EMS/SCADA의 DNP3 연계구간 보안성평가․인증 기술 연구
A Study of Security Certification and Accreditation for DNP3 linkage section in EMS/SCADA
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
기존의 EMS/SCADA에서 제어시스템과 필드디바이스 간의 연계시스템은 데이터의 신뢰성을 높이기 위해서 외부네트워크와의 망 분리를 통한 접근 통제를 하였지만 현재는 운영의 효율성 증대와 체계적 관리, 경제적 측면을 고려한외부 망과의 연결 필요성이 증가하고 있는 추세이다. 이런 발전한 연계구간은 과거에 비해 더 많은 보안 취약점을 갖게되었으며, EMS/SCADA 연계구간에서의 통신은 특별한 관리 방법이 필요하다. 본 논문에서는 국내 환경을 고려하여EMS/SCADA 연계구간에서 주로 사용되는 시리얼 DNP3와 TCP/IP기반 DNP3를 적용한 보안성 평가․인증기술을 제시하였다. 제시하는 보안성 평가․인증기술은 자원 안전성 테스트와 악성 패킷 테스트 2가지 세부 평가로 나누어안전성을 평가하며 각각의 보안 요구사항 및 평가방법을 도출하여 기존의 평가․인증 기술들과의 차별성을 제시하고자하였다.
Abstract
The linking system between the control system and the field devices in the existing EMS/SCADA, in order to increase the reliability of the data, and access control through the separation of external network. Currently, There is a tendency that the need for connection to an external network that takes into account the economic aspect, systematic management and efficiency of operations is increasing. Such is evolved linkage section, is to have more security vulnerabilities than in the past, Eventually communication EMS/SCADA linkage section requires special management method. In this paper, taking into account the domestic environment, were presented the security Certification and Accreditation technology that was applied to serial DNP3 and TCP/IP based DNP3 that are mainly used in EMS/SCADA linkage section. Presented to security of Certification and Accreditation technology, divided into Resource Robustness Test and Malicious Packet Test for evaluate the safety. Each of the security requirements and evaluation method in proposed technology, is an attempt to present the differentiation of the existing Certification and Accreditation technology.
참고문헌 (16)
- ISA, "Security for Industrial Automation and Control System, Part 4:Technical Security Requirements for an Industrial Automation and Control Systems", Draft 1, Edit 2, ~ (2008)
- "EDSA-406"[URL]
- Security and privacy controls for federal information systems and organizations, "FORCE, JOINT TASK", NIST, 53~, pp.Special Publication 800 (2013)
- Stouffer, Keith, "Guide to industrial control systems (ICS) security", NIST special publication, 800~882 (2011)
- Cyber Security-Incident Reporting and Response Planning, , NERC, ~, pp.CIP-008 (2006)
- IEEE, "IEEE Standard for Electric Power Systems Communications-Distributed Network Protocol (DNP3)", IEEE Std. 1815-2012 (Revision of IEEE Std. 1815-2010), ~ (2012)
- Erfan Ibrahim, "Overview of DNP3-SA", IEC 62351, ~ (2013)
- 장문수, "DNP3 제어시스템 프로토콜 취약점 실험", 보안공학연구논문지, 7(1), pp.15~28 (2010), 보안공학연구지원센터
- C. C. Michael, "Black Box Security Testing Tools", Cigital, ~ (2005)
- Hyosang Lee, "A Study of SCADA Function Specific Design in Korean EMS", Proceeding of The Transactions of Korean Institute of Electrical Engineers Summer Conference, pp.402~403 (2007)
- Tsutomu Yamada, "Trends and Development in Security Standards for Secure Social Infrastructure Systems", Hitachi Review, 63(5) (2014)
- "The Achilles Certification Program"[URL]
- Andre Teixeira, "A Cyber Security Study of a SCADA Energy Management System: Stealthy Deception Attacks on the State Estimator", Proc. of IFAC World Congress (2011)
- Giani, Annarita, "The VIKING project : an initiative on resilient control of power networks", ISRCS 2009-2nd International Symposium on Resilient Control Systems; Idaho Falls (2009)
- "Stuxnet introduces the first known rootkit for industrial control systems"[URL]
- 김태식, "전력시스템의 사이버보안 위협 규명 및 분류에 대한 연구", 보안공학연구논문지, 9(1), pp.53~66 (2012), 보안공학연구지원센터