Considerations for Nuclear Power Plant Cyber Security Contingency Plan

Seungmin Kim 한국방사성폐기물학회 2022 한국방사성폐기물학회 학술논문요약집 Vol.20 No.2

Nuclear power plants (NPPs) are designed in consideration of redundancy, diversity, and independence to prevent leakage of radioactive materials from safety of view, and a contingency plan is established in case of DBA (Design Basis Accident) occurrence. In addition, NPPs have established contingency plans for physical attacks, including terrorist intrusions and bomb attacks. However, the level of contingency plan caused by cyberattacks is quite insufficient compared to the contingency plan in terms of safety and physical protection. The purpose of this paper is to present the problems of cyberattack contingency plan and methods to supplement it. The first problem with cyberattack contingency plan is that the initiating event for implementing the contingency plan is undecided. In terms of safety, the DBA is identified as an initial event, and each contingency plan is based on the initial events specified in the DBA such as Loss of Coolant Accident and Loss of Offsite Power. In terms of physical protection, each has a contingency plan by identifying bomb attacks and terrorist intrusions in Protected Area and Vital Area as initial events. On the other hand, in the contingency plan related to a cyberattack, an initial event caused by a cyberattack is not identified. For this, it is necessary to classify the attack results that may occur when the CDA is compromised based on the attack technique described in Design Basis Threat. Based on this, an initiating event should be selected and a contingency plan according to each initiating event should be established. The second problem is that there is no responsibility matrix according to the occurrence of the initiating event. From a safety point of view, when a DBA occurs, the organization’s mission according to each initial event is described in the contingency plan, and related countermeasures are defined in case of an accident through Emergency Operation Procedure. In the case of physical protection, referring to IAEA’s Regulatory Guide 5.54, the organization’s responsibility is defined in matrix form when an initial event such as a bomb attack occurs. In this way, the responsibility matrix to be carried out in case of initiating events based on the defined initial event should be described in the contingency plan. In this paper, the problems of the cyberattack contingency plan are presented, and for this purpose, the definition of the initial event and the need for a responsibility matrix when the initial event occurs are presented.

Improvement of Cyber Security Contingency Plan by Classifying CDA Types

Seungmin Kim,Dongseok Lee 한국방사성폐기물학회 2023 한국방사성폐기물학회 학술논문요약집 Vol.21 No.1

The licensee of nuclear facilities in the Republic of Korea should ensure the functionality of Critical Digital Assets (CDAs) is maintained and minimize the negative impact of cyber-attacks by establishing a cyber security contingency plan. The contingency plan should include detailed response guidelines for each stage of detection, analysis, isolation, eradication, and recovery and comply with the requirements specified in KINAC’s “Regulatory Standard 015 - Security for Computer and Information System of Nuclear Facilities”. However, since the cyber security contingency plan describes the overall response guidelines for CDA, it may be difficult to respond practically to cyberattacks. This paper suggests a method to address this issue by performing exercises based on the classification of CDA types. CDAs in nuclear facilities can be classified according to their characteristics. The criteria for classifying CDA types include whether the asset is a PC, whether communication ports (RS-232, 422, 485) exist, whether storage devices can be connected through USB/memory card ports and whether internal settings can be changed through HMI devices such as built-in buttons. By classifying CDA types based on the proposed criteria, the attack vectors of CDAs can be defined. By defining the attack vectors, a list of cyber-attacks that CDAs may face can be created, and abnormal symptoms of CDAs resulting from the listed cyber-attacks can be defined. By using the defined abnormal symptoms of CDAs, the response measures of detection, analysis, isolation, eradication, and recovery can be concretized and reflected in the contingency plan. This may enable a more practical emergency response. This paper presents an improvement to the cyber security emergency response plan through the definition of cyber-attacks based on the classification of CDA types. By improving the contingency plan for CDAs as a whole using the proposed method, it is expected that more effective response measures can be taken in the event of a cyber-attack.

