Development of a method for securing the operator's situation awareness from manipulation attacks on NPP process data
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
According to the defense-in-depth concept, not only a preventive strategy but also an integratedcyberattack response strategy for NPPs should be established. However, there are limitations in terms ofresponding to penetrations, and the existing EOPs are insufficient for responding to intentional disruptions. In this study, we focus on manipulative attacks on process data. Based on an analysis of therelated attack vectors and possible attack scenarios, we adopt the Kalman filter to detect processanomalies that can be caused by manipulations of process data. To compensate for these manipulationsand secure MCR operators' situational awareness, we modify the Kalman filter such that it can filter outthe effects of the manipulations adaptively. A case study was conducted using a hardware-in-the-loopsystem. The results indicated that the developed method can be used to verify whether the displayedsafety-related state data are reliable and to implement the required safety response actions.
Abstract
According to the defense-in-depth concept, not only a preventive strategy but also an integratedcyberattack response strategy for NPPs should be established. However, there are limitations in terms ofresponding to penetrations, and the existing EOPs are insufficient for responding to intentional disruptions. In this study, we focus on manipulative attacks on process data. Based on an analysis of therelated attack vectors and possible attack scenarios, we adopt the Kalman filter to detect processanomalies that can be caused by manipulations of process data. To compensate for these manipulationsand secure MCR operators' situational awareness, we modify the Kalman filter such that it can filter outthe effects of the manipulations adaptively. A case study was conducted using a hardware-in-the-loopsystem. The results indicated that the developed method can be used to verify whether the displayedsafety-related state data are reliable and to implement the required safety response actions.
참고문헌 (65)
- 권기춘, "TECHNICAL REVIEW ON THE LOCALIZED DIGITAL INSTRUMENTATION AND CONTROL SYSTEMS", Nuclear Engineering and Technology, 41(4), pp.447~454 (2009), 한국원자력학회
- U.S, Nuclear Regulatory Commission, "REGULATORY GUIDE 5.71 Cyber Security Programs for Nuclear Facilities", 1~105 (2010)
- Regulatory Standard on Cyber Security for Computer and Information System of Nuclear Facilities, "Korea Institute of Nuclear Nonproliferation and Control", ~, pp.RS-015 (2014)
- Computer Security for Nuclear Security, "International Atomic Energy Agency", IAEA, ~, pp.IAEA Nuclear Security Series No. 42-G (2021)
- Computer security at nuclear facilities, "International Atomic Energy Agency(IAEA)", IAEA, ~, pp.IAEA Nuclear Security Series No., vol. 17 (2011)
- Objective and Essential Elements of a State's Nuclear Security Regime, "International Atomic Energy Agency(IAEA)", IAEA, ~, pp.IAEA Nuclear Security Series No. 20 (2013)
- 송재구, "A Cyber Security Risk Assessment for the Design of I&C Systems in Nuclear Power Plants", Nuclear Engineering and Technology, 44(8), pp.919~928 (2012), 한국원자력학회
- 신진수, "Cyber Security Risk Evaluation of a Nuclear I&C Using BN and ET", Nuclear Engineering and Technology, 49(3), pp.517~524 (2017), 한국원자력학회
- Chanyoung Lee, "Development of a quantitative method for evaluating the efficacy of cyber security controls in NPPs based on intrusion tolerant concept", Ann. Nucl. Energy, 112, pp.646~654 (2018)
- Chanyoung Lee, "Development of a quantitative method for identifying fault-prone cyber security controls in NPP digital I&C systems", Ann. Nucl. Energy, 142, pp.107398~ (2020)
- Yunfei Zhao, "Finite-horizon semi-Markov game for time-sensitive attack response and probabilistic risk assessment in nuclear power plants", Reliab. Eng. Syst. Saf, 201, pp.106878~ (2020)
- Cyber Security at Civil Nuclear Facilities: Understanding the Risks: Chatham House Report, "Caroline Baylon", Chatham House for the Royal Institute of International Affairs, ~ (2015)
