Cyberphysical Security and Dependability Analysis of Digital Control Systems in Nuclear Power Plants

IEEE Transactions on Systems, Man, and Cybernetics: Systems

Volumn 46, Issue 3, 2016, Pages 356-369

  Cho, Chi Shiang ^a   Chung, Wei Ho ^b   Kuo, Sy Yen ^a  

^a NATIONAL TAIWAN UNIVERSITY   (Taiwan)

^b RESEARCH CENTER FOR INFORMATION TECHNOLOGY INNOVATION   (Taiwan)

Author keywords

Control networks; control systems; cyberphysical security; dependability analysis; generalized stochastic Petri nets (GSPNs); International Organization for Standardization International Electrotechnical Commission 17799 (ISO IEC 17799); nuclear power plants; RG 5.71

Indexed keywords

CONTROL SYSTEM ANALYSIS; CONTROL SYSTEMS; DIGITAL CONTROL SYSTEMS; ELECTRIC POWER SYSTEM SECURITY; NUCLEAR ENERGY; NUCLEAR FUELS; NUCLEAR POWER PLANTS; PETRI NETS; SAFETY ENGINEERING; SECURITY OF DATA; STOCHASTIC SYSTEMS;

CONTROL NETWORK; CYBER-PHYSICAL SECURITIES; DEPENDABILITY ANALYSIS; ELECTROTECHNICAL; GENERALIZED STOCHASTIC PETRI NETS; RG 5.71;

STOCHASTIC CONTROL SYSTEMS;

EID: 84962815812     PISSN: 21682216     EISSN: 21682232     Source Type: Journal    
DOI: 10.1109/TSMC.2015.2452897     Document Type: Article

References (38)

