Application of STPA-SafeSec for a cyber-attack impact analysis of NPPs with a condensate water system test-bed
| Autor: | Jong-Gyun Choi, Cheol-Kwon Lee, Jinsoo Shin, Jung-Woon Lee, Junyoung Son, Jae-Gu Song |
|---|---|
| Rok vydání: | 2021 |
| Předmět: |
Risk
Risk analysis Computer science Process (engineering) 020209 energy Cyber-attack System testing 02 engineering and technology 030218 nuclear medicine & medical imaging 03 medical and health sciences 0302 clinical medicine 0202 electrical engineering electronic engineering information engineering Instrumentation (computer programming) STPA-SafeSec business.industry TK9001-9401 Industrial control system Nuclear power Test-bed Nuclear Energy and Engineering Risk analysis (engineering) Security Nuclear engineering. Atomic power Safety business |
| Zdroj: | Nuclear Engineering and Technology, Vol 53, Iss 10, Pp 3319-3326 (2021) |
| ISSN: | 1738-5733 |
| Popis: | As a form of industrial control systems (ICS), nuclear instrumentation and control (I&C) systems have been digitalized increasingly. This has raised in turn cyber security concerns. Cyber security for ICS is important because cyber-attacks against ICS can cause not only equipment damage and loss of production but also personal and public safety hazards unlike in general IT environments. Numerous risk analyses have been carried out to enhance the safety of ICS and recently, many studies related to the cyber security of ICS are being conducted. Many existing risk analyses and cyber security studies have considered safety and cyber security separately. However, both safety and cyber security perspectives should be considered when analyzing risks for complex and critical ICS facilities such as nuclear power plants (NPPs). In this paper, the STPA-SafeSec methodology is selected to consider both safety and security perspectives when performing a risk analysis for NPPs in order to assess impacts on the safety by cyber-attacks against the digital I&C systems. The STPA-SafeSec methodology was applied to a test-bed system that simulates a condensate water (CD) system in an NPP. The process of the application up to the development of mitigation strategies is described in detail. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|