Design of Service Oriented Architecture(SOA)-based Software Vulnerability Analysis Method for Digital I and C System in NPP

Diverse cyber security issues due to the vulnerability of the digital control systems have been brought up in the existing IT environments while advancement and propagation of digital I and C systems have improved convenience through automation. The recent example of Stuxnet proved that stability in the digital I and C system could not be secured due to an air gap of physical security elements. Therefore, it is required to discover new approaches toward cyber security that will overcome the limitation on security in a closed environment. In particular, there is a rapid increase in the importance of cyber security seen in guidelines published by IAEA and U.S. NRC shows that cyber security as well as physical security draws worldwide attention as a key component for nuclear system safety. To incorporate the new guide requirement, cyber security threats are analyzed by ITbase security elements for finding best practice approaches. The vulnerabilities identified by the general security threats and defined mitigation activities can include many different methods and strategies. This research suggests a method for analyzing vulnerability and assessment the nuclear digital I and C cyber security