• Convergence Security Journal
• /
• v.11 no.6
• /
• pp.53-58
• /
• 2011

There is increasing use of common commercial operation system and standard PCs to control industrial production systems, and cyber security threat for industrial facilities have emerged as a serious problem. Now these network connected ICS(Industrial Control Systems) stand vulnerable to the same threats that the enterprise information systems have faced and they are exposed to malicious attacks. In particular Stuxnet is a computer worm targeting a specific industrial control system, such as a gas pipeline or power plant and in theory, being able to cause physical damage. In this paper we present an overview of the general configuration and cyber security threats of a SCADA and investigate the attack tree analysis to identify and assess security vulnerabilities in SCADA for the purpose of response to cyber attacks in advance.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2017.11a
• /
• pp.314-317
• /
• 2017

최근 ICT 기술이 발달함에 따라 전쟁의 양상이 물리적에서 사이버전으로 이동되고 있으며 이미 사이버 공간을 제 5의 전장으로 불리운다. 또한 오랜 기간 동안 단계적으로 준비 과정을 거쳐 공격하는 APT 사례가 증가함에 따라 공격 징후를 사전에 탐지해 선제 대응하는 사이버 킬 체인이라는 방안이 각광받고 있다. 이러한 사이버 킬 체인 중 가장 기초가 되는 감시/정찰을 수행하기 위한 방안을 연구하면서 적의 영역에 침투했다는 가정하에서 정보를 수집하는 프로그램을 설계 및 제작해 보았다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.4
• /
• pp.745-756
• /
• 2020

An ICS(industrial control system) is a complex system that safely and efficiently monitors and controls industrial processes such as electric power, water treatment, transportation, automation plants and chemical plants. Because successful cyber attacks targeting ICS can lead to casualties or serious economic losses, it becomes a prime target of hacker groups sponsored by national state. Cyber campaigns such as Stuxnet, Industroyer and TRITON are real examples of successful ICS attacks, and were developed based on the deep knowledge of the target ICS. Therefore, for incident investigation of ICSs, inspectors also need knowledge of control processes and accident investigation techniques specialized for ICSs. Because there is no applicable technology, it is especially necessary to develop techniques and tools for embedded controllers located at cyber and physical boundaries. As the first step in this research, we reviewed logging capability of 4 PLC(Programmable Logic Controller)s widely used in an ICS area, and checked whether selected PLCs generate logs that can be used for digital investigation in the proposed cyber attack scenario.

• The Journal of Society for e-Business Studies
• /
• v.25 no.2
• /
• pp.99-108
• /
• 2020

Unlike a general IT environment, an industrial control system is an environment where stability and continuity are more important than security. In the event of a security accident in the industrial control system, physical motion can be controlled, so physical damage can occur and physical damage can even result in personal injury. Cyber attacks on industrial control systems are not simply cyber damage, but terrorism. However, the security of industrial control systems has not been strengthened yet, and many vulnerabilities are actually occurring. This paper shows that the PLC can be remotely controlled by analyzing the connection process and packets for the PLC protocol used in the industrial control system and bypassing the security mechanism existing in the protocol. Through this, we intend to raise the security awareness of the industrial control system.

• Proceedings of the Korean Information Science Society Conference
• /
• 2011.06b
• /
• pp.370-372
• /
• 2011

기존에 연구된 사이버 물리 시스텀을 위한 동적 제어 미들웨어에서는 구성요소인 제어 장치 (Controller)가 동일한 지역망 내에 위치한 Controller를 검색하고자 할 때, 검색 하고자 하는 Controller카 자신의 상위 제어 및 관리 장치 (C&A, Controller & Administrator) 와 다른 C&A의 하위 노드인 경우, 전역의 C&A에게 모두 검색 메시지를 전송하는 심각한 문제가 존재 하였다. 본 논문에서는 이러한 비효율적인 문제를 해결하고자 같은 지역망 내의 C&A간 검색 메시지를 전달 (Forwarding) 하는 방식을 도입한다. 이를 통해 같은 지역망 내에 존재하는 Controller 검색을 위한 네트워크 트래픽을 크게 감소시킬 수 있다.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2023.11a
• /
• pp.329-330
• /
• 2023

인공지능(AI)은 지방자치단체 청사의 물리적 보안 시스템을 개선하는 데 활용될 수 있는 유망한 기술이다. 방대한 데이터를 분석하고 패턴을 식별할 수 있어, 테러나 폭력과 같은 위협을 사전에 예방하는데 도움이 될 수 있다. 또한, 인공지능(AI)은 실시간으로 보안 상황을 모니터링하고 이상 징후를 감지할 수 있어, 보안 인력의 업무 효율성을 향상시키고 비용을 절감하는 데에도 도움이 되기에 인공지능(AI)을 적용한 물리적 보안 시스템 개선방안에 대해 제안하고자 한다.

