SCADA系統安全調查

SCADA System Security Survey

徐翊城(Yi-Cheng Hsu)

指導教授 ： 鄭伯炤

國立中正大學/工學院/通訊資訊數位學習碩士在職專班/碩士(2012年)

摘要

以監督控制與數據採集（SCADA）系統為核心的各項關鍵基礎建設，由於漏洞層出不窮，加上政治目的以及管理的問題而成為網路犯罪者攻擊目標。本研究中，我們對這些SCADA系統的安全議題（包括漏洞與事件回應管理循環）展開一系列調查，並且詳加審視，於整合觀點上提供一致的SCADA安全性，讓管理者或專家們能全面理解這些SCADA系統安全的防護建議，期望透過本研究初探，將這些安全威脅消弭。

關鍵字

網路恐怖主義 ； 縱深防禦 ； 關鍵基礎建設保護 ； SCADA系統安全

並列摘要

The supervisory control and data acquisition (SCADA) system is the core of the critical infrastructures, which becomes the target of cyber criminals due to the endless stream of vulnerability, political purpose and problems of management. In this study, we survey a series of the SCADA systems security issues (including vulnerability and incident response management cycle) and give a closer look at how to provide consistent SCADA security from the integration viewpoint. The security managers or specialists are able to have a comprehensive knowledge about SCADA system security protection recommendations and expect to eliminate security threats via this preliminary study.

並列關鍵字

Cyber Terrorism ； Defense-in-Deep ； SCADA System Security ； Critical Infrastructure Protection

參考文獻

[31] 樊國楨，資訊安全法制化初探之一：根基於美國聯邦資訊安全管理法，國立交通大學資訊管理研究所，中華民國100年10月。

[3] Identifying, Understanding and Analyzing Critical Infrastructure Interdependecies, IEEE Control Systems Magazine, December 2001.

[5] Ronald L. Krutz, Securing SCADA Systems, Wiley Publishing, Inc., 2006.

[7] Electric Power Research Institute (EPRI), http://my.epri.com/

[14] Kevin Poulsen, Slammer worm crashed Ohio nuke plant network, SecurityFocus 2003-08-19, http://www.securityfocus.com/news/6767