자동차 공급망 위험관리(A-SCRM) 방안 연구
A Study on Supply Chain Risk Management of Automotive
0
조회
0
다운로드
8
인용
0
참고문헌
키워드
초록
현대의 자동차는 안전필수(Safety Critical) 시스템이기 때문에 차량의 안전성을 보장하는 것은 물론 초 연결사회를 지향하는 사물인터넷 기술의 발전과 자동차의 스마트화 됨에 따른 자동차 보안문제가 대두됨에 따라 자동차소프트웨어와 공급망에서의 보증 방안과 공급망에서 발생할 수 있는 위험을 식별, 평가 및 통제하기 위한 위험관리방안이 필요하다. 본 논문에서는 자동차 Life-Cycle 내에서 이해관계자 별 위험관리(A-SCRM, Automotive Supply Chain Risk Management) 방법을 연구 제안한다.
Abstract
Due to the rise of automotive security problems following automotive safety and the progress of the internet technology leading to a hyper-connected society, guaranteeing the safety of automotive requires security plans in the supply chain assurance and automotive software, and risk management plans for identifying, evaluating, and controlling the risks that may occur from the supply chain since the modern automotive is a Safety Critical system. In this paper, we propose a study on Automotive Supply Chain Risk Management (A-SCRM) procedures by person interested within the automotive Life-Cycle.
참고문헌 (26)
- Seonghyun Yun, "A study on international standards and safety requirements for the development of automotive safety-related software", KSAE, pp.1884~1890 (2009)
- Younho Kim, "A Method of System Requirements Specification Corresponding to ISO 26262 Functional Safety", KSAE, pp.1548~1553 (2011)
- "IEC 61508, Functional safety of E", E, IEC, pp.1999, ~
- "ISO CD 26262, Road vehicles Functional Safety", ISO, ~ (2011)
- AUTOSAR, "Main Requirements", ~ (2008)
- AUTOSAR, "Specification of operating system", ~ (2008)
- Comprehensive Experimental Analyses of Automotive Attack Surfaces, "Stephen Checkoway", USENIX Security, 1~16 (2011)
- Kari Koscher, "Experimental Security Analysis of a Moderm Automobile", IEEE Symposium of Security and Privacy, pp.16~19 (2010)
- Ishtiaq Rouf, "Security and Privcy Vulnerabilities of In-Car Wireless Network : A Tire Pressure Monitoring System Case Study", USENIX Security, pp.1~16 (2010)
- Kang-suk Kim, "Analysis of potential external threats vehicle ECU via CAN communications eavesdropping and manipulation", 석사, pp.2010
- "US: Researchers hack BMW, OnStar, Ford SYNC and Hyundai telematics" (2011)[URL]
- "Hacker Disables More Than 100 Cars Remotely"[URL]
- "Hackers steal Subaru Outback with smartphone" (2011)[URL]
- "SBS News" (2012)[URL]
- "hankooki.com" (2013)[URL]
- "Police admit they're 'stumped' by mystery car thefts" (2013)[URL]
- Won-jong Kim, "Car Securtiy Technology", NIPA, Week Technology Trends, 1601, pp.10~20 (2013)
- Guan-tak Lim, "On the Improvement and Application of the FMEA Process in ISO 26262", 박사, pp.2013
- Software Assurance, "Software Assurance in Acquisition and Contract Language", buildsecurityin.us-cert.gov, Acquisition & Outsourcing, 1 (2012)
- Rome, NY, "Software Development Security: A Risk Management Perspective", The DOD Software Tech News Secure Software Engineering, 8(2) (2005)
- Supply Chain Risk Management Practices for Federal Information Systems and Organizations(Second Draft), "NIST", NIST, ~, pp.SP800-161 (2014)
- Approaches for Embedded System Information Security(2010 revised Edition), "IPA", IPA, ~ (2010)
- Security requirements for automotive on-board networks based on dark-side scenarios, "EVITA", EVITA, ~ (2008)
- Approaches for Vehicle Information Security, "IPA", IPA, ~ (2013)
- Young-Hun Ki, "Implementation of the Integrated ESP and ACC in a CAN-Based Control System", KSAE, pp.2231~2236 (2007)