Vulnerability Risk Score Recalculation for the Devices in Critical Infrastructure
Yangseo Choi, Sangsu Lee, Byeong-Cheol Choi · 2022 13th International Conference on Information and Communication Technology Convergence (ICTC) · 2022
As long as the IT technologies are adapted to various OT areas such as nuclear power plants, the threats of cyber attacks against critical infrastructures are becoming reality. Since the attack against critical infrastructure can cause a very large social and economic disaster, it is necessary to establish a proactive defense system before an attack occurs. For that, it is very important to be aware of the threats. So, in this paper, we propose a risk score recalculation method for the related vulnerabilities of digital devices operated in the I&C systems in nuclear power plants. The actual risk score of the identified vulnerabilities is derived by reflecting the characteristics of the operating environment of the devices. The results of the method will be shown at the end of this paper.