• Journal of Korea Society of Industrial Information Systems
• /
• v.21 no.2
• /
• pp.1-10
• /
• 2016

In this paper, we consider the algorithms and numerical analysis for real-time integrated control system and resource management of large-scale manufacturing smart factory system. There various data transmitted on Cyber-Physical-System (CPS) is necessary to control in real time, as well as the terminal and the platform with respective system service. This will be a true smart manufacturing which consisting of existing research results, and a numerical analysis by the parameter-specific information. In this paper, Jacoby calculation to reflect the optimization algorithms that are newly proposed. It also presents a behavior that optimal operational algorithm on CPS which is adapted to the sensing data. In addition, we also verify the excellence of the real-time integrated control system through experimentation, by comparison with the existing research results.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.29 no.6
• /
• pp.1403-1412
• /
• 2019

Effect of damage and loss cost for downtime is huge, if physical devices such as turbines, pipe, and storage tanks are in the abnormal state originated from not only aging, but also cyber attacks on the control and monitoring system like PLC (Programmable Logic Controller). To improve availability and dependability of the physical devices, we design and implement an indirect health monitoring system which sense temperature, acceleration, current, etc. indirectly, and put sensor data into Influx DB in real-time. Then, the actual performance of detecting abnormal state is shown using the indirect health monitoring system. Analyzing data are acquired using the real-time indirect health monitoring system, abnormal state and security threats can be double-monitored and lower maintenance cost utilizing prognostics and health management.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2016.04a
• /
• pp.225-228
• /
• 2016

CPS(Cyber Physical System)는 사이버 세계(cyber world)와 물리적 세계(physical word)를 연결하여, 현실과 사이버의 정보를 융합 분석하고, 분석한 데이터를 현실에 Feedback 하는 자동적이고 지능적인 제어 시스템이다. 이러한 CPS는 빅데이터를 분석하여 사용자에게 알맞은 정보를 제공해 주며 딥러닝(Deep Learning)을 통해 정확하고 세밀한 Feedback을 제공하는 등 이종 복합 시스템 간의 고신뢰성과 실시간성을 보장하는 무결점 자율 제어 시스템으로 주목 받고 있다. 실생활에서는 의료, 헬스케어, 교통, 에너지, 홈, 국방, 재난대응, 농업, 제조 등에서 폭 넓게 사용되고 있다. 해외에서는 이와 같은 CPS를 이용해 한 분야에 세밀하게 접목시켜 발전을 도모하며, CPS에 의해 변혁되는 데이터 구동형 사회를 준비하고 있다. 하지만, 이러한 CPS를 사용할 때, 보안의 문제점으로 대규모 정전사태가 발생하고, 생명을 위협하는 등의 취약점 또한 드러나고 있어 이에 대한 보안의 중요성과 CPS의 적용분야를 파악하여 전반적인 보안 문제점을 분석하고자 한다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.23 no.2
• /
• pp.207-214
• /
• 2019

The speed of technological development is increasing, and high-performance digital devices are spreading. Wired digital devices such as PCs have been optimized for existing wired environments, but needs are shifting away from the constraints of space and space to smart work that enables efficient work anywhere and anytime. The Smart Work System security design is needed to secure integrity and availability in the face of various security threats including physical threats (lost, stolen, and damaged terminals), technical threats (data theft, DoS: denial of service), and unauthorized access outside the wired environment. In this study, we analyzed smart work network systems, wired / wireless link systems, and digital smart devices. We also studied cyber-attack analysis and cybersecurity design methods for a Smart Work wired system and a future wireless system. This study will be used as basic data for building a secure Smart Work system.