중소기업용 스마트팩토리 보안 취약점 분류체계 개발

• 영문명: Developing a Classification of Vulnerabilities for Smart Factory in SMEs: Focused on Industrial Control Systems
• 발행기관: 한국IT서비스학회
• 저자명: 정재훈 김태성
• 간행물 정보: 『한국IT서비스학회지』제21권 제5호, 65~79쪽, 전체 15쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2022.10.31

영문 초록

The smart factory has spread to small and mid-size enterprises (SMEs) under the leadership of the government. Smart factory consists of a work area, an operation management area, and an industrial control system (ICS) area. However, each site is combined with the IT system for reasons such as the convenience of work. As a result, various breaches could occur due to the weakness of the IT system. This study seeks to discover the items and vulnerabilities that SMEs who have difficulties in information security due to technology limitations, human resources, and budget should first diagnose and check. First, to compare the existing domestic and foreign smart factory vulnerability classification systems and improve the current classification system, the latest smart factory vulnerability information is collected from NVD, CISA, and OWASP. Then, significant keywords are extracted from pre-processing, co-occurrence network analysis is performed, and the relationship between each keyword and vulnerability is discovered. Finally, the improvement points of the classification system are derived by mapping it to the existing classification system. Therefore, configuration and maintenance, communication and network, and software development were the items to be diagnosed and checked first, and vulnerabilities were denial of service (DoS), lack of integrity checking for communications, inadequate authentication, privileges, and access control in software in descending order of importance.

목차

1. 서론

2. 관련 연구 및 사례조사

3. 연구 방법

4. 연구 결과

5. 결론

참고문헌

키워드

Smart Factory Vulnerabilities Small and Mid-size Enterprises Industrial Control System