원전 안전계통의 사이버보안 위협 및 대응 = Cybersecurity Threats and Responses of Safety Systems in NPPs

다국어 초록 (Multilingual Abstract)

In the past, conservative concepts have been applied in terms of the characteristic of nuclear power plants(NPPs), resulting in analog-based equipment and closed networks. However, as digital technology has recently been applied to the design, digital-based facilities and communication networks have been used in nuclear power plants, increasing the risk of cybersecurity than using analog-based facilities. Nuclear power plant facilities are divided into a safety system and a non-safety system. It is essential to identify the difference and cope with cybersecurity threats to the safety system according to its characteristics. In this paper, we examine the cybersecurity regulatory guidelines for safety systems in nuclear power plant facilities. Also, we analyze cybersecurity threats to a programmable logic controller of the safety system and suggest cybersecurity requirements be applied to it to respond to the threats. By implementing security functions suitable for the programmable logic controller according to the suggested cybersecurity requirements, regulatory guidelines can be satisfied, and security functions can be extended according to other system requirements. Also, it can effectively cope with cybersecurity attacks that may occur during the operation of nuclear power plants.

참고문헌 (Reference)

1 정만현, "원전 디지털 계측제어시스템 사이버보안 기술 체계 수립 방법 연구" 한국정보보호학회 24 (24): 561-570, 2014

2 정성민, "원전 계측제어시스템에 적합한운영적 및 관리적 보안 요건" 175-178, 2019

3 이철권, "원전 계측제어시스템 사이버보안 기술동향" 한국정보보호학회 22 (22): 28-34, 2012

4 김도연, "원전 계측제어계통의 안전 네트워크 설계 및 평가를 위한 보안 기준" 한국전자통신학회 9 (9): 267-271, 2014

5 "원자력안전위원회규칙 제24호, 원자로시설 등의기술기준에 관한 규칙"

6 한국원자력통제기술원, "원자력시설등의 필수디지털자산 식별 기술기준, KINAC RS-019"

7 한국원자력통제기술원, "원자력 시설 등의 컴퓨터 및 정보시스템 보안 기술기준, KINAC RS-015"

8 정성민, "계측제어시스템을 위한 기술적보안 요건 적용" 69-72, 2018

9 정성민, "계측제어시스템 사이버보안 요건서 고려사항" 27-29, 2016

10 정성민, "계측제어시스템 개발을 위한 사이버보안 요구사항" 34-37, 2017

11 U.S. NRC, "Protection of Digital Computer and Communication Systems and Networks, 10CFR 73.54"

12 Sadegh vosough, "PLC and its Applications" 2 (2): 2011

13 U. S. NRC, "Cyber Security Programs for Nuclear Facilities, Regulatory Guide 5.71"

14 Jung-Woon Lee, "Cyber Security Considerations in the Development of I&C Systems for Nuclear Power Plants" 2011

15 U.S. NRC, "Criteria for Digital Computers in Safety Systems of Nuclear Power Plants,”Regulatory Guide 1.152"

16 DHS, "Common Cybersecurity Vulnerabilities in Industrial Control Systems"