전투기 데이터 변조 공격행위에 대한 탐지모듈 제안
Proposal of Detection Module for Fighter Aircraft Data Modulation Attack
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
현대의 최첨단 전투기들은 독립적인 내장형 시스템으로 운용되고 있다. 이러한 내장형 시스템은 초기 높은 수준의정보보증 기준이 충족되어 도입되고 운용된다. 그러나 지속적인 작전운용 중에는 개별적인 전투기 플랫폼에 대한 사이버위협이 적극적으로 관리가 되지 않아 심각한 위험에 노출될 가능성이 있다. 이에 본 논문에서는 전투기 내장형시스템에 대한 사이버위협 요소를 분석하여 임무계획 및 정비 관련 데이터 처리과정에서 공격 가능한 취약점을 식별하였다. 또한, 이러한 취약점을 이용하여 항공데이터를 변조하는 사이버공격의 방법과 형태를 정의하고 대응을 위한탐지모듈을 제안하였다. 제안된 탐지모듈은 전투기 항공데이터 처리과정에서 악성코드 유입 등 데이터 변조공격에대한 탐지 및 대응이 가능할 것으로 기대되며 이를 통해 첨단 고가치 항공자산인 전투기를 대상으로 하는 잠재적 사이버 위협에 선제적으로 대응할 수 있을 것이다.
Abstract
Modern state-of-the-art military aviation assets are operated with independent embedded real-time operating systems(RTOS). These embedded systems are made with a high level of information assurance. However, once the systems are introducedand installed on individual platforms for sustaining operational employment, the systems are not actively managed and as aresult the platforms become exposed to serious threats. In this paper, we analyzed vulnerability factors in the processing ofmission planning data and maintenance-related data for fighter aircraft. We defined the method and form of cyber attacksthat modulate air data using these vulnerabilities. We then proposed a detection module for integrity detection. The designedmodule can preemptively respond to potential cyber threats targeting high - value aviation assets by checking andpreemptively responding to malware infection during flight data processing of fighter aircraft.
참고문헌 (20)
- Marcusson, Lief, "The Sponsor’S Overview of an it Project, According to it Project Managers Opinion", Journal of Economics and Management Sciences, 1(1), pp.65~77 (2018)
- Snyder, Don, "Cybersecurity of Air Force Weapon Systems: Ensuring Cyber Mission Assurance Throughout a System's Life Cycle", Rand Corporation, ~ (2015)
- Waheed, Mohammed, "A system for real-time monitoring of cybersecurity events on aircraft", Digital avionics Systems Conference (DASC), 2017 IEEE, 2017, 1~3[DOI]
- Koch, Robert, "Weapons systems and cyber security -a challenging union", 2016 8th interna tional Conference on Cyber Conflict (CyCon), pp.191~203 (2016)
- Korea Internet & Security Agency, "Software Development Security Guide for e-Government SW Developers", Operators, 2017
- "Micro software interactive, micro Software, Testing standards for embedded software", 132~139 (2011)
- Texas Instrument INC, "SYS", BIOS (TI-RTOS Kernel) User's Guide, 2017
- Wind River Systems INC, "vxworks kernel programmers guide 6.2", ~ (2005)
- Parkinson, Paul, "Safety-critical software development for integrated modular avionics", Embedded System Engineering, 11(7), pp.40~41 (2003)
- Qian, Hua-ming, "A embedded software testing process model", International Conference on Computational Intelligence and Software Engineering(CiSE) 2009IEEE, pp.1~5 (2009)
- Johnson, "DO-178B, Software considerations in airborne systems and equipment certification", Crosstalk, ~ (1998)
- Kowkutla, "Fundamentals of IP and SoC Security", pp.295~311 (2017), Springer, Cham
- Tsai, Wei-Tek, "Rapid embedded system testing using verification patterns", IEEE software, 68~75 (2005)
- Wotzak, William J, "Advanced integrated avionics testing system", U.S. Patent No. 5,638,383, ~ (1997)
- Abdelaziz, "Adaptive Software Development for developing safety critical software", 2015International Conference on Computing, Control, Networking, Electronics and Embedded Systems Engineering (ICCNEEE), pp.41~46 (2015)
- SJeppu, Yogananda V, "Testing safety critical Ada code using non real time testing", International Conference on Reliable Software Technologies, pp.382~393 (2003), Springer
- Singh, Raghu, "International Standard ISO", IEC 12207 software life cycle processes, 1996, pp.35~50
- Director․Operational Test and Evaluation, Mission Planning Systems (MPS), "Joint Mission Planning System – Air Force (JMPS-AF)", 2017, pp.267~268
- Cui, Ang, "When Firmware Modifications Attack : A Case Study of Embedded Exploitation", NDSS, pp.1~13 (2013)
- Foster, John, "A GPS-based pitot-static calibration method using global output error optimization", 48th AIAA Aerospace Sciences Meeting Including the New Horizons Forum and Aerospace Exposition, pp.1350~ (2010)