이종(異種) 오류원 기반의 현실적인 다중 오류 주입 시스템

이종혁(JongHyeok Lee),한동국(Dong-Guk Han) 한국정보보호학회 2020 정보보호학회논문지 Vol.30 No.6

스마트홈 시대가 도래하면서 실생활의 다양한 곳에 기밀성을 제공하거나 인증을 수행하는 장비들이 존재하게 되었다. 이에 따라 암호화 장비 및 인증 장비에 물리적인 공격으로부터의 안전성이 요구되고 있다. 특히 외부에서 인위적으로 오류를 주입하여 비밀 키를 복구하거나 인증 과정을 우회하는 오류 주입 공격은 매우 위협적인 공격 방법의 하나다. 오류 주입 공격에 사용되는 오류원은 레이저, 전자파, 전압 글리치, 클락 글리치 등이 있다. 오류 주입공격은 오류가 주입되는 횟수에 따라 단일 오류 주입 공격과 다중 오류 주입 공격으로 분류된다. 기존의 다중 오류주입 시스템은 일반적으로 단일 오류원을 사용하였다. 단일 오류원을 여러 차례 주입하도록 구성된 시스템은 물리적인 지연 시간이 존재한다는 점과 추가적인 장비가 필요하다는 단점이 존재한다. 본 논문에서는 이종(異種) 오류원을 사용하는 다중 오류 주입 시스템을 제안한다. 그리고 제안하는 시스템의 효용성을 보이기 위해 Riscure사의 Piñata 보드를 대상으로 다중 오류 주입 공격을 수행한 결과를 보인다. With the advent of the smart home era, equipment that provides confidentiality or performs authentication exists in various places in real life. Accordingly security against physical attacks is required for encryption equipment and authentication equipment. In particular, fault injection attack that artificially inject a fault from the outside to recover a secret key or bypass an authentication process is one of the very threatening attack methods. Fault sources used in fault injection attacks include lasers, electromagnetic, voltage glitches, and clock glitches. Fault injection attacks are classified into single fault injection attacks and multiple fault injection attacks according to the number of faults injected. Existing multiple fault injection systems generally use a single fault source. The system configured to inject a single source of fault multiple times has disadvantages that there is a physical delay time and additional equipment is required. In this paper, we propose a multiple fault injection system using heterogeneous fault sources. In addition, to show the effectiveness of the proposed system, the results of a multiple fault injection attack against Riscure"s Piñata board are shown.

Fault-weighted quantification method of fault detection coverage through fault mode and effect analysis in digital I&C systems

Cho, J.,Lee, S.J.,Jung, W. North-Holland Pub. Co 2017 Nuclear engineering and design Vol.316 No.-

<P>The one of the most outstanding features of a digital I&C system is the use of a fault-tolerant technique. With an awareness regarding the importance of thequantification of fault detection coverage of fault-tolerant techniques, several researches related to the fault injection method were developed and employed to quantify a fault detection coverage. In the fault injection method, each injected fault has a different importance because the frequency of realization of every injected fault is different. However, there have been no previous studies addressing the importance and weighting factor of each injected fault. In this work, a new method for allocating the weighting to each injected fault using the failure mode and effect analysis data was proposed. For application, the fault-weighted quantification method has also been applied to specific digital reactor protection system to quantify the fault detection coverage. One of the major findings in an application was that we may estimate the unavailability of the specific module in digital I&C systems about 20-times smaller than real value when we use a traditional method. The other finding was that we can also classify the importance of the experimental case. Therefore, this method is expected to not only suggest an accurate quantification procedure of fault-detection coverage by weighting the injected faults, but to also contribute to an effective fault injection experiment by sorting the importance of the failure categories. (C) 2017 Elsevier B.V. All rights reserved.</P>

Modelling of Fault Deformation Induced by Fluid Injection using Hydro-Mechanical Coupled 3D Particle Flow Code: DECOVALEX-2019 Task B

