산업제어시스템 보안에 관한 연구 = Research on Industrial Control System Security

다국어 초록 (Multilingual Abstract)

In association with the point at which the term 4th Industrial Revolution was mentioned, companies began to expand the application of the latest information and communication technologies such as the Internet of Things, big data, artificial intelligence to manufacturing facilities, by performing intelligence maintenance utilizing the latest technology to reduce maintenance costs, as well as bringing the effect of reducing process equipment downtime it confirms the effect of improving yields through process operating optimization. However, the contact between the industrial control system and the Internet operating relatively safely from cyberattacks operated in an existing closed environment to the opposite end of this is expanding, which, along with the increase in security threats, the incidence of security attacks continues to increase. The paper explores the types and architectures of industrial control systems, as well as security measures and measures to keep industrial control systems safe from major and ever-increasing security threats.

참고문헌 (Reference)

1 중소벤처기업부, "중소기업 기술로드맵 2018-2020, 정보보호"

2 Eric Byres, "Using ANSI/ISA-99 Standards to improve Control System Security"

3 Theodore Joseph Williams, "The Purdue Enterprise Reference Architecture: a technical guide for CIM planning and implementation"

4 SANS Institute, "The Industrial Control System Cyber Kill Chain"

5 NIST, "SP800-82 Guide to Industrial Control Systems(ICS)Security"

6 NIST, "SP800-53 Security and PrivacyControls for Federal Information Systems and Organizations"

7 Fortinet, "SECURING INDUSTRIAL CONTROL SYSTEMS WITH FORTINET: IEC-62443 Compliant End-to-End Security"

8 RISI, "RISI Online Incident Database"

9 CISCO Systems, "Networking and Security in Industrial Automation Environment"

10 Mandiant, "INDUSTRIAL CONTROL SYSTEMS SECURITY: Overview and Threat Briefing"

11 Positive Technologies, "ICS VULNERBILITIES:2018IN REVIEW"

12 Hemsley, Kevin E., "History of Industrial Control System Cyber Incidents" Idaho National Lab(INL) 2018

13 NIST, "Framework for Improving Critical Infrastructue Cybersecurity"

14 MITRE, "ATT&CK for ICS"