OIL SPILL AND REGIONAL CO-OPERATION ON MARINE POLLUTION PREPAREDNESS AND RESPONSE IN THE NORTHWEST PACIFIC

Chang-Gu Kang(강창구),Seong-Gil Kang(강성길),Jeong-Hwan Oh(오정환) 한국해양환경·에너지학회 2005 한국해양환경공학회 학술대회논문집 Vol.2005 No.11

The sea area of the far-eastern Asian countries - that is, Northwest Pacific region, was regarded as the area facing the highest risk of oil spill in the world. In fact, 19 major oil spills (greater than 1,000 tons), 124 intermediate spills (50 ~ 1,000 tons), and innumerable small spills (less than 50 tons) have been occurred in the area from 1990-2004. Based upon the perception of high risk of oil spill, the four countries bordering the Northwest Pacific (China, Japan, R. Korea and Russia) have developed effective measures for regional cooperation in marine pollution preparedness and response within the framework of the Northwest Pacific Action Plan (NOWPAP), which was established in 1994 as a Regional Seas Programme of the United Nations Environment Programme (UNEP). MERRAC, as one of four Regional Activity Centers of NOWPAP, has been responsible for regional co-operation on marine pollution preparedness and response in the region. For the purpose of providing an operational mechanism for mutual assistance during major oil pollution incidents in the region, MERRAC has especially developed the NOWPAP Regional Oil Spill Contingency Plan (Plan) and its Memorandum of Understanding (MoU), which was officially come into effect on being signed by all NOWPAP Members. Now, the four countries of the NOWPAP region are in a better state of preparedness to respond to oil spills, as each of them may request assistance from the other three NOWPAP members in cases of large oil spill emergencies. The present paper introduces current activities of MERRAC as a new regional initiative on marine pollution preparedness and response in the NOWPAP region, together with analysis of oil spill risk in the region and regional preparedness and response system to oil spill, with a special reference to NOWPAP Regional Oil Spill Contingency Plan.

Group Decision Support in Developing Business Process Reengineering Vision and Implementation Plan

Kim, Jae Kyeong,Ahn, Byeong Seok 경희대학교 경영연구소 2001 경영연구 Vol.- No.7

BPR aims at a radical redesign of our business processes in order to achieve dramatic improvements in their performance. However, the fact that many BPR projects have failed makes the companies hesitate to start to use BPR methodology or to plan to do so. Implementing a radical plan from a cross-functional perspective needs a more careful consideration of process vision, preventive measures and contingency plan. Our research suggests to use VDMP in the development of a process vision and implementation plan, which enhances decision quality through interactive conflicts resolution among participants and hence we can expect improved users' involvement when the BPR project is in act. A BPR project of Carlson School of Management (CSOM) at the University of Minnesota is illustrated to show our suggested methodology.

Regional Co-Operation on Marine Pollution Preparedness and Response in the Northwest Pacific-with a Special Reference to NOWPAP Regional Oil Spill Contingency Plan

Kang, Seong-Gil,Oh, Jeong-Hwan,Kang, Chang-Gu The Korean Association of Ocean Science and Techno 2006 Journal of Ocean Science and Technology Vol.3 No.1

In today's world, oil spills are a major environmental problem. In total, millions of tones of oil have been spilled into the world's ocean, resulting in enormous impacts on fisheries, wildlife and their habitats, coastal industries and tourism, and even on political and social aspects, etc. The sea area of the far-eastern Asian countries-that is, Northwest Pacific region, was regarded as the area facing the highest risk of oil spill in the world. In fact, 19 major oil spills (greater than 1,000 tons), 124 intermediate spills ($50{\sim}1,000$ tons), and innumerable small spills (less than 50 tons) have been occurred in the area from 1990-2004. Based upon the perception of high risk of oil spill, the four countries bordering the Northwest Pacific (China, Japan, R. Korea and Russia) have developed effective measures for regional cooperation in marine pollution preparedness and response within the framework of the Northwest Pacific Action Plan (NOWPAP), agreed in 1994 by the governments. They have especially developed the NOWPAP Regional Oil Spill Contingency Plan and its Memorandum of Understanding, which will be a firm foundation in our strong partnership among NOWPAP Members in the relevant field. The present paper introduces current activities of MERRAC as a new regional initiative on marine pollution preparedness and response in the NOWPAP region, together with analysis of oil spill risk in the region and regional preparedness and response system to oil spill, with a special reference to NOWPAP Regional Oil Spill Contingency Plan.

