Security Design of Remote Maintenance Systems for Nuclear Power Plants Based on ISO/IEC 15408
Ryosuke Watabe, Tadashi Oi, Yoshio Endo · SICE Journal of Control Measurement and System Integration · 2008
This paper presents a security design of remote maintenance systems for nuclear power plants. Based on ISO/IEC 15408, we list assets to be protected, threats to the assets, security objectives against the threats, and security functional requirements that achieve the security objectives. Also, we show relations between the threats and the security objectives, and relations between the security objectives and the security functional requirements. As a result, we concretize a necessary and sufficient security design of remote maintenance systems for nuclear power plants that can protect the instrumentation and control system against intrusion, impersonation, tapping, obstruction and destruction.