1. W. Kuo, "Reliability and nuclear power, " IEEE Trans. Rel., vol. 60, no. 2, pp. 365-367, Jun. 2011.
2. E. Strickland, "24 hours at Fukushima, " IEEE Spectr., vol. 48, no. 11, pp. 35-42, Oct. 2011. [Online]. Available: http://spectrum.ieee.org/energy/nuclear/24-hours-at-fukushima
3. G. Ericsson and Å. Torkilseng, "Management of information security for an electric power utility-On security domains and use of ISO/IEC17799 standard, " IEEE Trans. Power Del., vol. 20, no. 2, pp. 683-690, Apr. 2005.
4. C. Ten, C. Liu, and G. Manimaran, "Vulnerability assessment of cyber-security for SCADA systems, " IEEE Trans. Power Syst., vol. 23, no. 4, pp. 1836-1846, Nov. 2008.
5. C. Ten, G. Manimaran, and C. Liu, "Cybersecurity for critical infrastructures: Attack and defense modeling, " IEEE Trans. Syst., Man, Cybern. A, Syst., Humans, vol. 40, no. 4, pp. 853-865, Jul. 2010.
6. T. Chen, J. Sanchez-Aarnoutse, and J. Buford, "Petri net modeling of cyber-physical attacks on smart grid, " IEEE Trans. Smart Grid, vol. 2, no. 4, pp. 741-749, Dec. 2011.
7. R. Zeng, Y. Jiang, C. Lin, and X. Shen, "Dependability analysis of control center networks in smart grid using stochastic Petri nets, " IEEE Trans. Parallel Distrib. Syst., vol. 23, no. 9, pp. 1721-1730, Sep. 2012.
8. A. Avizienis, J. Laprie, B. Randell, and C. Landwehr, "Basic concepts and taxonomy of dependable and secure computing, " IEEE Trans. Depend. Secure Comput., vol. 1, no. 1, pp. 11-33, Jan./Mar. 2004.
9. D. Nicol, W. Sanders, and K. Trivedi, "Model-based evaluation: From dependability to security, " IEEE Trans. Depend. Secure Comput., vol. 1, no. 1, pp. 48-65, Jan./Mar. 2004.
10. M. Malhotra and K. Trivedi, "Power-hierarchy of dependability-model types, " IEEE Trans. Rel., vol. 43, no. 3, pp. 493-502, Sep. 1994.
11. M. Malhotra and K. Trivedi, "Dependability modeling using Petri-nets, " IEEE Trans. Rel., vol. 44, no. 3, pp. 428-440, Sep. 1995.
12. P. Khand, "Petri net based simulation of attack trees for the security evaluation of digital instrumentation and control systems, " in Proc. Int. Bhurban Conf. Appl. Sci. Technol., Islamabad, Pakistan, 2010, pp. 209-217.
13. J. Ha and P. Seong, "Attentional-resource effectiveness measures in monitoring and detection tasks in nuclear power plants, " IEEE Trans. Syst., Man, Cybern. A, Syst., Humans, vol. 40, no. 5, pp. 993-1008, Sep. 2010.
14. IEEE Standard Criteria for Digital Computers in Safety Systems of Nuclear Power Generating Stations, IEEE Standard 7-4.3.2, 2010.
15. 10 CFR 73.54: Protection of Digital Computer and Communication Systems and Networks. (2009). [Online]. Available: http://www.nrc.gov/reading-rm/doc-collections/cfr/part073/part073-0054.html
16. Regulatory Guide 5.71: Cyber Security Programs for Nuclear Facilities. (2010). [Online]. Available: http://nrc-stp.ornl.gov/slo/regguide571.pdf
17. Regulatory Guide 5.65: Vital Area Access Controls, Protection of Physical Security Equipment, and Key and Lock Controls. (1986). [Online]. Available: http://pbadupws.nrc.gov/docs/ML0037/ML003739336.pdf
18. Regulatory Guide 5.66: Access Authorization Program for Nuclear Power Plants. (2009). [Online]. Available: http://pbadupws.nrc.gov/docs/ML1120/ML112060032.pdf
19. 10 CFR 73.55: Requirements for Physical Protection of Licensed Activities in Nuclear Power Reactors Against Radiological Sabotage. (2010). [Online]. Available: http://www.nrc.gov/reading-rm/doc-collections/cfr/part073/part073-0055.html
20. 10 CFR 73.56: Personnel Access Authorization Requirements for Nuclear Power Plants. (2010). [Online]. Available: http://www.nrc.gov/reading-rm/doc-collections/cfr/part073/part073-0056.html
21. Regulatory Guide 5.79: Protection of Safeguards Information. (2011). [Online]. Available: http://pbadupws.nrc.gov/docs/ML1032/ML103270219.pdf
22. Information Technology-Security Techniques-Information Security Management Systems-Requirements, ISO/IEC 27001, 2005.
23. IEEE Standard Criteria for Safety Systems for Nuclear Power Generating Stations, IEEE Standard 603, 2009.
24. F. Bause and P. S. Kritzinger, Stochastic Petri Nets: An Introduction to the Theory, 2nd ed. Braunschweig, Germany: Vieweg, 2002.
25. M. Marsan, G. Balbo, G. Conte, S. Donatelli, and G. Franceschinis, Modeling With Generalized Stochastic Petri Nets, Chichester, U.K.: Wiley, 1994.
26. M. Marsan and G. Conte, "A class of generalized stochastic Petri nets for the performance evaluation of multiprocessor systems, " ACM Trans. Comput. Syst., vol. 2, no. 2, pp. 93-122, May 1984.
27. C. A. Petri, "Communication with automata, " Dept. Comput. Sci., Rome Air Develop. Center, Rome, NY, USA, Tech. Rep. RADC-TR-65-377, 1966.
28. L. K. Singh, G. Vinod, and A. K. Tripathi, "Design verification of instrumentation and control systems of nuclear power plants, " IEEE Trans. Nucl. Sci., vol. 61, no. 2, pp. 921-930, Apr. 2014.
29. Y. Du, L. Qi, and M. Zhou, "Analysis and application of logical Petri nets to e-commerce systems, " IEEE Trans. Syst., Man, Cybern., Syst., vol. 44, no. 4, pp. 468-481, Apr. 2014.
30. W. Yu, C. Yan, Z. Ding, C. Jiang, and M. Zhou, "Modeling and validating e-commerce business process based on Petri nets, " IEEE Trans. Syst., Man, Cybern., Syst., vol. 44, no. 3, pp. 327-341, Mar. 2014.
31. H. Liu, K. Xing, M. Zhou, L. Han, and F. Wang, "Transition cover-based design of Petri net controllers for automated manufacturing systems, " IEEE Trans. Syst., Man, Cybern., Syst., vol. 44, no. 2, pp. 196-208, Feb. 2014.
32. M. Cabasino, A. Giua, A. Paoli, and C. Seatzu, "Decentralized diagnosis of discrete-event systems using labeled Petri nets, " IEEE Trans. Syst., Man, Cybern., Syst., vol. 43, no. 6, pp. 1477-1485, Nov. 2013.
33. T. Miyamoto and K. Horiguchi, "Modular reachability analysis of Petri nets for multiagent systems, " IEEE Trans. Syst., Man, Cybern., Syst., vol. 43, no. 6, pp. 1411-1423, Nov. 2013.
34. R. Rodriguez, J. Julvez, and J. Merseguer, "On the performance estimation and resource optimization in process Petri nets, " IEEE Trans. Syst., Man, Cybern., Syst., vol. 43, no. 6, pp. 1385-1398, Nov. 2013.
35. K. Misra, Handbook of Performability Engineering. London, U.K.: Springer, 2008.
36. I. Koren and C. Krishna, Fault-Tolerant Systems. Boston, MA, USA: Morgan Kaufmann, 2007.
37. IEEE Guide for General Principles of Reliability Analysis of Nuclear Power Generating Station Safety Systems, IEEE Standard 352, 1987.
38. H. Ammar and S. Islam, "Timed scale decomposition of a class of generalized stochastic Petri net models, " IEEE Trans. Softw. Eng., vol. 15, no. 6, pp. 809-820, Jun. 1989.