Jeoung Seok Yoon(윤정석),Jian Zhou 한국암반공학회 2020 터널과지하공간 Vol.30 No.4

본 수치해석연구에서는 국제공동연구프로젝트 DECOVALEX2019의 Task B의 일환으로 PFC3D를 기반으로한 수리역학연계모델을 개발하여 스위스 Mont Terri 지하연구시설에서 수행된 단층의 유체주입으로 인한 슬립시험을 모사하였다. 이를통해, 개발한 PFC3D 수리역학연계모델이 가진 한계점과 향후 보완할 점을 검토하고자 하였다. PFC3D를 기반으로한 3차원 입자결합모델 내 공극-유동통로모델을 생성하였으며 이를 사용하여 Mont Terri Step 2 단층내 유체주입실험을 모사하였다. 모델링결과 단층대를 따라 주입유체의 유동에 의한 단층대의 변형을 확인하였지만, 관측정에서의 시간에 따른 수압변화는 현장측정치와 부분적으로 일치하는 경향을 확인하였다. 현장측정 관측수압은 초기 유체주입 압력증가에 거의 변화를 보이지 않고 주입수압이 최대치에 도달할때쯤 급격한 증가를 보이는반면, 모델링에서는 주입압력이 증가함에 따라 관측수압도 부드럽게 증가하는 경향을 보였다. 이러한 부분적으로 일치하는 결과의 원인으로는 Mont Terri 현장의 단층을 모사하는 방법에 기인하는 것으로 판단하다. PFC3D에서는 단층을 손상대와 코어균열의 조합으로 모사하였고 단층대의 두께가 약 2 m로 주입유체가 단층대를 통해 유동하도록 모사하였기에 현장에서의 주입유체의 단층내 유동보다 그 유동범위가 크게 모사되었다고 판단한다. 또한, 현장단층에서와 같이 단층내부에 존재하는 충진물질로 인해 단층내 수리유동이 제한되어 국부적으로 과잉공급수압이 형성될 수 있는 기재를 모사하지 못한 점 또한 모델링 결과와 현장측정결과가 부분적으로 일치하는 원인일 수 있다. 단층변형의 경우는 모델링결과와 현장측정결과 유사한 수준으로 일치하는 결과를 확인하였다. 수치모델을 변형하여 단층대의 두께를 감소시키고 단층내 충진 물질의 비균질적인분포를 모사할 수 있는 방법론에 대한 후속 연구를 통해 PFC3D 수리역학연계모델의 유체주입으로 인한 단층활성화 연구로의 적용성을 향상시키는 것을 제안하고 한다. This study presents an application of hydro-mechanical coupled Particle Flow Code 3D (PFC3D) to simulation of fluid injection induced fault slip experiment conducted in Mont Terri Switzerland as a part of a task in an international research project DECOVALEX-2019. We also aimed as identifying the current limitations of the modelling method and issues for further development. A fluid flow algorithm was developed and implemented in a 3D pore-pipe network model in a 3D bonded particle assembly using PFC3D v5, and was applied to Mont Terri Step 2 minor fault activation experiment. The simulated results showed that the injected fluid migrates through the permeable fault zone and induces fault deformation, demonstrating a full hydro-mechanical coupled behavior. The simulated results were, however, partially matching with the field measurement. The simulated pressure build-up at the monitoring location showed linear and progressive increase, whereas the field measurement showed an abrupt increase associated with the fault slip We conclude that such difference between the modelling and the field test is due to the structure of the fault in the model which was represented as a combination of damage zone and core fractures. The modelled fault is likely larger in size than the real fault in Mont Terri site. Therefore, the modelled fault allows several path ways of fluid flow from the injection location to the pressure monitoring location, leading to smooth pressure build-up at the monitoring location while the injection pressure increases, and an early start of pressure decay even before the injection pressure reaches the maximum. We also conclude that the clay filling in the real fault could have acted as a fluid barrier which may have resulted in formation of fluid over-pressurization locally in the fault. Unlike the pressure result, the simulated fault deformations were matching with the field measurements. A better way of modelling a heterogeneous clay-filled fault structure with a narrow zone should be studied further to improve the applicability of the modelling method to fluid injection induced fault activation.

FAULT DETECTION COVERAGE QUANTIFICATION OF AUTOMATIC TEST FUNCTIONS OF DIGITAL I&C SYSTEM IN NPPS

최종균,SEUNG JUN LEE,강현국,허섭,YOUNG JUN LEE,장승철 한국원자력학회 2012 Nuclear Engineering and Technology Vol.44 No.4

Analog instrument and control systems in nuclear power plants have recently been replaced with digital systems for safer and more efficient operation. Digital instrument and control systems have adopted various fault-tolerant techniques that help the system correctly and safely perform the specific required functions regardless of the presence of faults. Each fault-tolerant technique has a different inspection period, from real-time monitoring to monthly testing. The range covered by each faulttolerant technique is also different. The digital instrument and control system, therefore, adopts multiple barriers consisting of various fault-tolerant techniques to increase the total fault detection coverage. Even though these fault-tolerant techniques are adopted to ensure and improve the safety of a system, their effects on the system safety have not yet been properly considered in most probabilistic safety analysis models. Therefore, it is necessary to develop an evaluation method that can describe these features of digital instrument and control systems. Several issues must be considered in the fault coverage estimation of a digital instrument and control system, and two of these are addressed in this work. The first is to quantify the fault coverage of each fault-tolerant technique implemented in the system, and the second is to exclude the duplicated effect of fault-tolerant techniques implemented simultaneously at each level of the system’s hierarchy, as a fault occurring in a system might be detected by one or more fault-tolerant techniques. For this work, a fault injection experiment was used to obtain the exact relations between faults and multiple barriers of faulttolerant techniques. This experiment was applied to a bistable processor of a reactor protection system.

