안전한 제어시스템 환경을 위한 트래픽 분석망 설계
Traffic Analysis Architecture for Secure Industrial Control System
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
제어시스템은 국가기반시설 및 산업분야 전반에 걸쳐 이용되기 때문에 사이버 공격을 받게 될 경우 공공분야에 직접적인 피해가 발생할 수 있다. 이러한 이유로, 제어시스템에 대한 보안요구사항이 제안되고 있으며 전자제어시스템보안가이드라인에 따라 외부망과 분리된 환경으로 운용되고 있다. 그럼에도 불구하고 스턱스넷(Stuxnet)과 같이 제어시스템을 겨냥한 악성코드가 지속적으로 발견되고 있으며, 신·변종 악성코드의 등장으로 실시간 탐지의 어려움과 자료유출등의 보안위협이 지속적으로 발생되고 있다. 본 논문에서는, 안전한 제어시스템 환경 제공을 위한 트래픽 분석망 도입에 대해 제안한다. 이를 위해 제어시스템에서 발생 가능한 보안위협들을 분석하고, 이러한 보안위협에 대응하기 위한보안기능들에 대하여 도출한다.
Abstract
The Industrial control system is adopted by various industry field and national infrastructure, therefore if it received cyber attack, the serious security problems can be occured in the public sector. For this reason, security requirements of the industrial control system have been proposed, in accordance with the security guidelines of the electronic control system, and it is operated by separate from the external and the internal network. Nevertheless, cyber attack by malware (such as Stuxnet) targeting to control system have been occurred continuously, and also the real-time detection of untrusted traffic is very difficult because there are some difficulty of keeping up with quickly evolving the advent of new-variant malicious codes. In this paper, we propose the traffic analysis architecture for providing secure industrial control system based on the analyzed the security threats, the security requirements, and our proposed architecture.
참고문헌 (16)
- NIS, "Secure data transmission security guidelines between national public business networks and internet", ~ (2010)
- Seung-Oh Choi, "Research Trends on Intrusion Detection System Technique of Control System", Jounal of The Korea Institute of Information Security & Cryptology, 24(5) (2014)
- Worm analysis of activities in industrial control systems, "KISA", ~ (2014)
- NIST, "Guide to Industrial Control Systems(ICS)Security", NIST Special Publication 800-82, ~ (2011)
- Luciana Obregon, "Secure Architecture for Industrial Control Systems", SANS Institute InfoSec Reading Room, ~ (2015)
- "IEC 62443-3-3, "Industrial communication networks-Network and system security-Part 3-3: System security requirements and security levels"", ~ (2013)
- NIS, "Security requirements for information security products for nation", ~ (2012)
- "Dailysecu" (2011)[URL]
- Jae-Jun Heo, "Infection process and countermeasures of Stunxnet", Jounal of The Korea Institute of Information Security & Cryptology, 21(7) (2011)
- "Ahnlab" (2016)[URL]
- KISA, "Vulnerability analysis·evaluation model", ~ (2002)
- Yoonjeong Kim, "IDS technical standards trends of ISO", IEC, 2004, ~
- Suphakit Niwattanakul, "Usingof Jaccard Coefficient for Keywords Similarity", Proceedings of the International MultiConference ofEngineering and Computer Scientists 2013 (2013)
- 함유정, "안드로이드 모바일 단말에서의 실시간 이벤트 유사도 기반 트로이 목마 형태의 악성 앱 판별 메커니즘", 인터넷정보학회논문지, 15(3), pp.31~43 (2014), 한국인터넷정보학회
- Mariano Graziano, "Towards Network Containment in Malware Analysis Systems", ACSAC '12 Proceedings of the 28th Annual Computer Security Applications Conference (2012)