Cybersecurity Vulnerability Scanner for Digital Nuclear Power Plant Instrumentation and Control Systems

Kim, Jae Hong; Choi, Yang‐Kyu; Na, Jung-Chan

doi:10.1145/3297156.3297211

Cited by 2 publications

(3 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Kim et al [7] Digital assets Criteria for identifying digital assets. Kim et al [31] CS incident affecting the NPP I&C CS vulnerability checking system. Cho and Woo [27] Nuclear terror Study of twelve nuclear terror cases.…”

Section: Kim Et Al [29]mentioning

confidence: 99%

“…According to RG 5.71, periodic checking of the I&C systems should be conducted to identify any possible CS vulnerabilities. For this reason, CS vulnerability checking systems, such as the one proposed by [31], should be used to reduce the impact of vulnerabilities, as well as to ensure compliance with the automatic check regulatory guidelines. A fundamental requirement of these scanning tools is that they should not generate excessively high network traffic or overhead on the objects to be scanned.…”

Section: Risk Assessment and Threat Analysis For Nppsmentioning

confidence: 99%

See 1 more Smart Citation

CS Measures for Nuclear Power Plant Protection: A Systematic Literature Review

Chowdhury

2021

Signals

View full text Add to dashboard Cite

As digital instrumentation in Nuclear Power Plants (NPPs) is becoming increasingly complex, both attack vectors and defensive strategies are evolving based on new technologies and vulnerabilities. Continued efforts have been made to develop a variety of measures for the cyber defense of these infrastructures, which often consist in adapting security measures previously developed for other critical infrastructure sectors according to the requirements of NPPs. That being said, due to the very recent development of these solutions, there is a lack of agreement or standardization when it comes to their adoption at an industrial level. To better understand the state of the art in NPP Cyber-Security (CS) measures, in this work, we conduct a Systematic Literature Review (SLR) to identify scientific papers discussing CS frameworks, standards, guidelines, best practices, and any additional CS protection measures for NPPs. From our literature analysis, it was evidenced that protecting the digital space in NPPs involves three main steps: (i) identification of critical digital assets; (ii) risk assessment and threat analysis; (iii) establishment of measures for NPP protection based on the defense-in-depth model. To ensure the CS protection of these infrastructures, a holistic defense-in-depth approach is suggested in order to avoid excessive granularity and lack of compatibility between different layers of protection. Additional research is needed to ensure that such a model is developed effectively and that it is based on the interdependencies of all security requirements of NPPs.

show abstract

Section: Kim Et Al [29]mentioning

confidence: 99%

Section: Risk Assessment and Threat Analysis For Nppsmentioning

confidence: 99%

CS Measures for Nuclear Power Plant Protection: A Systematic Literature Review

Chowdhury

2021

Signals

View full text Add to dashboard Cite

show abstract

“…V ulnerability analysis (or vulnerability assessment) is the process that defines, identifies and classifies the vulnerabilities (or security holes) in a computer, network or communications infrastructure. In addition vulnerability analysis can be used to forecast the effectiveness of countermeasures to those vulnerabilities as well as evaluate their effectiveness after they are put into use [1]- [6].…”

Section: Introductionmentioning

confidence: 99%

Using NASL based Superscripts to measure System Security through Analyzing and Organizing attacks

Chalvatzis

Karras

Papademetriou

2019

2019 27th Telecommunications Forum (TELFOR)

View full text Add to dashboard Cite

Vulnerability scanning is a very important aspect in computer network security management towards prevention of system intrusions. To this end, Nessus is a worldwide accepted such tool involving state of the art techniques. The goal of this research is to analyze the principles of vulnerability scanning using Nessus and, more importantly, to model configurations and architectures of computer networks for efficiently employing Nessus towards formalizing vulnerability scanning evaluations. Most importantly, the contribution of the herein research is to provide a superscript based framework for such a vulnerability analysis of a small to medium enterprise.

show abstract

Cybersecurity Vulnerability Scanner for Digital Nuclear Power Plant Instrumentation and Control Systems

Cited by 2 publications

References 4 publications

CS Measures for Nuclear Power Plant Protection: A Systematic Literature Review

CS Measures for Nuclear Power Plant Protection: A Systematic Literature Review

Using NASL based Superscripts to measure System Security through Analyzing and Organizing attacks

Contact Info

Product

Resources

About