An Improved Dual-mode Laser Probing System for Fault Injecton Attack

Young Sil Lee(이영실),Thiranant Non,HoonJae Lee(이훈재) 한국정보보호학회 2014 정보보호학회논문지 Vol.24 No.3

오류주입공격(Fault Injection Attack)은 하드웨어적 또는 소프트웨어적으로 구현된 암호칩에 인위적으로 오류를 주입 또는 발생시켜 암호 알고리즘 동작/수행을 방해함으로써 칩에 내장된 정보를 찾아내는 공격으로, 이 중 레이저를 이용한 오류주입공격은 특히 성공적인 것으로 입증된 바 있다. 본 논문에서는 기존의 플래쉬 펌프 방식의 레이저와 광섬유 레이저 모델을 병렬 결합한 이중모드 레이저 방식으로 개선된 레이저 프루빙 시스템을 제안하였다. 제안된 방법은 에너지 출력은 높으나 주파수 반복률이 낮아 오류주입공격 실험에 적합하지 않은 기존의 플래쉬 펌프 방식 레이저를 레이저 절단용으로 활용하고, 추가로 별도의 오류주입을 위한 고주파 반복률을 갖는 레이저를 단순 병렬 결합시키는 방법이다. 오류주입을 위해 결합된 제 2의 신규 레이저는 반도체 레이저와 광섬유 레이저를 선택하여 두 가지 시스템을 설계하였으며, 이에 따른 장·단점을 비교분석하였다. Fault injection attack is the process of attempting to acquire the information on-chip through inject artificially generated error code into the cryptographic algorithms operation (or perform) which is implemented in hardware or software. From the details above, the laser-assisted failure injection attacks have been proven particularly successful. In this paper, we propose an improved laser probing system for fault injection attack which is called the Dual-Laser FA tool set, a hybrid approach of the Flash-pumping laser and fiber laser. The main concept of the idea is to improve the laser probe through utilizing existing equipment. The proposed laser probe can be divided into two parts, which are Laser-I for laser cutting, and Laser-II for fault injection. We study the advantages of existing equipment, and consider the significant parameters such as energy, repetition rate, wavelength, etc. In this approach, it solves the high energy problem caused by flash-pumping laser in higher repetition frequency from the fiber laser.

유체 주입에 의한 단층의 수리역학적 거동 해석

박정욱(Jung-Wook Park),박의섭(Eui-Seob Park),김태현(Taehyun Kim),이창수(Changsoo Lee),이재원(Jaewon Lee) 한국암반공학회 2018 터널과지하공간 Vol.28 No.5

