skip to main content
10.1145/3440943.3444741acmconferencesArticle/Chapter ViewAbstractPublication PagesiceaConference Proceedingsconference-collections
research-article

A Study on the Application of Technical Assessment Methodology (TAM) for CyberSecurity in Nuclear Power Plant

Published: 27 September 2021 Publication History

Abstract

Recently 1, cyber attacks targeting Industrial Control Systems (ICS) have been increasing rapidly; accordingly, cyber security applications and security evaluations of ICS are becoming very important. Technical Assessment Methodology (TAM) is a method developed by the Electric Power Research Institute (EPRI) in the United States for assessing and applying security control methods for power plants. By applying TAM, limitations of cyber security application and security evaluation of existing nuclear facilities are able to address. In this study, a virtual test bed was composed for one of the safety systems of APR1400, and the TAM was applied and analyzed to derive two advantages and five features of TAM. Based on this, the rationale for using TAM for the application and assessment of security control methods in nuclear facilities was explained, including five considerations for the better application of TAM. Finally, we propose future work for applying TAM.

References

[1]
IBM X-Force Incident Response and Intelligence Services (IRIS). 2020. X-Force Threat Intelligence Index. IBM. 5--6.
[2]
Paul Martyak. 2019. Risk-Informed Digital Engineering Update: Nuclear I&C Program. NEI Cyber Security Implementation Workshop, March 25-27, 2019. 23--37.
[3]
Michael Thow. 2019. Cyber Security Technical Assessment Methodology (TAM): OT Assessment First Principles. Electric Power Research Institute (EPRI). 1--23.
[4]
Electric Power Research Institute (EPRI). 2018. Cyber Security Roadmap. 2--30.
[5]
Electric Power Reasearch Institute (EPRI). 2018. Cyber Security Technical Assessment Methodology: Risk Informed Exploit Sequence Identification and Mitigation, Revision 1. Retrieved form https://www.epri.com/research/products/3002008023
[6]
Korea Electric Power Corporation and Korea Hydro & Nuclear Power CO., LTD. 2014. APR1400 DESIGN CONTROL DOCUMENT TIRE 2: CHAPTER 7 INSTRUMENTATION AND CONTROL. Retrieved from https://www.nrc.gov/docs/ML1500/ML15006A042.pdf
[7]
Korea Electric Power Corporation and Korea Hydro & Nuclear Power CO., LTD. 2014. Safety I&C System Revision 0. Retrieved from https://www.nrc.gov/docs/ML1500/ML15009A131.pdf
[8]
Korea Electric Power Corporation and Korea Hydro & Nuclear Power CO., LTD. 2014. Safety I&C System for the APR1400 Revision 0. Retrieved from https://www.nrc.gov/docs/ML1330/ML13304B288.pdf
[9]
Kyoungho. C, Jangyeoul. K, Jangsoo. L, Sewoo. C, and Keechoon. K. 2006. Software Qualification of a Programmable Logic Controller for Nuclear Instrumentation and Control Applications. Proceedings of the 6th World Scientific and Engineering Academy and Society (WSEAS) International Conference on Applied Informatics and Communications, Elounda, Greece. 353--358.
[10]
Kwangseop. S, DongHoon. H, and Choulwoong. S. 2013. Development of the High Reliable Safety PLC for the Nuclear Power Plants. The transactions of The Korean Institute of Electrical Engineers, 62(1), 2013.1, 109--119.
[11]
US Nuclear Regulatory Comrmsssion. 2010. Regulatory Guide 5.71. Cyber Security Programs for Nuclear Facilities, US. Nuclar Regulatory Commission, Washington, DC, USA.
[12]
Koo. K. M, You. B. Y, Kim. T. W, and Lee. J. S. 2006. Development of Application Programming Tool for Safety Grade PLC (POSAFE-Q). Transactions of the Korean Nuclear Society Spring Meeting, Chuncheon, Korea.
[13]
Lee. M. K, Song. S. W, and Yun. D. H. 2012. Development and Application of POSAFE-Q PLC Platform. International Atomic Energy Agency, IAEA-CN-194.
[14]
Nuclear Energy Institute. 2017. NEI 13-10(rev.6). Cyber Security Control Assessments. Retrieved from https://www.nrc.gov/docs/ML1723/ML17234A615.pdf
[15]
Kwon. K. H, Kim. S. W, and Kim. I. K. 2018. Cyber Security for Direct Critical Digital Assets Life-cycle. Korean nuclear society.

Cited By

View all
  • (2024)Sustainable Energy Safety Management Utilizing an Industry-Relative Assessment of Enterprise Equipment Technical ConditionSustainability10.3390/su1602077116:2(771)Online publication date: 16-Jan-2024

Index Terms

  1. A Study on the Application of Technical Assessment Methodology (TAM) for CyberSecurity in Nuclear Power Plant

    Recommendations

    Comments

    Information & Contributors

    Information

    Published In

    cover image ACM Conferences
    ACM ICEA '20: Proceedings of the 2020 ACM International Conference on Intelligent Computing and its Emerging Applications
    December 2020
    219 pages
    ISBN:9781450383042
    DOI:10.1145/3440943
    Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than ACM must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected]

    Sponsors

    Publisher

    Association for Computing Machinery

    New York, NY, United States

    Publication History

    Published: 27 September 2021

    Permissions

    Request permissions for this article.

    Check for updates

    Author Tags

    1. cybersecurity assessment
    2. nuclear power plant
    3. technical assessment methodology

    Qualifiers

    • Research-article
    • Research
    • Refereed limited

    Funding Sources

    Conference

    ACM ICEA '20
    Sponsor:

    Contributors

    Other Metrics

    Bibliometrics & Citations

    Bibliometrics

    Article Metrics

    • Downloads (Last 12 months)15
    • Downloads (Last 6 weeks)1
    Reflects downloads up to 15 Feb 2025

    Other Metrics

    Citations

    Cited By

    View all
    • (2024)Sustainable Energy Safety Management Utilizing an Industry-Relative Assessment of Enterprise Equipment Technical ConditionSustainability10.3390/su1602077116:2(771)Online publication date: 16-Jan-2024

    View Options

    Login options

    View options

    PDF

    View or Download as a PDF file.

    PDF

    eReader

    View online with eReader.

    eReader

    Figures

    Tables

    Media

    Share

    Share

    Share this Publication link

    Share on social media