A Novel Dynamic Index of Voltage Instability Expectation with Power System Contingency

Duy-Phuong N. Do,오웅진,이연찬,최재석,이병준 대한전기학회 2019 Journal of Electrical Engineering & Technology Vol.14 No.4

This paper proposes a novel dynamic voltage instability expectation index which takes into account dynamic voltage stability characteristics, the long-term phenomena and probability state of power system contingency. This index is a meter to measure the general robust power system under critical cases which are identifi ed by contingency analysis. The critical contingencies are precisely analyzed by steady-state power load fl ow in perturbations to fi gure out violation cases, the weakness of the power system. The probability states of each of violation cases are calculated through availability and unavailability values of devices. The degree of voltage instability is estimated newly by the smallest determinant of dynamic load fl ow Jacobian matrix in evolution time of power system simulation. The variables of dynamic devices such as under load tap changer of the transformer, excitation limiters of generator unit, aff ected on a long-term characteristic of the power system, are considered in dynamic load fl ow Jacobian matrix. Combining the voltage instability rate and the probability state, a novel index, namely voltage instability expectation in dynamic index, is proposed. This index refl ects the mutual correlation between the voltage instability rate and probable contingency cases which result in either voltage violation, overload fl ow, or voltage instability. The new index is demonstrated in IEE 9-bus test system and actual Vietnam power system. It should be a new measure to make a decision of transmission system expansion planning.

Saving National Heritage : Cost-Benefit Analysis for Policy Alternatives of Protecting Cape Hatteras Lighthouse in North Carolina

Dohyeong Kim 위기관리 이론과 실천 2011 Journal of Safety and Crisis Management Vol.1 No.1

Due to the natural process of beach erosion in the Cape Hatteras National Seashore in North Carolina, the Cape Hatteras lighthouse, a National Historic Monument, was moved inland in 1999 in order to be protected from being damaged or destroyed with persistent beach erosion. Beach renourishment was among the project alternatives considered to protect the lighthouse. However, neither the decision to move nor the possibility of using beach renourishment was considered as part of an economic evaluation of the National Park Service's decision to protect the lighthouse. This paper develops an ex post analysis of the benefits of protecting the lighthouse. The analysis takes advantage of a unique data set collected in 1993, prior to the decision to move the lighthouse. This survey assembles a panel with two surveys of the same respondents. The first is a baseline telephone survey to a random sample of 1000 NC households.It was intended to recruit respondents and collect information about their socioeconomic characteristics. The second interview contacted the same person, each individual agreeing to participate who had received a booklet describing the proposed beach renourishment plan. Benefit estimates are developed using a discrete choice contingent valuation framework. The panel structure allows the analysis to take account of a variety of selection effects that arise due to the structure of the two surveys and the specific valuation questions. An important aspect of the model derives the economic restrictions that would give rise to the selection effect associated with respondents' choices among beach protection plans offered as part of the survey. As a result, this analysis can develop benefit estimates that adjust for both the effects of interest in the topic on the response rate to a telephone based contingent valuation survey and the selection effect arising from different beach policy choices. Improved coastal planning requires better information about the costs of policy alternatives and the preferences of citizens affected by those policies. A non-market benefit analysis puts these preferences in monetary terms, comparable to the costs. This research has a unique opportunity to evaluate whether the consideration of policy alternatives for a decision that has been already made would have recommended a change in the outcome. Moreover, the analysis demonstrates how economic analysis and statistical modeling of selection effects can be integrated in the evaluation of discrete response contingent valuation data.

북한의 급변사태와 군사대비

한관수(Han Kwan-Soo) 한국전략문제연구소 2009 전략연구 Vol.- No.47

최근 김정일의 건강이상과 제2차 핵 실험과 관련하여 북한체제 변화에 관심이 집중 되고 있다. 김정일의 선군정치는 어느 정도 체제의 안정을 이룩하였다고 볼 수 있으나, 정치, 경제, 사회, 외교적 측면에서 어떤 임계점에 도달 한다면 급변사태 발생가능성은 높다고 볼 수 있다. 북한의 급변사태 유형은 김정일의 유고시 후계구도를 둘러싼 권력투쟁, 군부의 쿠테타, 심각한 식량난으로 인한 대량난민 발생과 민중봉기, 핵문제 해결과 관련된 미국의 선제공격 등으로 예상할 수 있다. 북한 내부에 급변사태가 발생한다면 한국의 안보에 중대한 위협이 될 것이므로 종합적인 군사대비가 요구되고 있다. 자위적 군사대비로써 북한의 전쟁도발 억제, 대량난민 통제 그리고 적극적 군사개입의 준비로써 대량살상무기 통제가 군사대비의 핵심 내용이라고 볼 수 있다. 북한 급변사태에 대응하기 위한 효율적인 위기관리, 한미군사동맹의 강화, 북한에 대한 심층적인 연구 등이 요구되고 있다. 북한의 급변사태는 위기이면서 남북통일의 기회로 작용할 것이다. Although Kim Jong Il's "Military First" regime is stable, the possibility of political, economic, social and diplomatical crises remains strong. However, once we reach a tipping point, specific scenarios include a power struggle after Kim Jong Il's departure and a military coup by those who do not agree with the government's nuclear policy. Furthermore, a comprehensive contingency plan should consider impoverished mass refugees, citizen uprisings, bloodshed, and the misusage or transferring of weapons of mass destruction (WMD) in an anarchical situation. An impending crisis in North Korea threatens the security of South Korea, therefore, I propose a double-edged military contingency plan: self-defensive and proactive. First, the ROK must aim to prevent war and prepare for the eventuality of controlling mass refugees' coming through the DMZ. Simultaneously, the ROK must control WMD. We need to develop an effective crisis management system, to strengthen the ROK-US military alliance, and to gather more in-depth intelligence. A North Korea crisis can be both a chance for reunification or an endangerment to peace on the Korean peninsula.