- Hamed Orojloo, "A game-theoretic approach to model and quantify the security of cyber-physical systems", Comput. Ind, 88, pp.44~57 (2017)
- Fan Zhang, "A robust cybersecurity solution platform architecture for digital instrumentation and control systems in nuclear power facilities", Nucl. Technol, 206(7), pp.939~950 (2020)
- Jae-hee Roh, "Cyber security system with FPGA-based network intrusion detector for nuclear power plant", IECON 2020 the 46th Annual Conference of the IEEE Industrial Electronics Society (2020), IEEE
- Computer Security Incident Response Planning at Nuclear Facilities, "International Atomic Energy Agency(IAEA)", IAEA, ~, pp.IAEA-TDL-005 (2016)
- Chanyoung Lee, "Development of a method for estimating security state : supporting integrated response to cyber-attacks in NPPs", Ann. Nucl. Energy, 158, pp.108287~ (2021)
- Lee, Chanyoung, "Development of a cyberattack response planning method for nuclear power plants by using the Markov decision process model", Ann. Nucl. Energy, 166, pp.108725~ (2022)
- Hyun Gook Kang, "A quantitative study on risk issues in safety feature control system design in digitalized nuclear power plant", J. Nucl. Sci. Technol, 45(8), pp.850~858 (2008)
- Elias Levy, "Crossover : online pests plaguing the offline world", IEEE Security &Privacy, 1(6), pp.71~73 (2003)
- Thomas M. Chen, "Lessons from stuxnet", Computer, 44(4), pp.91~93 (2011)
- Computer Security of Instrumentation and Control Systems at Nuclear Facilities, "International Atomic Energy Agency(IAEA)", IAEA, ~, pp.IAEA Nuclear Security Series No. 33-T (2018)
- Jong Woo Park, "A quantitative assessment framework for cyber-attack scenarios on nuclear power plants using relative difficulty and consequence", Ann. Nucl. Energy, 142, pp.107432~ (2020)
- Pierre Le Bot, "Human reliability data, human error and accident modelsdillustration through the Three Mile Island accident analysis", Reliab. Eng. Syst. Saf, 83(2), pp.153~167 (2004)
- Yanhua Zou, "Human Reliability Analysis for Digitized Nuclear Power Plants: Case Study on the LingAo II Nuclear Power Plant", Nuclear Engineering and Technology, 49(2), pp.335~341 (2017), 한국원자력학회
- Development of a Standard Method for Human Reliability Analysis of Nuclear Power Plants, "Won Dea Jung", KAERI, ~, pp.KAERI (2005), TR-2961[DOI]
- Hee Eun Kim, "Systematic development of scenarios caused by cyberattack-induced human errors in nuclear power plants", Reliab. Eng. Syst. Saf, 167, pp.290~301 (2017)
- Myeong-Soo Lee, "Integrated Performance Validation Facility for KNICS MMIS", the Korean Nuclear Society Spring Meeting (2007)
- 송재구, "An Analysis of Technical Security Control Requirements for Digital I&C Systems in Nuclear Power Plants", Nuclear Engineering and Technology, 45(5), pp.637~652 (2013), 한국원자력학회
- Harold Booth, "The National Vulnerability Database (Nvd): Overview", ~ (2013)
- Malicious Control System Cyber Security Attack Case Study-Maroochy Water Services, "Marshall Abrams", MITRE CORP MCLEAN VA MCLEAN, ~ (2008)
- WIN32, "INDUSTROYER: a new threat for industrial control systems", Anton Cherepanov, 2017
- Robert M. Lee, "Crashoverride : Analysis of the Threat to Electric Grid Operations" (2017), Dragos Inc
- Suvi Lepp€anen, "Cyber security incident reportdNorsk Hydro, Procedia Economics and Finance" (2019)
- Andr"e Teixeira, "A secure control framework for resource-limited adversaries", Automatica, 51, pp.135~148 (2015)
- Yilin Mo, "Secure Control against Replay attacks." 2009 47th Annual Allerton Conference on Communication", Control, and Computing (Allerton) (2009), IEEE
- Roy S. Smith, "Covert misappropriation of networked control systems : presenting a feedback structure", IEEE Control Syst. Mag, 35(1), pp.82~92 (2015)
- Hyun Gook Kang, "Information theoretic approach to manmachine interface complexity evaluation", IEEE Trans. Syst. Man Cybern. Syst. Hum, 31(3), pp.163~171 (2001)
- Jong Hyun Kim, "A quantitative approach to modeling the information flow of diagnosis tasks in nuclear power plants", Reliab. Eng. Syst. Saf, 80(1), pp.81~94 (2003)
