ISA 100.11a 및 WirelessHART 기반 보안위협 식별 및 보안요구사항 도출 연구
Security Threats Analysis and Security Requirement for Industrial Wireless Protocols : ISA 100.11a and WirelessHART
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 산업에서는 산업 자동화를 구축하여 효율적인 시스템 관리를 위해 WISN(Wireless Industrial SensorNetwork)를 도입하고 있다. 무선센서를 도입하는 WISN는 도입하여 많은 엔지니어링 비용을 절감하고 공정 프로세서의 최적화를 이루어내면서 무선으로의 통신의 사용이 증가하고 있다. 산업용 무선 센서 네트워크에 대한 실증 연구는 활발하게 진행되고 있지만, 이에 대한 보안 연구는 적으며 그만큼 위협에 노출되어 있다. 뿐만 아니라 무선 통신프로토콜의 표준 자체의 문제점이 있을 경우 표준에 따라 인증된 기기 또한 문제점을 포함한 보안 위협이 따를 수 있다. 각 프로토콜의 표준에서는 보안키를 분배하기 위한 절차가 제시되어 있지 않거나 혹은 기기가 네트워크에 진입할때 Global Data Link 키를 사용하여 보안에 취약한 문제점이 있었다. 본 논문에서는 표준에 기반하여 ISA100.11a와 WirelessHART 프로토콜 스택에 따른 보안 기능과 위협에 대해 분석 표준 자체의 문제점을 제시하고그에 따른 보안 요구 사항에 대해 제시한다.
Abstract
In recent years, industrial automation has been established and WISN (Wireless Industrial Sensor Network) has beenintroduced for efficient system management. By introducing WISN, many engineering costs have been reduced and processprocessors have been optimized. And communication flow using wireless is increasing. An empirical study on industrialwireless sensor networks is actively conducted, but there are few security studies on them and they are exposed to suchthreats. If there is a problem with the standard of the wireless communication protocol itself, the device that is certifiedaccording to the standard may also be subject to security threats including problems. We analyze security functions andthreats of ISA 100.11a and WirelessHART protocol stack based on standards. Procedures for distributing the security key arenot provided or it is vulnerable using the Global Data Link key when the device enters the network. This paper presentsthe problems of the standard itself and presents the security requirements accordingly.
참고문헌 (12)
- B&R Industrial Automation, "Smart Factory:Industry 4.0", ~ (2016)
- Dr.Manjari Asawa, "Synchronized and Business-Ready Microgrid:An Industrial Internet Consortium Results White Papaer" (2017)
- Tobias: White paper: ZigBee Exploited – The good, the bad and the ugly. Technical report, "Zillner", Cognosec, 1~6 (2015)
- Nixon, Mark, "A Comparison of WirelessHART and ISA100. 11a", Whitepaper, Emerson Process Management, 1~36 (2012)
- Lennvall, Tomas, "A comparison of WirelessHART and ZigBee for industrial applications", 2008 IEEE International Workshop on Factory Communication Systems, pp.85~88 (2008), IEEE
- Zhang, Xuan, "Research and implementation of security mechanism in ISA100. 11a networks", 2009 9th International Conference on Electronic Measurement & Instruments, pp.4~716 (2009), IEEE
- Alcaraz, Cristina, "A security analysis for wireless sensor mesh networks in highly critical systems", IEEE Transactions on Systems, Man, and Cybernetics, Part C (Applications and Reviews), 40(4), pp.419~428 (2010)
- "ANSI", ISA-100 , ANSI, pp.2011, 1~792
- Montenegro, Gabriel, "Transmission of IPv6 packets over IEEE 802.15. 4 networks", No. RFC 4944, ~ (2007)
- Wang Gengyun, "Comparison and Evaluation of Industrial Wireless Sensor Network Standards ISA100. 11a and WirelessHART", Master, pp.2011
- HART Communication Foundation, "IEC-62591:Industrial networks –Wireless communication network and communication profiles –WirelessHART™", 1~1043 (2016)
- Bayou, "Security analysis of WirelessHART communication scheme", International Symposium on Foundations and Practice of Security, pp.223~238 (2016)