해양환경관리법 제정에 따른 정책변화

유영(You Young),김형규(Kim Hyung-Gu),박세진(Park Se-Jin) 한국해양환경·에너지학회 2007 한국해양환경·에너지학회 학술대회논문집 Vol.2007 No.-

1977년 12월 31일 제정된 해양오염방지법은 2007년 1월 19일 해양환경관리법 공포와 함께 폐지되었다. 본 논문은 해양환경관리법상에서의 주요 신설 및 보완된 내용들과 기존 해양오염방지법과의 차이점을 현장집행업무 중심으로 비교ㆍ검토하였다. 신법에서는 해양환경의 종합관리를 위한 ‘국가의 기본원칙’과 환경정책을 종합적ㆍ체계적으로 추진할 수 있는 법적근거를 마련하였으며, 오염방제를 효과적으로 추진할 수 있도록 해양경찰청장으로 하여금 국가긴급방제계획을 수립ㆍ시행토록 명문화하였다. 해양환경보호를 위한 해역 이용협의의 의무화와 해양환경관리공단 신설 등 깨끗하고 안전한 해양환경 조성을 위한 해양환경관리체계 개편을 주요 골자로 하고 있다. Marine Pollution Prevention Law, legislated in Dec. 1977, was abrogated when Marine Environmental Management Law was enacted and promulgated at 19 Jan. 2007. This present study is aimed to review the new complementary provisions of Marine Environmental Management Law that are different from Marine Pollution Prevention Law, especially focus on execution procedures of law in field. The New Law contains ’the principal of National policy’ for the Comprehensive Marine Environmental Management. It is a legal basis on promoting systematically the Integrated National Marine Environmental Management Plan. In behalf of effective responding to marine pollution, this law delegates the commissioner general of Korea Coast Guard to establish and enforce the National Contingency Plan. It also compel to take counsel with government before utilization of sea area and found the Marine Environmental Management Corporation for the clean and safe marine environment.

EC-121기 사건과 미국의 한반도 위기에 대한 대응

김차준 통일연구원 2022 統一 政策 硏究 Vol.31 No.1

The EC-121 shooting down is an important example of military confrontations between North Korea and the US during the Cold War. This incident can be defined as North Korea’s prepared military response to the US offensive military activities rather than as a unilateral military provocation by North Korea. However, the shooting down incident began to fade less than a month later. The Nixon administration, which had been defensive in resolving the incident, was concerned that it would be seen as a major weak point in the US security policies for other important parts of the world. They made a contingency plan emphasized strong, detailed and active actions of the US. Defeating North Korea’s willingness to make further provocations through a strong ‘one shot’ was the key to the Nixon administration’s military contingency plan. The US plan for the crisis on the Korean Peninsula has become more belligerent after the EC-121 Shooting Down incident. EC-121기 사건(1969.4.15.)은 냉전기북‧미 군사대결의 중요한 사례이다. 이 사건은 미국에 대한 북한의 일방적인 군사도발이라기보다는 미국의 공세적 군사활동에 대한 북한의 준비된 군사대응으로 규정할 수 있다. 격추사건으로 고조된 북‧미 대립의 열기는 한 달이 채 가시기 전에 사그라들기 시작했다. 사건 해결에 있어 수세적인 태도를 보였던 닉슨 정부는 미국의 안보정책이 큰 허점으로 비치는 것을 우려했다. 그들은 강력하고, 세밀하고, 적극적인 미국의 행동을 강조하는 한국 비상계획안을 마련하였다. 강력한 ‘한방’을 통해 북한의 추가 도발의지를 꺾는다는 것이 닉슨 정부의 군사적 비상계획의 핵심이었다. EC-121기 격추사건이 잠잠해진 이후 한반도 위기에 대한 미국의 대응 구상은 오히려 호전적인 측면이 두드러지고 있었다.