AMI 공격 시나리오에 기반한 스마트그리드 보안피해비용 산정 사례
A Case Study of the Impact of a Cybersecurity Breach on a Smart Grid Based on an AMI Attack Scenario
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
스마트그리드는 사물인터넷의 핵심 응용서비스이고, 그 중 가장 핵심적인 구성요소인 AMI((Advanced Metering Infrastructure)는 전기사업자와 소비자의 접점에 위치하고 있으며, 스마트 미터는 소비자의 전기사용을 기록하고 사업자에게 전달하는 역할을 한다. 본 논문에서는 스마트그리드에서 소비자와 직접 맞닿아 있는 스마트 미터를 중심으로AMI에 대한 NESCOR에서 제시하고 있는 사이버공격 및 피해 시나리오를 기반으로 피해비용을 산정한다. 본 연구의결과는 정책입안자나 전기사업자가 스마트그리드 관련 투자의사결정을 하는데 참고가 될 수 있을 것이다.
Abstract
The smart grid, a new open platform, is a core application for facilitating a creative economy in the era of the Internet of Things (IoT). Advanced Metering Infrastructure (AMI) is one of the components of the smart grid and a two-way communications infrastructure between the main utility operator and customer. The smart meter records consumption of electrical energy and communicates that information back to the utility for monitoring and billing. This paper investigates the impact of a cybersecurity attack on the smart meter. We analyze the cost to the smart grid in the case of a smart meter attack by authorized users based on a high risk scenario from NESCOR. Our findings could be used by policy makers and utility operators to create investment decision-making models for smart grid security.
참고문헌 (39)
- MOEIA, "Smart grid national roadmap", ~ (2010)
- CSPC, "Securing the U.S. electrical grid", ~ (2014)
- Smart grid AMI technology trend report, "KSGA", ~ (2012)
- Smart grid security technology trend report, "KSGA", ~ (2012)
- Ernst&Young, "Cybersecurity and the Internet of Things", ~ (2015)
- L.A. Gordon, "Managing cybersecurity resources: A cost-benefit analysis" (2005), McGraw-Hill
- H. Cavusoglu, "A model for evaluating IT security investments", Communications of the ACM, 47(7), pp.87~92 (2004)
- L.D. Bodin, "Evaluating information security investments using the analytic hierarchy process", Communications of the ACM, 48(2), pp.78~83 (2005)
- R.L. Kumar, "Understanding the value of countermeasure portfolios in information systems security", Journal of Management Information Systems, 25(2), pp.241~280 (2008)
- RAND Corporation, "The defender's dilemma:Charting a course toward cybersecurity", ~ (2015)
- Jang SangSoo, "Information security management system development and application" (2015), Life and Power Press
- DOE, "Electricity subsector cybersecurity risk management process", ~ (2012)
- KATS, "R&D roadmap based on technology standards: Smart grid", ~ (2014)
- D. Grochocki, "AMI threats, intrusion detection requirements and deployment recommendations", 2012 IEEE Third International Conference on Smart Grid Communications(SmartGridComm), pp.395~400 (2012)
- 강성구, "전기자동차 충전 인프라에서의 보안위협 및 보안요구사항 분석", 정보보호학회논문지, 22(5), pp.1027~1037 (2012), 한국정보보호학회
- H. Suleiman, "Evaluating the effectiveness of the security quality requirements engineering (SQUARE) method: a case study using smart grid advanced metering infrastructure", Requirements Engineering, 18(3), pp.251~279 (2013)
- F. Aloul, "Smart grid security : Threats, vulnerabilities and solutions", Journal of Smart Grid and Clean Energy, 1(1), pp.1~6 (2012)
- G. Kalogridis, "Privacy for smart meters : Towards undetectable appliance load signatures", 2010 First IEEE International Conference on Smart Grid Communications(SmartGridComm), pp.232~237 (2010)
- Advanced metering infrastructure security considerations, "R.C. Parks", SANDIA REPORT: Sandia National Laboratories, ~ (2007)
- H. Chaudhry, "Security concerns of a plug-in vehicle", 2012 IEEE PES Innovative Smart Grid Technologies(ISGT) (2012)
- S. Clements, "Cyber-security considerations for the smart grid", 2012 IEEE Power and Energy Society General Meeting (2012)
- S. McLaughlin, "Energy theft in the advanced metering infrastructure", Critical Information Infrastructures Security, 176~187 (2010)
- V. Aravinthan, "Wireless AMI application and security for controlled home area networks", IEEE Power and Energy Society General Meeting, pp.1~8 (2011)
- W. Su, "A survey on the electrification of transportation in a smart grid environment", IEEE Transactions on Industrial Informatics, 8(1), pp.1~10 (2012)
- Analysis of Selected Electric Sector High Risk Failure Scenarios, "NESCOR", ~ (2013)
- NIST, "NIST framework and roadmap for smart grid interoperability standards", Release 1.0, ~ (2010)
- NESCOR, "Attack trees for selected electric sector high risk failure scenarios", ~ (2013)
- The market report for 2013-2014energy technology, "KETEP", ~ (2014)
- MOTIE, "Plan smart meter and ESS supply", ~ (2013)
- A. Acquisti, "Is there cost privacy breaches? An event study", The 5th Workshop on the Economics of Information Security(WEIS) (2006)
- M. Ishiguro, "The effect of information security incidents on corporate values in the japanese stock market", Workshop on the Economics of Securing the Information Infrastructure(WESII) (2006)
- MOI, "Understanding privacy act", ~ (2012)
- Kim Sehun, "Information Security Management and Policy" (2002), Life and Power Press
- KIET, "Making secure net for Internet of Things : Convergence security industry", e-KIET Industry Economics Information, 586, pp.1~12 (2014)