Analysis of cyber-attacks towards instrumentation and control system with the att&ck framework
Başlık çevirisi mevcut değil.
- Tez No: 914149
- Danışmanlar: Belirtilmemiş.
- Tez Türü: Yüksek Lisans
- Konular: Belirtilmemiş.
- Anahtar Kelimeler: Belirtilmemiş.
- Yıl: 2023
- Dil: İngilizce
- Üniversite: Tsinghua University
- Enstitü: Yurtdışı Enstitü
- Ana Bilim Dalı: Belirtilmemiş.
- Bilim Dalı: Belirtilmemiş.
- Sayfa Sayısı: 79
Özet
The use of computers, communication systems, and network technologies in nuclear power plants has increased in recent years. As a result, the instrumentation and control systems of nuclear power plants now use digital technology, which presents similar cyber-security challenges to other critical infrastructure. Due to the growing use of digital technology in nuclear power plants, assessing the risk of cyber threats has become more critical in both the development and operation of these systems. While the instrumentation and control systems used in industrial control systems and nuclear power plants share similarities, the specifications of the latter are distinct in architecture and function to meet strict nuclear safety standards. Therefore, applying cyber security risk assessment requires different approaches for nuclear power plant instrumentation and control systems. Due to the use of the I&C in nuclear power plants, a cyber-attack framework utilizing the ATT&CK ICS Matrix to determine the new difficulties posed by cyber-attacks. The framework was created to identify intrusions into pressurized water reactors that might cause unexpected behaviors in relation to the water levels or pressure in the steam generator and industrial controller failures of steam generator. The development of multiple attack scenarios demonstrated the process of identifying the attack vectors and components within the I&C system. This study will analyze various types of attacks, the status of components, their impact on the I&C system, and how they affect the overall functioning of the nuclear power plant. The research will focus on two specific systems, namely the steam generator level control system and the steam generator pressure control system, which will serve as the primary components of this thesis. The adversary may use different types of attacks with a specific purpose, and these attacks may cause different reactions in the part and the system. It will show different results for the whole plant, depending on the degree to which the system function is affected. It will prepare a detailed matrix for ourselves by defining cause, impact, and result. Therefore, the“Impact”tactic will be used with the help of ATT&CK framework. Impact techniques will guide the new matrix and help complete the analysis.
Özet (Çeviri)
Özet çevirisi mevcut değil.
Benzer Tezler
- Antecedents and consequences of cyber security awareness: A case study for maritime sector
Siber güvenlik farkındalığının öncülleri ve sonuçları: Denizcilik sektörü için bir vaka çalışması
GİZEM YÜKSEL
Yüksek Lisans
İngilizce
2019
Denizcilikİstanbul Teknik ÜniversitesiDeniz Ulaştırma Mühendisliği Ana Bilim Dalı
DR. ÖĞR. ÜYESİ PELİN BOLAT
- Açık kaynak web uygulama güvenlik duvarı ModSecurity'nin kullanılabilirlik analizi
Usability analysis of an open source web application firewall ModSecurity
MURAT ALAGÖZ
Yüksek Lisans
Türkçe
2020
Bilgisayar Mühendisliği Bilimleri-Bilgisayar ve KontrolTOBB Ekonomi ve Teknoloji ÜniversitesiBilgisayar Mühendisliği Ana Bilim Dalı
PROF. DR. ALİ AYDIN SELÇUK
- Cyber tools as foreign policy instruments in trilateral relations: Analysing cyber-attacks targeting the United Kingdom
Üçlü ilişkilerde dış politika aracı olarak siber araçlar: Birleşik Krallık'ı hedef alan siber saldırıların analizi
ATAKAN YILMAZ
Doktora
İngilizce
2024
Siyasal BilimlerGalatasaray ÜniversitesiUluslararası İlişkiler Ana Bilim Dalı
DOÇ. DR. MENENT SAVAŞ CAZALA
- İşletmelerin dijitalleşme sürecinde siber güvenlik: Sosyal ağ analizine dayalı hazırlık ölçeğinin geliştirilmesi
Cyber security in the digitalization process of businesses: Development of readiness scale based on social network analysis
BÜŞRA HIDIROĞLU
Yüksek Lisans
Türkçe
2023
Bilgisayar Mühendisliği Bilimleri-Bilgisayar ve KontrolEge Üniversitesiİşletme Ana Bilim Dalı
DOÇ. DR. HAYDAR YALÇIN
- Endüstri 4.0'ın denizcilik sektörü üzerindeki etkilerinin bulanık tabanlı yöntemlerle değerlendirilmesi
Evaluation of the effects of Industry 4.0 on the maritime sector with fuzzy based methods
MAHMUT MOLLAOĞLU
Yüksek Lisans
Türkçe
2021
DenizcilikZonguldak Bülent Ecevit ÜniversitesiDeniz İşletmeleri Yönetimi Ana Bilim Dalı
DR. ÖĞR. ÜYESİ HAKAN DEMİREL
DR. ÖĞR. ÜYESİ ABİT BALIN