- Chanyoung Lee, "Transactions of the American Nuclear Society" (2020), American Nuclear Society
- Francesco Di Maio, "A dynamic probabilistic safety margin characterization approach in support of Integrated Deterministic and Probabilistic Safety Analysis", Reliab. Eng. Syst. Saf, 145, pp.9~18 (2016)
- Wei Wang, "A Monte Carlo-based exploration framework for identifying components vulnerable to cyber threats in nuclear power plants", Reliab. Eng. Syst. Saf, 175, pp.24~37 (2018)
- Derui Ding, "A survey on security control and attack detection for industrial cyber-physical systems", Neurocomputing, 275, pp.1674~1683 (2018)
- Theodore J. Williams, "The Purdue enterprise reference architecture", Comput. Ind, 24(2-3), pp.141~158 (1994)
- Identifying Systems and Assets Subject to the Cyber Security Rule, "Nuclear Energy Institute", ~, pp.NEI 10-04 Rev.2 (2012)
- The U.S. Nuclear Regulatory Commission's Cyber Security Regulatory Framework for Nuclear Power Reactors, "U.S., Nuclear Regulatory Commission", 1~77, pp.NUREG (2014), CR-7141
- Dong Hyuk Lim, "Smart soft-sensing for the feedwater flowrate at PWRs using a GMDH algorithm", IEEE Trans. Nucl. Sci, 57(1), pp.340~347 (2010)
- Young Gyu No, "Monitoring the performance of Aux. Feedwater pump using smart sensing model", KNS Autumn Meeting, pp.29~30 (2015)
- Seung Geun Kim, "Development of a generative-adversarial-network-based signal reconstruction method for nuclear power plants", Ann. Nucl. Energy, 142, pp.107410~ (2020)
- François Auger, "Industrial applications of the Kalman filter : a review", IEEE Trans. Ind. Electron, 60(12), pp.5458~5471 (2013)
- Samira Roshany-Yamchi, "Kalman filter-based distributed predictive control of large-scale multi-rate systems : application to power networks", IEEE Trans. Control Syst. Technol, 21(1), pp.27~39 (2011)
- Xinan Zhang, "Sensor fault detection, isolation and system reconfiguration based on extended Kalman filter for induction motor drives", IET Electr. Power Appl, 7(7), pp.607~617 (2013)
- Kebina Manandhar, "Detection of faults and attacks including false data injection attack in smart grid using Kalman filter", IEEE transactions on control of network systems, 1(4), pp.370~379 (2014)
- Venkata Reddy Palleti, "A mechanistic fault detection and isolation approach using Kalman filter to improve the security of cyber physical systems", J. Process Control, 68, pp.160~170 (2018)
- Takashi Irita, "Decentralized fault detection of multiple cyber attacks in power network via Kalman filter", 2015 European Control Conference (ECC) (2015), IEEE
- Jairo Giraldo, "A survey of physics-based attack detection in cyberphysical systems", ACM Comput. Surv, 51(4), pp.1~36 (2018)
- Jean-Yves Keller, "Monitoring of stealthy attack in networked control systems", 2013 Conference on Control and Fault-Tolerant Systems (SysTol) (2013), IEEE
- Chuadhry Mujeeb Ahmed, "Limitations of state estimation based cyber attack detection schemes in industrial control systems", 2016 Smart City Security and Privacy Workshop, SCSP-W) (2016), IEEE
- 송재구, "원자력발전소 사이버보안 훈련을 위한 HIL(Hardware In the Loop) System 개발", 정보보호학회논문지, 29(4), pp.867~875 (2019), 한국정보보호학회[DOI]
- S. I. L. V. A. e, "Advanced method for neutronics and system code coupling RELAP, PARCS, and MATLAB for instrumentation and control assessment", Ann. Nucl. Energy, 140, pp.107098~ (2020)
- e Silva, RA Busquim, "Cybersecurity assessment framework for digital interface between safety and security at nuclear power plants", International Journal of Critical Infrastructure Protection, 34, pp.100453~ (2021)
- Chanyoung Lee, "Development of a demonstrable nuclear cyber security test-bed and application plans", Transactions of the, vol. 2019, KNS Spring Meeting, pp.23~25 (2019)
- 신진수, "Application of STPA-SafeSec for a cyber-attack impact analysis of NPPs with a condensate water system test-bed", Nuclear Engineering and Technology, 53(10), pp.3319~3326 (2021), 한국원자력학회[DOI]
- MathWorks, "System Identification Toolbox User's Guide", MathWorks, ~ (2016)
- Jae-gu Song, "Preparation for cyber security incident response training in nuclear power plants", Transactions of the 2020, KNS Spring Meeting, pp.9~11 (2020)