본 논문에서는 국제공동연구인 DECOVALEX-2019 프로젝트 Task B의 연구결과와 현황을 소개하였다. Task B의 주제는 ‘Fault slip modelling’으로 유체의 주입으로 인해 발생하는 단층의 재활성(미끄러짐, 전단파괴)과 수리역학적 거동을 예측할 수 있는 해석기법을 개발하는 데에 그 목적이 있다. 1단계 연구는 참가팀들이 연구주제에 대해 숙지하고, 벤치마크 모델을 대상으로 단층의 투수특성과 역학적 거동의 상호작용을 모사할 수 있는 해석코드를 개발할 수 있도록 하는 준비 단계의 연구이다. 본 연구에서는 TOUGH-FLAC 연동해석 기법을 사용하여 물 주입으로 인한 단층의 수리역학적 연계거동을 모사하였다. TOUGH2 해석에서는 단층을 Darcy의 법칙과 삼승법칙을 따르는 연속체 요소로 모델링하였으며, FLAC3D 해석에서는 미끄러짐과 개폐가 허용되는 불연속 인터페이스 요소를 통해 모사하였다. 두 가지 수리간극모델에 대하여 수리역학적 커플링 관계식을 수치화하였으며, 연속체 요소(수리모델)와 인터페이스 요소(역학모델)의 거동을 연계할 수 있는 해석기법을 제시하였다. 또한, 단층의 역학적 변형(간극의 변화)으로 인한 수리물성 변화와 기하학적 변화(해석 메쉬의 변형)를 수리해석에 반영할 수 있는 해석기법을 개발하였다. 다양한 압력의 물을 단계적으로 주입하고 이로 인해 유도되는 단층의 탄성거동 및 전단파괴(미끄러짐)에 대해 살펴보았으며, 수리간극의 변화 양상과 원인, 압력 분포와 주입율의 관계 등을 면밀히 검토하였다. 해석 결과, 본 연구에서 개발한 해석기법이 물 주입으로 인한 단층의 미끄러짐 거동을 합리적인 수준에서 재현할 수 있는 것으로 판단할 수 있었다. 본 연구의 해석모델은 Task B에 참여하는 국외 연구팀들과의 의견 교류와 워크숍을 통해 지속적으로 개선하는 한편, 향후 연구의 현장시험에 적용하여 타당성을 검증할 예정이다. This study presents the research results and current status of the DECOVALEX-2019 project Task B. Task B named ‘Fault slip modelling’ is aiming at developing a numerical method to simulate the coupled hydro-mechanical behavior of fault, including slip or reactivation, induced by water injection. The first research step of Task B is a benchmark simulation which is designed for the modelling teams to familiarize themselves with the problem and to set up their own codes to reproduce the hydro-mechanical coupling between the fault hydraulic transmissivity and the mechanically-induced displacement. We reproduced the coupled hydro-mechanical process of fault slip using TOUGH-FLAC simulator. The fluid flow along a fault was modelled with solid elements and governed by Darcy`s law with the cubic law in TOUGH2, whereas the mechanical behavior of a single fault was represented by creating interface elements between two separating rock blocks in FLAC3D. A methodology to formulate the hydro-mechanical coupling relations of two different hydraulic aperture models and link the solid element of TOUGH2 and the interface element of FLAC3D was suggested. In addition, we developed a coupling module to update the changes in geometric features (mesh) and hydrological properties of fault caused by water injection at every calculation step for TOUGH-FLAC simulator. Then, the transient responses of the fault, including elastic deformation, reactivation, progressive evolutions of pathway, pressure distribution and water injection rate, to stepwise pressurization were examined during the simulations. The results of the simulations suggest that the developed model can provide a reasonable prediction of the hydro-mechanical behavior related to fault reactivation. The numerical model will be enhanced by continuing collaboration and interaction with other research teams of DECOLVAEX-2019 Task B and validated using the field data from fault activation experiments in a further study.

FAULT DETECTION COVERAGE QUANTIFICATION OF AUTOMATIC TEST FUNCTIONS OF DIGITAL I&C SYSTEM IN NPPS

Choi, Jong-Gyun,Lee, Seung-Jun,Kang, Hyun-Gook,Hur, Seop,Lee, Young-Jun,Jang, Seung-Cheol Korean Nuclear Society 2012 Nuclear Engineering and Technology Vol.44 No.4

Analog instrument and control systems in nuclear power plants have recently been replaced with digital systems for safer and more efficient operation. Digital instrument and control systems have adopted various fault-tolerant techniques that help the system correctly and safely perform the specific required functions regardless of the presence of faults. Each fault-tolerant technique has a different inspection period, from real-time monitoring to monthly testing. The range covered by each faulttolerant technique is also different. The digital instrument and control system, therefore, adopts multiple barriers consisting of various fault-tolerant techniques to increase the total fault detection coverage. Even though these fault-tolerant techniques are adopted to ensure and improve the safety of a system, their effects on the system safety have not yet been properly considered in most probabilistic safety analysis models. Therefore, it is necessary to develop an evaluation method that can describe these features of digital instrument and control systems. Several issues must be considered in the fault coverage estimation of a digital instrument and control system, and two of these are addressed in this work. The first is to quantify the fault coverage of each fault-tolerant technique implemented in the system, and the second is to exclude the duplicated effect of fault-tolerant techniques implemented simultaneously at each level of the system's hierarchy, as a fault occurring in a system might be detected by one or more fault-tolerant techniques. For this work, a fault injection experiment was used to obtain the exact relations between faults and multiple barriers of faulttolerant techniques. This experiment was applied to a bistable processor of a reactor protection system.

