DC Field | Value | Language |
---|---|---|
dc.contributor.advisor | Yoon, Hyunsoo | - |
dc.contributor.advisor | 윤현수 | - |
dc.contributor.author | Lee, Minsoo | - |
dc.date.accessioned | 2021-05-11T19:42:20Z | - |
dc.date.available | 2021-05-11T19:42:20Z | - |
dc.date.issued | 2020 | - |
dc.identifier.uri | http://library.kaist.ac.kr/search/detail/view.do?bibCtrlNo=901601&flag=dissertation | en_US |
dc.identifier.uri | http://hdl.handle.net/10203/283504 | - |
dc.description | 학위논문(박사) - 한국과학기술원 : 전산학부, 2020.2,[iv, 53 p. :] | - |
dc.description.abstract | The I&C system of Nuclear Power Plants(NPPs) employ a cybersecurity program what government leads. The government requires that apply the security controls of regulation to develop and operate the system. Accordingly, the licensee of NPPs tries to comply with this requirement from the development phase. Michael Muckin called this method a compliance-driven approach in his paper[1]. This approach is efficient when the government supervises NPPs, but it is not efficient when the licensee produces NPPs. The security controls include all the NPP-related controls without consideration of system characteristics. In other words, the development organization spends much time to exclude unnecessary controls and to write the evidence. Also, the security of the system can weaken according to the security knowledge level of the developer, and this can lead to differences in security levels between systems. This dissertation proposes a method for selecting the security control that can be applied in the early development phase to ensure the security of the system and to reduce the cost of excluding unnecessary security control. We formalize an attack pattern and the security controls pattern and use a relationship between patterns. We conduct a case study on applying R.G. 5.71 in the PPS(Plant Protection System) to confirm the validation of our method. | - |
dc.language | eng | - |
dc.publisher | 한국과학기술원 | - |
dc.subject | Attack Pattern▼aNPPs▼aR.G. 5.71▼aSecurity Control▼aCompliance-driven security | - |
dc.subject | 공격 패턴▼a원전 제어 시스템▼aR.G. 5.71▼a보안통제▼a규제기반 사이버보안 | - |
dc.title | Compliance-driven cybersecurity based on formalized attack pattern for NPPs | - |
dc.title.alternative | 원자력 발전소 제어 시스템을 위한 정형화된 공격 패턴 기반의 사이버보안 규제 대응 방안 | - |
dc.type | Thesis(Ph.D) | - |
dc.identifier.CNRN | 325007 | - |
dc.description.department | 한국과학기술원 :전산학부, | - |
dc.contributor.alternativeauthor | 이민수 | - |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.