately" (2019)[URL]
  21. "Navis WebAccess SQL Injection Vulnerability" (2019)[URL]
  22. "maritime-executive, Nigerian Hacking Group Targets Shipping Firms" (2019)[URL]
  23. "Svitzer employee details stolen in data breach affecting almost half of its Australian employees" (2019)[URL]
  24. "spglobal, Shipping: BW Group's computer systems hacked; steps up cyber security" (2019)[URL]
  25. "reuters, UK shipping firm Clarkson reports cyber attack" (2019)[URL]
  26. "c i m s e c , C Y B E R P H Y S I C A L FORENSICS: LESSONS FROM THE USS JOHN S. MCCAIN COLLISION" (2019)[URL]
  27. "A.P Moller 2017 Risk Management Report" (2019)[URL]
  28. "Court to sentence 2employees of a company that hacked into Jindo VTS" (2019)[URL]
  29. "CYBER SECURITY FLEET PROTECTION" (2019)[URL]
  30. "rntfnd, Hackers took ‘full control’ of container ship’s navigation systems for 10 hours – IHS Fairplay" (2019)[URL]
  31. "Vulnerabilities Found in AmosConnect 8 Maritime Communications Systems" (2019)[URL]
  32. Marco Balduzzi, "A Security Evaluation of AIS", Trend Micro, ~ (2014)
  33. Jenna Ahokas, "CYBERSECURITY IN PORTS", HAZARD Project Turku School of Economics University of Turku, 15~ (2017)
  34. "Pirates hacked shipping company to steal info for efficient hijackings" (2019)[URL]
  35. Marko Helenius, "MARITIME CYBER SECURITY INCIDENT DATA REPORTING FOR AUTONOMOUS SHIPS", Master, pp.2017
  36. Marco Balduzzi, "A security evaluation of AIS automated identification system", ACSAC '14 Proceedings of the 30th Annual Computer Security Applications Conference, pp.436~445 (2014)
  37. Cyril Ray, "DeAIS project : Detectionof AIS Spoofing and Resulting Risks", MTS, 2015, ~
  38. "CVE-2018-5728" (2019)[URL]
  39. "CVE-2018-5267" (2019)[URL]
  40. "CVE-2013-7180" (2019)[URL]
  41. "CVE-2018-5266" (2019)[URL]
  42. "CVE-2018-5071" (2019)[URL]
  43. "CVE-2014-2964" (2019)[URL]
  44. "CVE-2014-2942" (2019)[URL]
  45. "CVE-2014-0328" (2019)[URL]
  46. "CVE-2013-7180" (2019)[URL]
  47. "CVE-2014-2940" (2019)[URL]
  48. "Cobham Sailor 6000 series sat ellite terminal contain hardcoded cred entials" (2019)[URL]
  49. "CVE-2014-2941" (2019)[URL]
  50. "CVE-2013-2038" (2019)[URL]
  51. "CVE-2016-9339" (2019)[URL]
  52. "CVE-2018-5401" (2019)[URL]
  53. "CVE-2006-6488" (2019)[URL]
  54. "CVE-2016-5817" (2019)[URL]
  55. "Furuno Voyage Data Recorder (VDR) moduleserv firmware update uti lity fails to properly sanitize user-prov ided input" (2019)[URL]
  56. "CVE-2018-16705" (2019)[URL]
  57. "CVE-2018-16591" (2019)[URL]
  58. "CVE-2018-16590" (2019)[URL]
  59. "CVE-2017-3221" (2019)[URL]
  60. "CVE-2017-3222" (2019)[URL]
  61. "CVE-2014-0326" (2019)[URL]
  62. "CVE-2014-0327" (2019)[URL]
  63. "CVE-2018-5399" (2019)[URL]
  64. "CVE-2018-5400" (2019)[URL]
  65. "CVE-2018-5401" (2019)[URL]
  66. "CVE-2018-5402" (2019)[URL]
  67. "CVE-2018-17174" (2019)[URL]
  68. Technical and Managerial Study of Personal Information Protection on Smart Grid Service, "Shim Jae-Suk", KISA, 90~, pp.KISA-WP-2015-0044 (2016)

관련 논문AI추천

선박 시스템 공격 표면 분석 및 사이버 위협 평가를 위한 선박 베이지안 네트워크 모델 개발김휘강, 조용현, 최명진한국정보보호학회 · 정보보호학회논문지2025 · 제35권 제6호위협모델링을 이용한 전기차 충전 인프라의 보안요구사항에 대한 연구김승주, 차예슬한국정보보호학회 · 정보보호학회논문지2017 · 제27권 제6호STRIDE 위협 모델링에 기반한 스마트팩토리 보안 요구사항 도출김승주, 박은주한국정보보호학회 · 정보보호학회논문지2017 · 제27권 제6호선박 평형수 시스템의 위협 분석 및 위험 평가에 관한 연구임효석, 조용현, 최원석한국정보보호학회 · 정보보호학회논문지2024 · 제34권 제5호해운 사이버 보안 공격 패턴 및 강화 방안 분석강달원, 박창기한국해운물류학회 · 해운물류연구2024 · 제40권 제3호선박 사이버 보안에 대한 기술적 분석강남선한국마린엔지니어링학회 · 한국마린엔지니어링학회지2018 · 제42권 제6호

이 간행물의 다른 논문 (19건)

GPGPU 기술을 활용한 차분 확률의 통계적 분석홍득조, 조은지, 홍석희, 김성겸, 성재철pp. 477-489비프로파일링 기반 전력 분석의 성능 향상을 위한 오토인코더 기반 잡음 제거 기술홍석희, 김희석, 진성현, 권동근pp. 491-501우수한 공간 효율성을 제공하는 순서노출암호 기법김기성pp. 503-509NIST 소수 P-256에서 효율적인 모듈러 감산 방법장남수pp. 511-514224비트 소수체에서 효율적인 모듈러 곱셈장남수pp. 515-518
원문 보기