군용항공기 사이버보안에 대한 연구 및 발전방향

고기성¹ ; 장영현¹ ; 박인수² ; 고진환³^{, *}

1해군 전력분석시험평가단 감항인증실 전문군무경력관
2공군 52시험평가전대 감항인증실 전문군무경력관
3경상국립대학교 공과대학 전자공학과 교수

Research and Development Direction of Military Aircraft Cyber Security

Gi-Sung Ko¹ ; Yong-Hyun Jang¹ ; In-Soo Park² ; Jin-Hwan Koh³^{, *}

1Senior Manager, Office of Airworthiness, Force Analysis Test & Evaluation Group, ROK Navy
2Senior Manager, Office of Airworthiness, The 52nd Test & Evaluation Group, ROK Air Force
3Professor, Dept. of Electronic Engineering, Gyeongsang National University

Correspondence to: ^*Jin-Hwan Koh Department of Electronic Engineering, Gyeongsang National University, Jinju-si, Jinjudae-ro 501 Gyeongsangnam-do, 52828, Korea Tel: +82-55-772-1726 E-mail: jikoh@gnu.ac.kr

초록

현재 주요 선진국들은 적성국가 및 단체의 사이버공격에 대비하기 위해 역량을 집중하고 있다. 특히, 항공기는 사이버공격으로 추락 및 인명피해를 비롯한 심각한 문제가 발생할 수 있으므로 철저한 대비가 필요하다. 따라서 본 논문에서는 항공기 사이버보안 선진국인 미 해군의 사례를 알아보고 우리 해군 및 군용항공기에 적용할 수 있는 사이버보안 제도에 대한 연구 및 향후 발전방향을 제시하였다.

Abstract

Currently, major developed countries are concentrating their capabilities to prepare for cyber attacks by enemy countries and organizations. In particular, aircraft need to be thoroughly prepared because cyber attacks can cause serious problems, including falls and casualties. Therefore, in this paper, we investigated the cases of the U.S. Navy, an advanced aircraft cybersecurity country, and presented research on cyber security systems that can be applied to Korean Navy and military aircraft and future development directions.

Keywords:

Cyber Security, NAVAIR, MIL-HDBK-516C, AIR-4.0P

키워드:

사이버보안, 미 해군성 항공체계사령부, 미 해군성 항공체계사령부 감항당국

References

“주요국가의 사이버보안 정보공유 및 협력체계,” Monthly Issue of National Cyber Security, 제2020-05호, Vol. 99, p. 11.
오명호 외, “사이버전 개론 2nd Edition," 양서각, ISBN 978-89-5568-433-9, p. 6.
Joint Publication(JP) 1-02, Department of Defence Dictionary of Military and Associated Terms
Cybersecurity Policy, National Security Presidential Directive-54 / Homeland Security Presidential Directive 23, January 2008.
Cybersecurity Test and Evaluation Guidebook, Department of Defense, 2015.
CSFI, "CSFI ATC(Air traffic control) cyber security project," July 16, 2015.
In-Kyu Lim, Ja-Young Kang, "Security Problems in Aircraft Digital Network System and Cybersecurity Strategies," JANT, Dec. 2017, p. 636.
방위사업청 고시 제2021-1호, 군용항공기 표준감항인증기준, p. 629.
Geon-Hyeong Ko, Min-Su Park, Gi-Sung Ko, "A Study on the Institutional Development Plan of Unmannned Aircraft System Cyber Security," 2021 한국군사과학기술학회 종합학술대회 : 시험평가 부분.
홍병진, 항공무기체계 소프트웨어 사이버공격에 대한 작전영향성평가 방안, 2021.2, 아주대학교 박사학위논문.
In-Kyu Lim, Ja-Young Kang, " Security Problems in Aircraft Digital Network System and Cybersecurity Strategies", JANT, Dec. 2017, p. 634.
Mr.Troy Johnson, "Navy Cyber Resilience", 『USN Information warfare cybersecurity Division』, Feb. 2016.
James W. Over, Team Software process for Secure Systems Development, CMU Software Engineering Institute, Mar. 2002.
Microsoft Corporation, Microsoft Security Development Lifecycle(SDL), Version 5.2, Microsoft Corporation, P.167, May, 2012.
NIST SP 800-64(Rev.2), “Security Considerations in the System Development Life Cycle,” Oct. 2008.
백연상, 美무인기 포획 방법, 이란 엔지니어 주장 들어보니…, 2011.12.17., 동아일보. (https://www.donga.com/news/Inter/article/all/20111217/42677576/1, )