다양성보호계통 사이버보안 연계 위협 분석 방안 = An Analysis Measure for Cybersecurity linked Threat against Diverse Protection Systems

다국어 초록 (Multilingual Abstract)

With the development of information technology, the cybersecurity threat continues as digital-related technologies are applied to the instrumentation and control system of nuclear power plants. The malfunction of the instrumentation and control system can cause economic damage due to shutdown, and furthermore, it can lead to national disasters such as radioactive emissions, so countering cybersecurity threats is an important issue. In general, the study of cybersecurity in instrumentation and control systems is concentrated on safety systems, and diverse protection systems perform protection and reactor shutdown functions, leading to reactor shutdown or, in the worst case, non-stop situations. To accurately analyze cyber threats in the diverse protection system, its linked facilities should be analyzed together. Risk analysis should be conducted by analyzing the potential impact of inter-facility cyberattacks on related facilities and the impact of cybersecurity on each configuration module of the diverse protection system. In this paper, we analyze the linkage of the diverse protection system and discuss the cybersecurity linkage threat by analyzing the availability of equipment, the cyber threat impact of the linked equipment, and the configuration module's cybersecurity vulnerability.

참고문헌 (Reference)

1 엄익채, "핵심기반시설 사이버 보안 평가 모델링 기법 연구" 한국디지털정책학회 17 (17): 105-113, 2019

2 "한국원자력안전기술원 규제기준, "제8장 계측제어계통,“ KINS/RS-N08.00"

3 정성민, "원전 무선 센서 네트워크에 적합한 클러스터 헤드 체인 라우팅 프로토콜" (사)디지털산업정보학회 16 (16): 61-68, 2020

4 정성민, "원전 다양성 보호계통 사이버보안 테스트베드 설계" 27 (27): 292-294, 2020

5 권기춘, "원전 계측제어시스템 현재와 미래" 46-62, 2016

6 "원자력안전위원회규칙 제24호, “원자로시설 등의기술기준에 관한 규칙,”"

7 "원자력안전위원회고시 제2018-6호, “원자로시설의 안전등급과 등급별 규격에 관한 규정,”"

8 송동훈, "사이버보안 위협평가를 통한 원자력시설 등 중요시설대상 최신 사이버 위협 사례 분석 연구" 한국정보보호학회 28 (28): 51-60, 2018

9 USNRC, "Section 50.62 Requirements for Reduction of Risk from Anticipated Transients without Scram(ATWS) Events for Light-WaterCooled Nuclear Power Plants"

10 Dong-Joo Kang, "Quantitative Methodology to Assess Cyber Security Risks of SCADA system in Electric Power Industry" Korea Institute of Information Security and Cryptology 23 (23): 445-457, 2013

11 오양균, "Fault-Tolerant Design for Advanced Diverse Protection System" 한국원자력학회 45 (45): 795-802, 2013

12 Seungmin Kim, "Cyber attack taxonomy for digital environment in nuclear power plants" Elsevier BV 52 (52): 995-1001, 2020

13 Jungwoon Lee, "Cyber Security Considerations in the Development of I&C Systems for Nuclear Power Plants" 2011

14 DHS, "Common Cybersecurity Vulnerabilities in Industrial Control Systems"

15 KHNP, "APR1400 Design Control Document"