지원사업
학술연구/단체지원/교육 등 연구자 활동을 지속하도록 DBpia가 지원하고 있어요.
커뮤니티
연구자들이 자신의 연구와 전문성을 널리 알리고, 새로운 협력의 기회를 만들 수 있는 네트워킹 공간이에요.
논문 기본 정보
- 자료유형
- 학술저널
- 저자정보
- 발행연도
- 2012.1
- 수록면
- 919 - 928 (10page)
이용수
초록· 키워드
오류제보하기
The applications of computers and communication system and network technologies in nuclear power plants have expanded recently. This application of digital technologies to the instrumentation and control systems of nuclear power plants brings with it the cyber security concerns similar to other critical infrastructures. Cyber security risk assessments for digital instrumentation and control systems have become more crucial in the development of new systems and in the operation of existing systems. Although the instrumentation and control systems of nuclear power plants are similar to industrial control systems, the former have specifications that differ from the latter in terms of architecture and function, in order to satisfy nuclear safety requirements, which need different methods for the application of cyber security risk assessment. In this paper,the characteristics of nuclear power plant instrumentation and control systems are described, and the considerations needed when conducting cyber security risk assessments in accordance with the lifecycle process of instrumentation and control systems are discussed. For cyber security risk assessments of instrumentation and control systems, the activities and considerations necessary for assessments during the system design phase or component design and equipment supply phase are presented in the following 6 steps: 1) System Identification and Cyber Security Modeling, 2) Asset and Impact Analysis, 3)Threat Analysis, 4) Vulnerability Analysis, 5) Security Control Design, and 6) Penetration test. The results from an application of the method to a digital reactor protection system are described.
목차
등록된 정보가 없습니다.
참고문헌 (25)
참고문헌 신청
/ / 10 CFR Part 73.54, Protection of Digital Computer and Communication Systems and Networks / U.S. Nuclear Regulatory Commission
/ / Common Vulnerability and Exposures (CVE)
/ / NIST National Vulnerability Database version 2.2
/ 2002 / Risk Management Guide for Information Technology Systems / NIST Special Publication 800-30
/ 2005 / ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements
/ / Common Vulnerability and Exposures (CVE)
/ / NIST National Vulnerability Database version 2.2
/ 2002 / Risk Management Guide for Information Technology Systems / NIST Special Publication 800-30
/ 2005 / ISO/IEC 27001:2005, Information technology - Security techniques - Information security management systems - Requirements
이 논문의 저자 정보
최근 본 자료
댓글(0)
0