A study of CO₂ storage integrity with rate allocation in multi-layered aquifer

Joohyung Kim,송영수,신영재,권이균,정우동,성원모 한국지질과학협의회 2019 Geosciences Journal Vol.23 No.5

Most deep saline aquifers consist of multiple layers, and CO2 is generally injected through the injection well in a commingled form with one tubing string. Layer thicknesses and physical properties such as permeability and porosity vary from layer to layer because of differences in lithology and mineral compositions. When a heterogeneity such as a fault exists, if CO2 is rapidly introduced first into a certain layer, this CO2 reaches fault faster than other layers. Therefore, it is necessary to consider the characteristics of each layer in multi-layered aquifer, particularly in commingled well. In this study, rate allocation by layer was calculated in the multilayered Pohang Basin aquifer, Korea, and whether CO2 reaches the fault and the pore pressure at the fault exceeds the fault reactivation pressure were investigated to evaluate the stability of the aquifer. In addition, the maximum CO2 storage capacity of the aquifer was estimated and we observed changes in trapping mechanisms over a 1,000-year period after the cessation of injection. The results of the analysis indicate that when up to 50 ktonnes of CO2 was injected into the Pohang Basin multi-layered aquifer over a two-year period, the rate allocations of the upper and lower layers were 70% and 30%, respectively. CO2 did not reach to the closest EF1 fault, and the pore pressure at this fault did not exceed the fault reopening pressure. The maximum possible storage capacity was conservatively calculated under the conditions of fault reactivation pressure (11.7 MPa) and maximum compressor capacity (14 MPa), indicating that a total of 160 ktonnes can be stably injected over six years without reaching the fault. In order to evaluate the stability of the aquifer, the changes in trapping mechanisms over a 1,000-year period were observed. According to the results, structural trapping decreased drastically, from 64.7% to 4.5%, over 1000 years. Meanwhile, solubility and residual trapping increased significantly, from 35.3% to 95.5%. Therefore, the data analyzed to date indicate that the project injecting CO2 in a commingled form from single tubing in the multi-layered Pohang Basin aquifer, Korea, has no possibility of CO2 leakage due to fault reopening.

국방용 임베디드 시스템의 고신뢰성 검증을 위한 JTAG 결함주입 방법론 연구

이학재(Lee, Hak-Jae),박장원(Park, Jang-Won) 한국산학기술학회 2013 한국산학기술학회논문지 Vol.14 No.10

본 논문에서는 국방용 임베디드 시스템의 신뢰도를 테스트 할 수 있는 JTAG fault injection 기법과 fault, error, failure에 대한 분류 기법들을 새롭게 제안하였다. JTAG fault injection 기법은 JTAG을 사용하여 실제 hardware 에서 발생할 수 있는 fault를 software에서 인위적으로 유사하게 발생시킬 수 있다. 이 기법을 적용하여 시스템 취약도 에 대한 정량적 분석이 가능하였다. 본 논문의 JTAG fault injection 실험은 통계적인 방법을 적용하였으며, 실제 H/W 결함과 유사한 결함을 메모리의 임의의 위치에 주입하였다. 결함주입 실험 결과는 기존의 fault, error, failure 분류 기 법을 보완한 재분류 기법을 적용하여 분석하였다. 그 결과, 약 19%의 failure 탐지율 향상을 보였다. 이 실험결과는 시스템에서 발생할 수 있는 fault, error, failure의 체계적 분류, 프로세스 검증, 신뢰성 개선을 위한 데이터로 활용이 가능하다. In this paper, it is proposed that JTAG fault injection environment and the results of the classification techniques that the reliability of embedded systems can be tested. As applying these, this is possible to quantitative analysis of vulnerable factor for system. The quantitative analysis for the degree of vulnerability of system is evaluated by faults errors, and failures classification schemes. When applying these schemes, it is possible to verify process and classify for fault that might occur in the system.

Evaluation of Effectiveness of Fault-Tolerant Techniques in a Digital Instrumentation and Control System with a Fault Injection Experiment

김만철,서정일,정원대,최종균,강현국,이승준 한국원자력학회 2019 Nuclear Engineering and Technology Vol.51 No.3

Recently, instrumentation and control (I&C) systems in nuclear power plants have undergone digitalization. Owing to the unique characteristics of digital I&C systems, the reliability analysis of digital systemshas become an important element of probabilistic safety assessment (PSA). In a reliability analysisof digital systems, fault-tolerant techniques and their effectiveness must be considered. A fault injectionexperiment was performed on a safety-critical digital I&C system developed for nuclear power plants toevaluate the effectiveness of fault-tolerant techniques implemented in the target system. A softwareimplementedfault injection in which faults were injected into the memory area was used based onthe assumption that all faults in the target system will be reflected in the faults in the memory. To reducethe number of required fault injection experiments, the memory assigned to the target software wasanalyzed. In addition, to observe the effect of the fault detection coverage of fault-tolerant techniques, aPSA model was developed. The analysis of the experimental result also can be used to identify weakpoints of fault-tolerant techniques for capability improvement of fault-tolerant techniques